Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/07/2026, 10:25

General

  • Target
    OperaInstaller (1).exe
  • Size 178KB
  • Sample260710-mfxc8aaw2x
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 4 IoCs
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 15 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 56 IoCs
  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller (1).exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller (1).exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4360
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2572
      • C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=NTIwZTBjY2IzNGNmMmZkOWVmYzcwMzA2MjQxNTUxNGRjNjQ4ZjcxNjZhZWM4NmUxNzY5ZGExNDY0NjlmMDcyYjp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwidGltZXN0YW1wIjoiMTc4MzY3OTExNC4zNjAzIiwidXNlcmFnZW50IjoiT3BlcmEgSW5zdGFsbGVyLzEuMCIsInV0bSI6eyJjYW1wYWlnbiI6InNwb3RpZnlfb3BlcmEiLCJtZWRpdW0iOiJwYiIsInNvdXJjZSI6IndyayJ9LCJ1dWlkIjoiOWI4MmM5NTctNGM3Zi00Mzg1LWIzZmMtYjMzMGQzOGQ3ZTMyIn0=
        3⤵
        • Enumerates connected drives
        • Executes dropped EXE
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:3264
        • C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x2b4,0x2b8,0x2bc,0x290,0x2c0,0x7ff73ce7ad88,0x7ff73ce7ad94,0x7ff73ce7ada0
          4⤵
          • Executes dropped EXE
          PID:1376
        • C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:4232
        • C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=3264 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_20260710112516" --session-guid=35c866c9-9469-4a9a-b122-630606274496 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0C08000000000000
          4⤵
          • Enumerates connected drives
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:5388
          • C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff73ce7ad88,0x7ff73ce7ad94,0x7ff73ce7ada0
            5⤵
            • Executes dropped EXE
            PID:4088
          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe" --backend --initial-pid=3264 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161" --session-guid=35c866c9-9469-4a9a-b122-630606274496 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.34
            5⤵
            • Enumerates connected drives
            • Executes dropped EXE
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:2656
            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x2b8,0x2bc,0x2c0,0x294,0x2c4,0x7ff63c54ad88,0x7ff63c54ad94,0x7ff63c54ada0
              6⤵
              • Executes dropped EXE
              PID:5308
            • C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:4232
              • C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x684040,0x68404c,0x684058
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:1756
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:200
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xf44040,0xf4404c,0xf44058
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:1776
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:3756
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:3256
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                      10⤵
                      • Executes dropped EXE
                      PID:2720
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:1536
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                      10⤵
                      • Executes dropped EXE
                      PID:3016
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x274,0x2a4,0x2a8,0x28c,0x2ac,0x137c830,0x137c83c,0x137c848
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:1544
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:1560
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                        11⤵
                        • Executes dropped EXE
                        PID:4884
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:3212
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                        11⤵
                        • Executes dropped EXE
                        PID:1788
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4908
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                        11⤵
                        • Executes dropped EXE
                        PID:2756
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Adds Run key to start application
              • Drops file in Windows directory
              • Executes dropped EXE
              • Loads dropped DLL
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:1324
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                7⤵
                • Executes dropped EXE
                PID:3064
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,7683512523098480777,643248026086537443,262144 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2080 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1732
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1916,i,1145264006890844773,13668907913761374705,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                • Enumerates system info in registry
                PID:2568
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2496,i,9562199357563217765,11448998421696636301,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2508 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2108
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3384,i,7549553108684408601,14427291400445177262,2097152 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3508 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5288
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4248,i,17400778085148419018,7648626649514223736,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=2968 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2208
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4268,i,9449213435566953534,7625317086259414811,2097152 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4304 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2464
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4620,i,10480187014614492002,1207977294161746604,2097152 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4672 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:4388
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4900,i,10204979856527842393,11767518144450079787,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4860 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:808
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4260,i,11922360262937979637,17597027024892663507,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4264 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:2740
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5248,i,16995527403126298464,2369131979981699780,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=1856 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6240
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5392,i,3440406289166471576,893793206274644496,2097152 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5452 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:4628
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\additional_file2.tmp"
              6⤵
              • Adds Run key to start application
              • Drops file in Windows directory
              • Executes dropped EXE
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6044
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                7⤵
                • Executes dropped EXE
                PID:6148
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,10764767989972721210,17185695313573924549,262144 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2096 /prefetch:2
                7⤵
                • Executes dropped EXE
                PID:6548
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1948,i,13997506528295504286,353807811401481174,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2132 /prefetch:11
                7⤵
                • Executes dropped EXE
                • System Time Discovery
                • Enumerates system info in registry
                PID:6804
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2488,i,14411170459914419214,6123539396634163811,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2504 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2780
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3836,i,5527250822370969749,14907468462546751927,2097152 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4120 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:7208
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3956,i,163564410665668351,1134027276725292100,2097152 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4164 /prefetch:9
                7⤵
                  PID:7220
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3240,i,14349380547977103332,460623776271411944,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4144 /prefetch:14
                  7⤵
                  • Executes dropped EXE
                  PID:7216
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4036,i,16053765375367268817,7239723476533591313,2097152 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4184 /prefetch:9
                  7⤵
                    PID:7228
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3896,i,9789961462202786941,6707537488976952413,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3188 /prefetch:12
                    7⤵
                    • Executes dropped EXE
                    • Enumerates system info in registry
                    PID:7408
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4136,i,1757572263331458736,16572867826933287095,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5088 /prefetch:14
                    7⤵
                    • Executes dropped EXE
                    • Enumerates system info in registry
                    PID:7428
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5076,i,4322505284344197538,6843720063342109613,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5228 /prefetch:14
                    7⤵
                    • Executes dropped EXE
                    • Enumerates system info in registry
                    PID:7736
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                  6⤵
                  • Adds Run key to start application
                  • Drops file in Windows directory
                  • Checks processor information in registry
                  • Modifies registry class
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                  • Suspicious use of AdjustPrivilegeToken
                  • Suspicious use of SetWindowsHookEx
                  PID:6304
                  • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x2ac,0x2b0,0x2b4,0x2a8,0x2b8,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                    7⤵
                      PID:7696
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,2948728509467138498,14195152787008360430,262144 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2028 /prefetch:2
                      7⤵
                      • Enumerates system info in registry
                      PID:8180
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1940,i,13179573018366717975,3499748245265968355,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2068 /prefetch:11
                      7⤵
                      • System Time Discovery
                      • Enumerates system info in registry
                      PID:6760
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2508,i,7875911338525921665,15194578031875370139,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2712 /prefetch:13
                      7⤵
                      • Enumerates system info in registry
                      PID:6776
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3192,i,3415375604312930305,15264376167442489666,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3180 /prefetch:14
                      7⤵
                        PID:7888
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3200,i,3341374811704688513,1539559009395356409,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3236 /prefetch:14
                        7⤵
                          PID:7720
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3212,i,7801210771918825760,4388069795330485544,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3256 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:6900
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3232,i,6576865027926900541,17035949724598162077,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3320 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:7896
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3284,i,17095945675168988091,4821236113255637713,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3340 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:5776
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3296,i,16405079836410192081,2884746669678037291,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3360 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:6524
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3308,i,1924294624494166372,7836159889775989474,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3380 /prefetch:14
                          7⤵
                            PID:6840
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3528,i,11432609998833886477,1868249054090134818,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3648 /prefetch:1
                            7⤵
                            • Enumerates system info in registry
                            PID:3180
                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_gx_splash.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                            7⤵
                            • Modifies registry class
                            • Suspicious use of AdjustPrivilegeToken
                            PID:6380
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4708,i,16505029272207612153,7089256679614804936,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4720 /prefetch:9
                            7⤵
                              PID:4080
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4880,i,2127628337722496289,14613984103393220287,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4892 /prefetch:1
                              7⤵
                              • Enumerates system info in registry
                              PID:7016
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5056,i,12143715408433279382,7299474966563653896,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5088 /prefetch:1
                              7⤵
                                PID:2236
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5100,i,18052828840589066247,13791581488051218780,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5132 /prefetch:1
                                7⤵
                                  PID:6592
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5712,i,10866594994772548273,14766910695812514690,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5928 /prefetch:9
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:3432
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6652,i,14074833282054997359,1454072676364797587,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6728 /prefetch:9
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:5608
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6780,i,15526336907465938369,18282438791195459017,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6784 /prefetch:9
                                  7⤵
                                    PID:5104
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6584,i,9057568984585736707,5520246542701428477,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6460 /prefetch:14
                                    7⤵
                                      PID:7748
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5048,i,1814433155643391647,8127281488853665348,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=4712 /prefetch:14
                                      7⤵
                                        PID:7664
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6388,i,13832587934229483915,16193025403770460348,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7340 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:7964
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6580,i,4095792474970660384,8751662719995790032,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6416 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:8016
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5852,i,2194192192989740520,16087867839673742410,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7184 /prefetch:14
                                        7⤵
                                          PID:6804
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6488,i,1865752652929203590,10417616834755594171,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6456 /prefetch:14
                                          7⤵
                                            PID:7288
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6512,i,4105366641534099177,15913889471858258217,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7948 /prefetch:14
                                            7⤵
                                              PID:7340
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7892,i,16233488235465158927,8193821119851241683,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7968 /prefetch:14
                                              7⤵
                                              • Enumerates system info in registry
                                              PID:7444
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7904,i,1156723066034746676,7259706900302818048,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7988 /prefetch:14
                                              7⤵
                                                PID:7448
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7912,i,1678368308149875331,9055257023511524065,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8032 /prefetch:14
                                                7⤵
                                                  PID:7468
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7924,i,821985677429807370,6391066924406187690,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8068 /prefetch:14
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:7924
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7936,i,226981374212803110,5626180783670600015,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8092 /prefetch:14
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:6532
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8008,i,10108869550454512465,3354706774610281070,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8724 /prefetch:14
                                                  7⤵
                                                    PID:7360
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8924,i,16117233931767965219,2882009887283085866,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8912 /prefetch:14
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:1508
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6440,i,18015591371883615369,13595462183448736721,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9180 /prefetch:14
                                                    7⤵
                                                      PID:4732
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8940,i,3379301310088211627,4976135969219987250,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9000 /prefetch:9
                                                      7⤵
                                                        PID:6332
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8752,i,13284770190584493082,8275641308118900793,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8768 /prefetch:12
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:5164
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9432,i,10961214638651252394,2525450922261006140,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9504 /prefetch:1
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:6064
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9760,i,3002785661747806257,7983177800179889732,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9784 /prefetch:14
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:4332
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9732,i,15765690896046241817,1821838480508421475,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9776 /prefetch:14
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:7008
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10072,i,12877620943127980196,1811507849418523936,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10020 /prefetch:14
                                                        7⤵
                                                          PID:2396
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8972,i,17872095376993454562,12572183673376610991,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=8964 /prefetch:14
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:8480
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10372,i,610662313812042316,7839082661161940494,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10428 /prefetch:14
                                                          7⤵
                                                            PID:8704
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                            7⤵
                                                              PID:9084
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff70add8860,0x7ff70add886c,0x7ff70add8878
                                                                8⤵
                                                                  PID:7496
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10892,i,15866265918547767219,16418937699190130116,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11000 /prefetch:1
                                                                7⤵
                                                                  PID:9120
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11088,i,1751016642185854904,11568001061428737626,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11096 /prefetch:14
                                                                  7⤵
                                                                    PID:9204
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7984,i,18246535683240567367,9815854751083367071,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=8692 /prefetch:14
                                                                    7⤵
                                                                      PID:7484
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11364,i,18434255653580985625,10317345228511168896,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=8664 /prefetch:14
                                                                      7⤵
                                                                        PID:2600
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11488,i,9284487274547339274,17507350628686324220,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11500 /prefetch:14
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:7428
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3952,i,9166332789466531022,2583164876058724622,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3960 /prefetch:14
                                                                        7⤵
                                                                          PID:4388
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6748,i,10651820183321161508,16474657290663161242,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=3892 /prefetch:14
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:3920
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3432,i,13341795834124243569,6815289769776867097,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3252 /prefetch:14
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:8252
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11416,i,7947233776984811680,5214032362632164737,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11404 /prefetch:14
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:8328
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5432,i,12024288373901311802,230372946180985419,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=5300 /prefetch:14
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:6876
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3796,i,16890605464007612825,4567720639386411461,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=3772 /prefetch:14
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:8980
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=9928,i,14806301790153102133,14492222156671030320,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=9964 /prefetch:9
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:7268
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8388,i,17537338012411634916,11161375915382199401,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8464 /prefetch:14
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:9184
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9188,i,542807167359473548,11866249963761698740,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=9924 /prefetch:14
                                                                          7⤵
                                                                            PID:6652
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7260,i,5210547978805820791,17470735035982340493,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=7336 /prefetch:14
                                                                            7⤵
                                                                            • Enumerates system info in registry
                                                                            PID:9144
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9208,i,17735663714457268041,1914666612562776893,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=11500 /prefetch:14
                                                                            7⤵
                                                                              PID:5556
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8676,i,16182640151781611754,15686107628008646209,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=4712 /prefetch:14
                                                                              7⤵
                                                                              • Enumerates system info in registry
                                                                              PID:3036
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6888,i,8663050135655351216,16658427814900467205,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=5448 /prefetch:14
                                                                              7⤵
                                                                                PID:8992
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7896,i,8703929266819704031,15932214336671742461,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3292 /prefetch:14
                                                                                7⤵
                                                                                • Enumerates system info in registry
                                                                                PID:7664
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=3480,i,9779721506502511145,10085746119379979787,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=3440 /prefetch:9
                                                                                7⤵
                                                                                • Enumerates system info in registry
                                                                                PID:6532
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=5440,i,11904076275080905853,1571078051997524709,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=11428 /prefetch:9
                                                                                7⤵
                                                                                  PID:6272
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=11396,i,14769881381407808637,488556455236098415,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8072 /prefetch:9
                                                                                  7⤵
                                                                                  • Enumerates system info in registry
                                                                                  PID:8984
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=3888,i,1202045931833919200,11971993394074561537,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=5844 /prefetch:9
                                                                                  7⤵
                                                                                    PID:9128
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=6944,i,8758131290118066631,9413842487731660417,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=3956 /prefetch:1
                                                                                    7⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:7800
                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                                              4⤵
                                                                              • Executes dropped EXE
                                                                              • System Location Discovery: System Language Discovery
                                                                              PID:1020
                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe
                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe" --version
                                                                              4⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • System Location Discovery: System Language Discovery
                                                                              • Enumerates system info in registry
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:4528
                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe
                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x684040,0x68404c,0x684058
                                                                                5⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:5784
                                                                      • C:\Windows\system32\svchost.exe
                                                                        C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                        1⤵
                                                                          PID:1460
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                          1⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • System Location Discovery: System Language Discovery
                                                                          • Suspicious use of FindShellTrayWindow
                                                                          • Suspicious use of SendNotifyMessage
                                                                          • Suspicious use of WriteProcessMemory
                                                                          PID:5008
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Enumerates system info in registry
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:4868
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              PID:1296
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Enumerates system info in registry
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:4772
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              PID:3932
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x2c0,0x2c4,0x2c8,0x29c,0x2cc,0x137c830,0x137c83c,0x137c848
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • System Location Discovery: System Language Discovery
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:1660
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:4244
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                                                                                4⤵
                                                                                • Executes dropped EXE
                                                                                PID:4944
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • Enumerates system info in registry
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:3704
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                                                                                4⤵
                                                                                • Executes dropped EXE
                                                                                PID:5632
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • Enumerates system info in registry
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:4140
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                                                                                4⤵
                                                                                • Executes dropped EXE
                                                                                PID:6320
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                          1⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • Suspicious use of WriteProcessMemory
                                                                          PID:5544
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd62280
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            PID:4972
                                                                        • C:\Windows\system32\wbem\unsecapp.exe
                                                                          C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                          1⤵
                                                                            PID:6464
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                            1⤵
                                                                              PID:9088
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff70add8860,0x7ff70add886c,0x7ff70add8878
                                                                                2⤵
                                                                                  PID:8540
                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                  2⤵
                                                                                    PID:8836
                                                                                • C:\Windows\system32\svchost.exe
                                                                                  C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                  1⤵
                                                                                    PID:1548

                                                                                  Network

                                                                                        MITRE ATT&CK Enterprise v16

                                                                                        Replay Monitor

                                                                                        Loading Replay Monitor...

                                                                                        Downloads

                                                                                        8B2B9A00839EED1DFDCCC3BFC2F5DF12

                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                        • Size 1KB
                                                                                        • SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        B46811C17859FFB409CF0E904A4AA8F8

                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                                                                        • Size 528B
                                                                                        • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                        • Size 471B
                                                                                        • SHA256 e15fde1c644488d02e6a4274f3a9500140feb05ccda9f2b57af35aacb5e7d347
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        8B2B9A00839EED1DFDCCC3BFC2F5DF12

                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                                        • Size 174B
                                                                                        • SHA256 f7b3d39d7f13f67073408fc778f807d432d39b624874fc64386903160339393c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        B46811C17859FFB409CF0E904A4AA8F8

                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                                                                        • Size 170B
                                                                                        • SHA256 d678740e32898a37de2082991deec3094af52058ede369e62c5db532f684b9ca
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                        • Size 416B
                                                                                        • SHA256 1c114e01d5650aa7892b7d1208bfb329aa48ba7cfccd7e99c73f11afd06dd0d7
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        data_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                                        • Size 44KB
                                                                                        • SHA256 1c3e06e4141577a629e4de0f7ee457a77f2668a39769ff3f991c1bc6b5d69341
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        data_2

                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                                        • Size 8KB
                                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                        data_3

                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                                        • Size 8KB
                                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                        f_000001

                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                                        • Size 162KB
                                                                                        • SHA256 5e0d7453083183ba6e075d3c92e73e9c9e6f315b6ab0237de08bf2873f141c2f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        133.0.5932.34.manifest

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\133.0.5932.34.manifest
                                                                                        • Size 225B
                                                                                        • SHA256 263b6d3a0906d766fb973078f348a9d3efe543a7e58f4c9fb209bacf32500f21
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        150x150Logo.scale-100.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-100.png
                                                                                        • Size 1KB
                                                                                        • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        150x150Logo.scale-100_contrast-white.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                        • Size 1KB
                                                                                        • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        150x150Logo.scale-140.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-140.png
                                                                                        • Size 1KB
                                                                                        • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        150x150Logo.scale-140_contrast-white.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                        • Size 1KB
                                                                                        • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        150x150Logo.scale-180.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-180.png
                                                                                        • Size 1KB
                                                                                        • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        150x150Logo.scale-180_contrast-white.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                        • Size 1KB
                                                                                        • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        150x150Logo.scale-80.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-80.png
                                                                                        • Size 827B
                                                                                        • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        150x150Logo.scale-80_contrast-white.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                        • Size 799B
                                                                                        • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        70x70Logo.scale-100.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-100.png
                                                                                        • Size 781B
                                                                                        • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        70x70Logo.scale-100_contrast-white.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                        • Size 752B
                                                                                        • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        70x70Logo.scale-140.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-140.png
                                                                                        • Size 991B
                                                                                        • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        70x70Logo.scale-140_contrast-white.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                        • Size 865B
                                                                                        • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        70x70Logo.scale-180.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-180.png
                                                                                        • Size 1KB
                                                                                        • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        70x70Logo.scale-180_contrast-white.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                        • Size 1KB
                                                                                        • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        70x70Logo.scale-80.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-80.png
                                                                                        • Size 590B
                                                                                        • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        70x70Logo.scale-80_contrast-white.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                        • Size 519B
                                                                                        • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        assistant_package

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\assistant_package
                                                                                        • Size 3.6MB
                                                                                        • SHA256 2657d6a8131dd28868151a5f268061b61a735f3628ec9def2a0d910b870a8c36
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        d3dcompiler_47.dll

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\d3dcompiler_47.dll
                                                                                        • Size 4.5MB
                                                                                        • SHA256 849d98787d901b52a5f48c96b6bb0d8b4931bcae8478d93dc0be8662d4480ad3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        dxcompiler.dll

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\dxcompiler.dll
                                                                                        • Size 24.4MB
                                                                                        • SHA256 0c6d2ef8c5f6f67a193599e26ea2d8e2ba3f7265cb33fecbdc267e298df68aa8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        dxil.dll

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\dxil.dll
                                                                                        • Size 1.5MB
                                                                                        • SHA256 e645ad7d3e725216726359ccfbdfcb4206be5799a5deb3a39d79c66047801029
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        files_list

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\files_list
                                                                                        • Size 6KB
                                                                                        • SHA256 65ae2b1708851d551a013ed7ec11e3a0ddeb737430aa62a469b5af3e0fac5fca
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        headless_command_resources.pak

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\headless_command_resources.pak
                                                                                        • Size 2KB
                                                                                        • SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        icudtl.dat

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\icudtl.dat
                                                                                        • Size 10.4MB
                                                                                        • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        installer.exe

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe
                                                                                        • Size 8.3MB
                                                                                        • SHA256 cd7570b5356bbfc8dd323d6cf68cbab8333631e5fe591779407d1edc0999b580
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        installer_helper_64.exe

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer_helper_64.exe
                                                                                        • Size 639KB
                                                                                        • SHA256 3f8f95b35bda9cf3432fd3687d54f61c1854f82e0d30250360db799ccaed2a48
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        libEGL.dll

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\libEGL.dll
                                                                                        • Size 492KB
                                                                                        • SHA256 430b9680bd3cd33ba7047a068d0e3d528970d3ac682f75d0cfcefece5ba10bfa
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        libGLESv2.dll

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\libGLESv2.dll
                                                                                        • Size 7.5MB
                                                                                        • SHA256 1532791918857fc8ae1d076a05114bf11e9ed9c4a3149d6eb35d2fea1033a430
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        bg.pak

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\bg.pak
                                                                                        • Size 1009KB
                                                                                        • SHA256 5c093d5331235d36141d943b4ccf33e73af1c860b9527304ce2a80947f6b9f79
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        bn.pak

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\bn.pak
                                                                                        • Size 1.3MB
                                                                                        • SHA256 3143ad5b348c3c583c2d8bb29217db4b21ec4dcc9182679561f0215199a67776
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        ca.pak

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\ca.pak
                                                                                        • Size 635KB
                                                                                        • SHA256 19dabe0db6bd7ab457a72fb2fc4c61f0ada1469061d053af047b31661b25720c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        cs.pak

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\cs.pak
                                                                                        • Size 634KB
                                                                                        • SHA256 1fab3e2f35aba0dc75b35fc8f7d4abb00feafac83fed0e49624b07e90969a7ea
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        da.pak

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\da.pak
                                                                                        • Size 585KB
                                                                                        • SHA256 c917ca57a598f8743b6dd768c09c1b0c6948a6a7af26452590d9f9005ac4f7ad
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        installer_prefs.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                        • Size 1KB
                                                                                        • SHA256 ecab6a9b95346a184f225c47fe6c5e5935d31f0c024a5872f2866705af7d2054
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Opera Browser.lnk

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\Opera Browser.lnk
                                                                                        • Size 1KB
                                                                                        • SHA256 590d19de0be7f217c7c7326b9b91833f9b6c610feab98eff5b93363d7733afe1
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        additional_file0.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\additional_file0.tmp
                                                                                        • Size 2.8MB
                                                                                        • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        assistant_installer.exe

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe
                                                                                        • Size 2.4MB
                                                                                        • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        dbgcore.DLL

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\dbgcore.DLL
                                                                                        • Size 222KB
                                                                                        • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        dbghelp.dll

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\dbghelp.dll
                                                                                        • Size 1.8MB
                                                                                        • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        installer_prefs_include.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\installer_prefs_include.json
                                                                                        • Size 224B
                                                                                        • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        installer_prefs_include.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\installer_prefs_include.json
                                                                                        • Size 239B
                                                                                        • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        installer_prefs_include.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\installer_prefs_include.json
                                                                                        • Size 1KB
                                                                                        • SHA256 e13f7e29764f8fd7f53a7150437b49c5040774cd42c9cb728a47233172f8dd56
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        19316148-9b00-4e79-ac3d-c2a988c1705c.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\19316148-9b00-4e79-ac3d-c2a988c1705c.tmp
                                                                                        • Size 14KB
                                                                                        • SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        installer.exe

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe
                                                                                        • Size 8.3MB
                                                                                        • SHA256 a2e8e9b2e04fe41207c6327b761507631ee22a57e9f84fb1da99760b2d372d65
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        OpInst.exe

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                                        • Size 3.1MB
                                                                                        • SHA256 445ee51b791d59bbcec5f14d314607fd1d7b3aa689a159fea52557ed94f128ad
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        bg.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                                        • Size 224KB
                                                                                        • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        e1499166-8775-43a8-a8a9-1a920062e43f.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\e1499166-8775-43a8-a8a9-1a920062e43f.tmp
                                                                                        • Size 2.6MB
                                                                                        • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        favicon_opera_one.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1324_145212335\CRX_INSTALL\favicon_opera_one.png
                                                                                        • Size 2KB
                                                                                        • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        reader_mode.js

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1324_145212335\CRX_INSTALL\reader_mode.js
                                                                                        • Size 112KB
                                                                                        • SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        spotify_frame_interceptor.js

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1324_145212335\CRX_INSTALL\spotify_frame_interceptor.js
                                                                                        • Size 5KB
                                                                                        • SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        messages.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6044_706326180\CRX_INSTALL\_locales\en\messages.json
                                                                                        • Size 401B
                                                                                        • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        messages.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6044_706326180\CRX_INSTALL\_locales\en\messages.json
                                                                                        • Size 387B
                                                                                        • SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        messages.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6044_706326180\CRX_INSTALL\_locales\es\messages.json
                                                                                        • Size 424B
                                                                                        • SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        preview.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6044_706326180\CRX_INSTALL\wallpaper\preview.png
                                                                                        • Size 464KB
                                                                                        • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        messages.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1188972477\CRX_INSTALL\_locales\en\messages.json
                                                                                        • Size 396B
                                                                                        • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        messages.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1188972477\CRX_INSTALL\_locales\en\messages.json
                                                                                        • Size 429B
                                                                                        • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Icon_Light_Neutral.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1188972477\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                                                        • Size 962B
                                                                                        • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        manifest.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1188972477\CRX_INSTALL\manifest.json
                                                                                        • Size 1KB
                                                                                        • SHA256 b655477791478d7f6f560c740fcd142b504c7f3a73093031a3257abc43fd95ce
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        popup.js.LICENSE.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1188972477\CRX_INSTALL\popup.js.LICENSE.txt
                                                                                        • Size 1KB
                                                                                        • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        manifest.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1378458162\CRX_INSTALL\manifest.json
                                                                                        • Size 1KB
                                                                                        • SHA256 8fb5674e49dc503b27e5959880938cd58ac16b8b1b96cb5e5274dcd88c9ea31f
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Icon_Light_Neutral.png

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_163732609\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                        • Size 2KB
                                                                                        • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        rules.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_163732609\CRX_INSTALL\rules.json
                                                                                        • Size 839B
                                                                                        • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        settings.dat

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                        • Size 40B
                                                                                        • SHA256 32db288418be2795e84d042f338fcdaa8cbe7ecd40c72f1ee166aa7c0592eeb1
                                                                                        • MD5 SHA1 SHA512

                                                                                        08f91a6a-a7cb-4d0d-ba99-3c2f2abd80dc.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\08f91a6a-a7cb-4d0d-ba99-3c2f2abd80dc.tmp
                                                                                        • Size 2B
                                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                        • MD5 SHA1 SHA512

                                                                                        0c85b3fc-9c71-4a56-9e0c-54313fde5c75.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\0c85b3fc-9c71-4a56-9e0c-54313fde5c75.tmp
                                                                                        • Size 4KB
                                                                                        • SHA256 75e404996a17c8e3a2a45ba253fd6b38a6c76edc123aa470e4a1f3a109460ad0
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        2c4cb646-1eb1-4edc-872a-7a5568524f82.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\2c4cb646-1eb1-4edc-872a-7a5568524f82.tmp
                                                                                        • Size 203B
                                                                                        • SHA256 a598a349ecabdd187116f329200358e94cb3ff93abacb12e7b74342aaad99bf8
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        40272e30-6c9a-405e-b612-e4eba4218ab3.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\40272e30-6c9a-405e-b612-e4eba4218ab3.tmp
                                                                                        • Size 608KB
                                                                                        • SHA256 e45a60e55506cafe908d45c6f218d919223af68bf235892caa6ad14ccea3dd0b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        42ee9fe6-b9e4-4928-a294-9c72ab910e6d.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\42ee9fe6-b9e4-4928-a294-9c72ab910e6d.tmp
                                                                                        • Size 10KB
                                                                                        • SHA256 49c78b2b24cdef72f4089694e2e7885131672fcea68ecc96b09449bf80cc93cb
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        83408ded-2e87-4f04-90db-9465a3fb0d9c.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\83408ded-2e87-4f04-90db-9465a3fb0d9c.tmp
                                                                                        • Size 203B
                                                                                        • SHA256 9458d8282fd6c38deb4882916431ffbc59689deb68011637d0d8a6234cd80d12
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Bookmarks

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                        • Size 36KB
                                                                                        • SHA256 74ff9216881de8b6bbb44917c53adb1cd4acccadcde2e59aec9786b491c0bafe
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        BookmarksExtras

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                        • Size 256KB
                                                                                        • SHA256 558dc9ed8b18b6a1c927c15f494a0e20405bc2591660ecd234e7c0429ae05bcc
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        7143a158-bf4a-4273-9022-92cdc5654e30.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\7143a158-bf4a-4273-9022-92cdc5654e30.tmp
                                                                                        • Size 48B
                                                                                        • SHA256 1b0e1a15db9c4df8aaefcd70044c504365aa48139ce92a4b3c19c44bb49c8b05
                                                                                        • MD5 SHA1 SHA512

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 264B
                                                                                        • SHA256 0b619a5bae178029b9e45c3ba93b55b8b2333ba6543d5d15e26de30ad6a13e8c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 264B
                                                                                        • SHA256 62d6834488792d7383e0df27e4e138c95f54ab3f5b77732cc6c7f11133cf4caf
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 840B
                                                                                        • SHA256 9d494790d2d8c6263e5aa17d8e8d4f8bc6cb9398f2760c55a7010b09b2483106
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        MANIFEST-000001

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                                        • Size 41B
                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                        • MD5 SHA1 SHA512

                                                                                        cos-bridge.js

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                                                                        • Size 173B
                                                                                        • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        cos-content.js

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                                                                        • Size 502B
                                                                                        • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        main.js

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                                                                        • Size 47KB
                                                                                        • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        manifest.json

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_1\manifest.json
                                                                                        • Size 1KB
                                                                                        • SHA256 028acb85f69bedc88c9f9ce97bf0c31615f83032d90de1b7017614a389648b71
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        logo_128.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_128.png
                                                                                        • Size 7KB
                                                                                        • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        logo_16.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_16.png
                                                                                        • Size 653B
                                                                                        • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        logo_32.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_32.png
                                                                                        • Size 1KB
                                                                                        • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        logo_48.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_48.png
                                                                                        • Size 2KB
                                                                                        • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        logo_64.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_64.png
                                                                                        • Size 2KB
                                                                                        • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        service-worker-loader.js

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\service-worker-loader.js
                                                                                        • Size 49B
                                                                                        • SHA256 4409861989b435ae91707e5c01965f2a6b00d0822da0bcbf6e8a6d1a8df6fc2d
                                                                                        • MD5 SHA1 SHA512

                                                                                        background.js

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                        • Size 86KB
                                                                                        • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Icon_Dark_Active.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Active.png
                                                                                        • Size 2KB
                                                                                        • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Icon_Dark_Available_Red.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Red.png
                                                                                        • Size 2KB
                                                                                        • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Icon_Dark_Available_Yellow.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Yellow.png
                                                                                        • Size 2KB
                                                                                        • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Icon_Light_Neutral.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                        • Size 2KB
                                                                                        • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Icon_Dark_Active.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Active.png
                                                                                        • Size 883B
                                                                                        • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Icon_Dark_Available_Red.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Red.png
                                                                                        • Size 895B
                                                                                        • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Icon_Dark_Available_Yellow.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Yellow.png
                                                                                        • Size 895B
                                                                                        • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Icon_Light_Neutral.png

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Light_Neutral.png
                                                                                        • Size 932B
                                                                                        • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.html

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\index.html
                                                                                        • Size 222B
                                                                                        • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        computed_hashes.json

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\computed_hashes.json
                                                                                        • Size 73KB
                                                                                        • SHA256 6981ab0e6f2328f8b6f583cee4b68ca6cb8359e800387774dac97df21043e0c4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        verified_contents.json

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\verified_contents.json
                                                                                        • Size 6KB
                                                                                        • SHA256 7962ed372049509eb040645a6a96d37c60414647f7d7c6852d20e183d8fca45d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        manifest.json

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\manifest.json
                                                                                        • Size 1KB
                                                                                        • SHA256 4dc8cf07548e8abda9ccaed742ce955a4cce2b524abf4a2a73a5411c22aa567c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        367efdb6-12f3-44e9-a026-b3a443918947.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\367efdb6-12f3-44e9-a026-b3a443918947.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        73d7908a-316f-4091-83e5-b7b8c6052214.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\73d7908a-316f-4091-83e5-b7b8c6052214.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        87c61d4e-94a2-46ff-a061-5b0b9365afd8.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\87c61d4e-94a2-46ff-a061-5b0b9365afd8.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 7253d2ef4fe5c071a564e8da1a9bf035b2a365d2f71fbdec15ac5d2b493c33de
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        c70a3f09-a576-4e2f-ba40-93092c13eec4.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\c70a3f09-a576-4e2f-ba40-93092c13eec4.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        cd17f56d-cadc-435f-b520-d83b803d6151.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\cd17f56d-cadc-435f-b520-d83b803d6151.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        ed58b7fd-5f47-4ec7-9242-36952349c78e.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\ed58b7fd-5f47-4ec7-9242-36952349c78e.tmp
                                                                                        • Size 27KB
                                                                                        • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        14155274-2bb1-4f5a-88ed-b3b3178abd4b.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\14155274-2bb1-4f5a-88ed-b3b3178abd4b.tmp
                                                                                        • Size 2B
                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                        • MD5 SHA1 SHA512

                                                                                        Network Persistent State

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                        • Size 111B
                                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        bb756548-5441-4a78-94a5-147bc8d70483.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\bb756548-5441-4a78-94a5-147bc8d70483.tmp
                                                                                        • Size 61B
                                                                                        • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                        • Size 16KB
                                                                                        • SHA256 28de9b41de5f62b71eeec0359800dd5183273d1df1ec2a164e083fcf58f1a423
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                        • Size 15KB
                                                                                        • SHA256 766949599b4f468323c9a89d54244435fab7fd9863378971c754d5f683242463
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                        • Size 15KB
                                                                                        • SHA256 5641aae1d074db0e531fd2efdd2031f3dfce59e74454985559c04cd2aee1a1ab
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                        • Size 10KB
                                                                                        • SHA256 3b58ce2ae2889a37d9ad2a00690ad3db9d608d62e24e19f2268ee95fbddff1cd
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Secure Preferences

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                        • Size 120KB
                                                                                        • SHA256 8dd05f84949a142e9f75c12e432b03ad2cf36ecaa1311842ba13f0eb530b5ed6
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Secure Preferences

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                        • Size 91KB
                                                                                        • SHA256 aa6d487214095ba0bddc6de351eb4790ad17fa43b35e87abeb6cb70800258979
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Secure Preferences

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                        • Size 91KB
                                                                                        • SHA256 5cf37f1b070c05727d24ae6e12a9883892d894996fd91cfc22f378da9f2cb44a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        033305d3-4802-4536-a11e-01f3869f82ab.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\033305d3-4802-4536-a11e-01f3869f82ab.tmp
                                                                                        • Size 72B
                                                                                        • SHA256 0a00662ef833c0b0ef311be08b1d87d3086c72323a18e198a42b81fe63c2b337
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 48B
                                                                                        • SHA256 affd3bb02c91126da3467a71b8b43e3dd9624aef4529f1a75a68bf93a15fcef7
                                                                                        • MD5 SHA1 SHA512

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 72B
                                                                                        • SHA256 33fc85d6083c68dfe79bd232f77c3282da75864323a307f0e3c6de0760a78c89
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 360B
                                                                                        • SHA256 fd549020554968370b38590a9064d1dd8bfd1ab12f8e9982b22639788dd1ce48
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        2753c78f-6dd8-4c27-80e3-2db506c4d2f8.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\2753c78f-6dd8-4c27-80e3-2db506c4d2f8.tmp
                                                                                        • Size 381B
                                                                                        • SHA256 2cd9c587e59eac2f9f079d1b9c4da68e8583630329d2d43f7f5579021376e65b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        4e24fa14-2038-4b9e-8785-95068eacee32.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\4e24fa14-2038-4b9e-8785-95068eacee32.tmp
                                                                                        • Size 13KB
                                                                                        • SHA256 d6fddc2633d3215845abd2811542b925555a1f7d9145d3712d6947c407fe3ca4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        ac51f0ff-936a-48e1-a61c-0eeb34d2e38c.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\ac51f0ff-936a-48e1-a61c-0eeb34d2e38c.tmp
                                                                                        • Size 13KB
                                                                                        • SHA256 b0c12dfcd09b99318b0e5c973260d846a9f2cfacfb3c1d93c334a4d466ff921a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        be0a57c8-052d-485a-9044-7641983e63c6.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\be0a57c8-052d-485a-9044-7641983e63c6.tmp
                                                                                        • Size 381B
                                                                                        • SHA256 fedbdd0f038ac2bc73afbc770c77ae9e7977f65af9df87cbbd2a363099f84e32
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        d123eb8b-b3d7-41d8-877a-931eb4ffc275.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\d123eb8b-b3d7-41d8-877a-931eb4ffc275.tmp
                                                                                        • Size 381B
                                                                                        • SHA256 0254fa2a53cf68ee5acd04f13e61713f371ce083f3f916b38e3e8a2fc8e7e332
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
                                                                                        • Size 637B
                                                                                        • SHA256 b15da4d098e8efb842666ea439112ea049127af99852a998bc01a7571d4c577b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
                                                                                        • Size 637B
                                                                                        • SHA256 33efe72f961e60bbd3002fa1b42f5917e29953204fdb99d8d5a4ea7eb9a63708
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
                                                                                        • Size 493B
                                                                                        • SHA256 b6e553b50adf1af3d559d966d0e73b774b437690e1f8d25b4f4fc1de1bb1f13e
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
                                                                                        • Size 845B
                                                                                        • SHA256 c2536d57759b1f8d22b6ef9707af2912d7249f69fb1ed5afff2bf994c52f4344
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
                                                                                        • Size 637B
                                                                                        • SHA256 8fce872cf5a83126e44c432e8f5325c268a5d57807e3a4622ef9a79731369c1b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
                                                                                        • Size 797B
                                                                                        • SHA256 874b8e5bd96f0da1a4db8d585697c7ad757ee444a39489ecf7b1569afd0100d5
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
                                                                                        • Size 621B
                                                                                        • SHA256 ba651a5784db2ee0eecfb20343cdcb958a3855d2985656dbbfb93a5ef12cad1a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_7341348e-845d-4d48-95bb-491d8e3f1696.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 06f778f882fa39959dfa89ab7f4465c8684b2c2b6664d26936fd6c0792a586e6
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_7341348e-845d-4d48-95bb-491d8e3f1696.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
                                                                                        • Size 493B
                                                                                        • SHA256 7213ceb633673d3268bbfee83adf385f8d3c244ba6f4a27e02638bb3625c1e09
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_7341348e-845d-4d48-95bb-491d8e3f1696.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
                                                                                        • Size 605B
                                                                                        • SHA256 3794a7ec02c4d6064cebb01bb7e28cf846710a2313ecb31b54ebcf86f1e96eb5
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_7341348e-845d-4d48-95bb-491d8e3f1696.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
                                                                                        • Size 765B
                                                                                        • SHA256 c5b8ad56cd76e82d18db3cd4f9bca978551d6ac504526fcbe2ed1536e4eea01d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_7341348e-845d-4d48-95bb-491d8e3f1696.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
                                                                                        • Size 781B
                                                                                        • SHA256 b44974c8642056f4c72284bb2296ee67d7b267aae96542e55eedfc448507e75a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_7341348e-845d-4d48-95bb-491d8e3f1696.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
                                                                                        • Size 781B
                                                                                        • SHA256 cbf28619491e00eb69237b9519f06b56a4b127fcb2638a80cd2c034a6e07ddf7
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_7341348e-845d-4d48-95bb-491d8e3f1696.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
                                                                                        • Size 957B
                                                                                        • SHA256 d513c54ede4c81a0ef371167f38af50342f056ba40f0742e480129cd50442b4e
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_7341348e-845d-4d48-95bb-491d8e3f1696.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 4f088964813b6ea47a5bcdb32f04030e063bd8b9241587d0d2216bcdd1078f61
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_7341348e-845d-4d48-95bb-491d8e3f1696.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 bf2e1d65e5b8e42a86ac7e5e99d6ef9380c9d316e775ce352f48426f8e355b0a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_7341348e-845d-4d48-95bb-491d8e3f1696.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 fadf9dda02e1e0173522e5bed05094139cfa5c9e58615f112fe2d5920944b77c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 61e7fef5841e50d31dc545d1929684b6609f4334ec55505a688ff45b5b5581d6
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 e88738e56ef2258e1b40cec623c846fce3d95bc9e10ca0440b4a9cb595089df8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 14KB
                                                                                        • SHA256 e94174a2ae2f27a8c6774f51c244ea0cfadeaaeaf873040083b62063161c2b5e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 12KB
                                                                                        • SHA256 512a896ffda0d842e5e076e11e829282ef66186a4dcaa7ed7a51a1d4c49e03ab
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 12KB
                                                                                        • SHA256 27498700782f0d140fa3b5008327a53eea2993541c7bc08d08931070a1516863
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 12KB
                                                                                        • SHA256 b4f5f58b642cb0e698522b87bd5dbea60b15ca09766b8be90be2fc0f45688277
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 3d51499c7caa13a023e10ada8a5a6ea9598f931211bf2dc3f9075074c508b559
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 3d0f37d8277cad10198be78cc0acb6db160bc2c55930ec8a889aa9468198b8a5
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 e9604616e26b13f2c55916cc1ac8908dca1911d8579af2c9caeeb4ee8e3be814
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 5a73d435746d96a8b8248f45b6cb987b0d86ee70eeeb759ebbd3060652f88d91
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 38e3067503d437234dc9a707691483305c55893aa3b619477a596ac8a15d1de5
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 9db32d46c88dd2a556a34f793cb4119036be88e8fa0bae1823009c32223787eb
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 feca37ffb0d329723f138518c3cb5a4671c320cbde498c7d601aa61b77bfe38b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 93a99b68bbc37cfa45b42ebea676a32554fc0ef1d7fcc4e2031c6e450f74a648
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 f55043bec7aeaf2edb49b91dce9632b12dc3c7d578c967615340589c3a42e46f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 43918734789ad67e0cd23174678395a1f72b1942f8ccb9c449f4960511bd9742
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 8adc129d1887c348d382171d82bef7eddb95c012e9a25aa609099e6c0713fd64
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 057eee81e212fb27a531bc4d72e998ad9c2f8ec78c2202f234b1c4063901fdc3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 86b81f749e93ac5e94ae62a0cbb619cc690a9e02ddcaf6fcd143170e08030463
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 4378a94dfa4d55a1cbb88fffecb1a385fe2363022c78f2a356a1adbab729e4d5
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 8a09ab2ecf8b9c4251ebcb171c79081e40d8e23163ea5d6c7a5dd834d9b6b749
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 4c67ef690142b9ea84325a4eead017c3809921373648f417c4398ff0462b68dc
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 14KB
                                                                                        • SHA256 e5d582ebc93b7bceb01385f7e28ec3a9765b0b13291b7583a558ee3a6eac98a7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 12KB
                                                                                        • SHA256 f12c732b3b15329f613b6757b904e882546c809262d0a2352198e7627d01450e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 9d6c82114e8b21f4b52bb12646aa95e651ffa701fe224a313d8420ba42c353ab
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 a2a21f89daa8fae00c147494243f0eebfa3c43c6dd1d93b386f8ce3eee03753e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 8eafd8728db110acd94e5fcfbf8ac6339c5e8f6535826eeb0ceae35a7824ff0c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 b10cc2dc6502a17d2e5cda536934f49b307ac85f5ff380f70b619bf3c555630c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 d68f190ab654f39e8f1b973ecdb999f254cf78e672aa93e60fccecb14ad3b99e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 12KB
                                                                                        • SHA256 728c531ccb927424f6364eaf770a4470174ab505978b46f36f10fd423ebc29b9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 e3ae2491b43a157902763319ea18cd3c66609f98e1382cdadbc825d5103c7051
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 14KB
                                                                                        • SHA256 780254f9342ac78e2061f0d0ae5a8dedb9d676b57a818a36b3404c0573ba6895
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 12KB
                                                                                        • SHA256 89abdba3cb8f9364fbcc1964d44ce50c20e78926e9fe7feb57a0a936c674a9ba
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 d43f9d64f2af8b89007db4a8d62872d5456ffa42abcada31a3c485e40e7cb85e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 f05bc699358d283f12332e1431036a5a1069b7cca8f8e5064ed37f3fdcdee2c2
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 41d9459602253ebe41a245e88621965f859e203efae66b457e0d945fe046ea0e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 54d025f922aeeabecbd12969295efc6491f786d35edbea03c91cbe3ae0d26164
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 066c8d00d12451e80bfb271881b5e47d17904cc9239e81613513438e108bb24f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 14KB
                                                                                        • SHA256 3f7210c2f5e5302965a4f50019f3d0f578956526f1f26c46bdee18ba63d00c3f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 c44f5aa6ebbc369d5a2bb6ac11d315e136f9ba9ea49fe96f08615c0a232d4758
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 957B
                                                                                        • SHA256 be7da3d8e3dd11c5bfc04b3537511d75c1033373a79b4f8b5044f1ad13a3ca38
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 8ed9796ea8fc18bac4e3cf5d72a53e5b87769d6ba6b42dd27af6d9d75bc2b88e
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 f0502d6c56d78ae738c3b77014a395964f87683e692436b92d2848e6016fc928
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 e6939a488d19e1aae394f3893817dbe8eb175d69dd5138843f53688b620bab6c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 3a91f883044559f1122425cd0d5c9cf8c2bf2bb9f243697bee858658b01aef17
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 6b5fbbdf76467b88ffdcd505d2c53f3af013149c17cdc7a9f6c75108515ae708
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 acff21668e19ea271209e0e7762abbf932f114910849a177452ee3218d908a00
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 c07b5574d07d6cc6dfbb410742a9dcd47e53b2368188d6d270868b9c6ec36cd4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 44db6d0e393dbc54a12b006abe7346dfdbe48304b92904afd869e8714c10c26f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 a4c84ec90f4bb3cd5daa7b41ca45ff4d5569e34e983f260efb7d65130c12644a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 3e6d8b277b007390b619858aae699b36d8cbce24259f26245f018a7ec9c04407
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 4b24a054be61660aa296338b20add468c93df0f7284d5a8b0571908effa087b3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 14KB
                                                                                        • SHA256 24a2ee1bc9a1cbc1943cef2af72858ae683fb07ccdc6e1af5da5b23c84610c01
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 493B
                                                                                        • SHA256 5a09d2ab18a612ebd0ca4a4eb85ad6cbff23e9ffb2c49a1cb03b09b4251f6426
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 a726d8732b78f9d09bef7841759b3ffdaf207421fbdb9ff7f02ef9ece71ee19e
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 733B
                                                                                        • SHA256 ff0b84f1fc008ff24ed869daf20e4bf2d2eb97b930cea84e2aa51dd064c3e09c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 909B
                                                                                        • SHA256 7d52c445f5c36689d71902dab573a7cfce8d9d152047724cdb6f4016d036989a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 df0a3121e4b21d2155f5583847fa5a43ea773a174bf84e45d910f00c496d6efe
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 0410dbec541296da33e61a27f6bfd832ac67b4596b26a5819de2233fff05aaef
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 9edfacc97c524137eaf3a556d810514e92ca602d990cf366159f6409721e3d09
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 c9e4e364e647f7bfaf69d04814dba81d6eded4027f2e11299efce15f4cc76584
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 ba07b5de63367a037eb8e24bc8cc8ed159bf9ca211f6e192af5b3e3be0972016
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 e90c6b89c30d5d4916a2114e6f92ff5a5248ccb0a8e8d27c7dffd2105c58a36f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 986e8775f9de390b05da978f341ec5e73f41b88c2528890bcd5c1b3aedfb619d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 dac88ef80438cb130c93c8486eb9dca59a56c448b083eb931097064576cd20ad
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 28eade86d430738d54e71bdf7b86c3386b475bf2c942702cca6fe8568e4a3c20
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 2a6321976b5ce1e151dfd506bf3c15fa49807caf9046652c2ba5456869c633a0
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 cf07207e38f002a7b4252ffb2be6102e1afbd455c2214cf542080b64fb48a6ce
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 e9a85e0dad1f92e4763bf6e6502dd45d5838070ab3cc81dbe05cd5ebe955b482
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 12KB
                                                                                        • SHA256 2a137a6cb139f8e21f11fcdc6173e7d3c8fa8e2a73347c5a4231256e42e7499a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 2d46ba9b65eedfc158e64eac97a86f6b96fb044ad1009da39a098a0f89c105fb
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 18a507fb9479c70a78fc55411d80c760f6d729aae97da59dd41027a4f996fdeb
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 12KB
                                                                                        • SHA256 adf56a5477221f7c9a06c2971619196ba67dda998a3d2795a2e5192ea6b867f4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 14KB
                                                                                        • SHA256 41fe099f89e77187d5f74a8cdf4f5d904e68d3429296fb4ba968c621785ed9a7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 2KB
                                                                                        • SHA256 4d012c9f8edf91c5399457cd67ad38aed09a6132bce6a182b522245adcad2296
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 ce7a7e7c6b3c9b552af2602c85e12a51a08ba3701dfc13857980fb9f5e0b73ad
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 b757581b9e60994de963e5cf956e7f50ac9aff2ccc4189c8a0cf879022de278d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 14KB
                                                                                        • SHA256 8317f3a8a6d403fa0549ec73d4ee7df406d5c41f48e6bcca05b4326231db2362
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 621B
                                                                                        • SHA256 b68ba9122b1cdc130a7c99bef8b4f642cdefeac21663ce89d711ed080e2aff63
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 2KB
                                                                                        • SHA256 7f87d01071569339b3ca897a435fe0951b1682fa3acf2087912743854088e266
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 c854559916edb26f95f61cf34ebcd89810d0060c9fb53f8b0c9cbde7d3b67b38
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 5373ae0547b4a87665e79797ac4d74d78522e94ad9ffa235db76cb7d5b648948
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 f670a2d7a7666dbcd11d46b5e426ea59315e6c79fd9c3d0dbd4188e0cea2c381
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 10KB
                                                                                        • SHA256 012f9dd2ffde6731656fd552178a6ae57387fc38a231793bf09180924b1cc1ca
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 f0b20cd49b24640c81916996570585167724b3d4e8457736aa8919b18b83aed7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 182f07dc9c3a3cfa336c5d671588f4bec296628f11c705e6d976223b1265447c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 0761eb06ed5e0b2846da4087aab338ce35fb85832165ca902d43b297d6bc825f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 813ab48152e6d7bac52fa73652699109ff59e8895d0aac2be3bc6328f49399b8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 f7a6d60b5a44372e09c2c4257a2a79fe9cc00a8c4846656af2ca96ab11344ba9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 28c65db83792e07789dbce21ed78cfdc9b6e4f1164da200feabd056e5b9172e2
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 14KB
                                                                                        • SHA256 85993dd6b75927c6e6205213082e95e3e266ef55a62ea0f6e556d592596c5118
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 e4d00ec4a0fd8bf63fcf309a12cffec1f83ebeb4a01b9d7eba300eae79494976
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 11KB
                                                                                        • SHA256 5c1f3c6b383e0000440486a32e2357d57550b1a4e7d87e570249214cc1b344f3
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 2KB
                                                                                        • SHA256 d6d0d71fe6e94f3e71f91e017678e627281f8953985ce9e5f8d5f9cad65db758
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 5cc9981df55dd7b9b788fa2057cbc54380d50fdec2ed6d543f566544f8361837
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 1KB
                                                                                        • SHA256 282c7ccadf86f34b96bbf8acd9e7c5bdb9588738b25192e4baf1a43f31f1f73d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 3648f625e65dd3abd8f28f2933ccc157afd68a65939ad3b826ff04515935bdc4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 8KB
                                                                                        • SHA256 111be99277a3761cd0a9af6b7bc0289ecd2fc945e9df695ff149c57d46017b48
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 3948b727f3cc355c46e04cf127d4d1f16f69d2ac16ded8ad5c2c4de8a2951cdf
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 14KB
                                                                                        • SHA256 515446b5659ea2b856b5d634106890f7ea55f98e0b5ea5a2a3917d076e533a99
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 322c862ec5f8056115509bef02f80851da5b8debc7f3010d1fa32e2ba78e6f41
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 13KB
                                                                                        • SHA256 5a76122b0e85c027291dd4ef229daf87db921021e971a311228f26a392cea7a6
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 fc6109e880653775f2ece0ed222b22a66b757aa95acf526278762f1461225c66
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 2KB
                                                                                        • SHA256 6a76b5bdc050a5ad85ba3640614ec5859abd2e508af3df415c3a3c4df1eb22dc
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 3KB
                                                                                        • SHA256 a3cb57d4cbb668f1f0f29bed66a591148a31990dcb75d7e4ca51c7d292b8b6db
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 5ee8c5f3812be381eee89afe5d8e8cd0e7205e574a282120044d1bcbead3289e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 f2bf58d71de054216c84b5767b015292b8eaecf36541b5b0b160ab03853905bf
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
                                                                                        • Size 9KB
                                                                                        • SHA256 0b56b121560a462b5945ddcfab22bff57d53240ff135247da22295b2421af2e4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        CURRENT

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                                        • Size 16B
                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                        • MD5 SHA1 SHA512

                                                                                        bbc4572a-c881-44bd-b108-5bbfe984df3a.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\bbc4572a-c881-44bd-b108-5bbfe984df3a.tmp
                                                                                        • Size 6B
                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                        • MD5 SHA1 SHA512

                                                                                        c6a9cc2e-8eb6-491b-8c5c-7f77fbd0e74a.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c6a9cc2e-8eb6-491b-8c5c-7f77fbd0e74a.tmp
                                                                                        • Size 456B
                                                                                        • SHA256 eae24743f7036e3d8765877e56d7ebc179fc42a433058d3eef443db7f563519d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        d7a53b9a-f125-4057-97e2-9a6c064d56d5.tmp

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\d7a53b9a-f125-4057-97e2-9a6c064d56d5.tmp
                                                                                        • Size 171B
                                                                                        • SHA256 1661e9d91063bc05fb507337727bed490818f1d4b31fcca91c32e5e3614852ea
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp1324.0.628040523

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1324.0.628040523
                                                                                        • Size 2KB
                                                                                        • SHA256 6ef162d74233aa819863d5c847a381edac5bf7e776b05326cbbce8b1753e3824
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp1324.0.628040523

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1324.0.628040523
                                                                                        • Size 265B
                                                                                        • SHA256 2f8a2d64d8d759c3cf0a1558d3d29c715a18475a1409ddeb504432483f247b51
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp1324.0.628040523

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1324.0.628040523
                                                                                        • Size 1KB
                                                                                        • SHA256 e9a749d78552bcc88aa158e1a961baf18d46e228846d14e4e5fc3a491506b42e
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6044.0.122609655

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6044.0.122609655
                                                                                        • Size 2KB
                                                                                        • SHA256 69c71af3dd0c1c0722566e8647ec9bcf4d3a195830cc8d5684b49aabaf689c21
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6044.0.122609655

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6044.0.122609655
                                                                                        • Size 265B
                                                                                        • SHA256 2dc811e4570290bc4ce9e3fb0a3750907bb677bee259388fe168f1e30947db27
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6044.0.122609655

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6044.0.122609655
                                                                                        • Size 1KB
                                                                                        • SHA256 24e3e7865ae6c1fd9bac29300ccb615eff181e7cbc41a3b31a4f2b7961c96e00
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 1KB
                                                                                        • SHA256 9e237ea3db5205e2752d0fb9f705a8890e0e5becfb5fad1599613eb906f191a7
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 1014B
                                                                                        • SHA256 6bbf22b3b28cbff8cc799201ce281ce64e07b37944430f54e707893a5b976a78
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 1KB
                                                                                        • SHA256 77f7f64ed2e868f79c12cc32404c7dda46a1434b534a6732ee68f179091789f9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 1KB
                                                                                        • SHA256 9fbc7203fd8a0e2ce6e71506c499344f6431bf0313d1ec3a8111586b834b3b16
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 3KB
                                                                                        • SHA256 7748c09e928c366ad6f3880efb2e086a96efd2bba243175f33e75f123b6c1bb8
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 4KB
                                                                                        • SHA256 c9b93b48ff4ed3266d58a71cdeb2cd9e7c44f7a94b3da472e0b8bffc6069b7ed
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 4KB
                                                                                        • SHA256 b4aac3400c9cdfce130b3a727ab991e45b60501b4024bc0bf018e34e156c43d8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 4KB
                                                                                        • SHA256 4c751403175a684780dab507c0d671e36210ac494275cb2b8919115b8746c05c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 1KB
                                                                                        • SHA256 3085943073b18287270dde2bb255aa087297b3b50c9c0b85ed8deeafe4ab9a2c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 737B
                                                                                        • SHA256 c5f9b5d67a3a225f98ed1ff57d6aedf83eac3ca1d9bc8608b3ade6e20f45ae64
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 918B
                                                                                        • SHA256 75aa670e8606a74bc431edf6cab3adcc06ea00f086f3146f753ba9fcd8a5c261
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 1KB
                                                                                        • SHA256 f457bf0645b49a367fe33644a34b3034addd306cc7553242dd144da69f762ab8
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 1KB
                                                                                        • SHA256 b6adf1ab4c3f046c49167eda6f5e1db10f0e80e28c4d9dc88ad581b7b70ef6b3
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 1KB
                                                                                        • SHA256 5adef2454b1526261190626f10b3c1981f9c79c9aba2a5d9799f1ab954ff3d98
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 4KB
                                                                                        • SHA256 d42d79ec7a53984ea86dfa819535bd27eb26f7afa4aecf1f9093aa5323f8e9d6
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 824B
                                                                                        • SHA256 42e19d0100f03ce446cdfb318935442f9eec5a27d72cef1bf7d534012503f6d7
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 2KB
                                                                                        • SHA256 0c32ed9fdc032161a163bc250ba6db66f1e094425a3d9a4f4466c932bdfb7149
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 4KB
                                                                                        • SHA256 bc922eaa99ae1c9e7e2f8400e9ef31d0945379ef441a51097113c6b236fc4d68
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 4KB
                                                                                        • SHA256 8cd44fc9dc719122d6f337f018ba41fdacb447b246b046030234bec46a2d23a1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 647B
                                                                                        • SHA256 35e0bebed4d22f271fcd7cd056f8ffc5319cdd0bd4a4d26d51aa0fd1aeb7576d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.0.767607951

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
                                                                                        • Size 549B
                                                                                        • SHA256 dd37c2a7da5a1eedbb32fe8ea0da9127fe41b7cef4c92ed8b0a087f5ba599b50
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 1KB
                                                                                        • SHA256 50f98444461c66e684cf2cc630f33f2d8939c6029492add9f35e5ff33778d51d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 656B
                                                                                        • SHA256 b3faba7d6415b2240ebb55d51d4584dcf450af96903c0f680bfd38c46607fd4a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 746B
                                                                                        • SHA256 61c0bc187a07cbabaac968e4818d604faa82626c86d50e721be42506ef8aa772
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 1KB
                                                                                        • SHA256 1591603702bbad9f555cd2c88fcb2767d3559ada254b1a932544a0970f654ada
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 1KB
                                                                                        • SHA256 0edc42b3f0fe979a9574881c21e566329feb184856a69f891d16dad24568841e
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 1KB
                                                                                        • SHA256 bc90001b008e0b0a16f28ef5bf592d86fce8c060dee6c44b8c876127ccbe6026
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 833B
                                                                                        • SHA256 8c65132098caa27c2adfc5209f60d75f070eec5e20791b1ce531dd0d50f530ef
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 1023B
                                                                                        • SHA256 585b2404c606f75e97e3785ce9b8bd2744ed06833d0d9830afd17ce7119c4e28
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 465B
                                                                                        • SHA256 d65585068b012022e65a645539dec315bd7f0c175e839c5916ff1ba1532b9749
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 558B
                                                                                        • SHA256 4d4e9ddfbfaf3bb459ce600cf83eb62bf1b83c4f09c0a01c972853e6c95093ed
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 200B
                                                                                        • SHA256 9dd43b2ad4605e6e1bd22b0d6bbee26ae1c44ec8152b40c0d8e184de4769cff9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 927B
                                                                                        • SHA256 895acce7931595e74d7860af24d58bbfbf13e2278a83516238715a746fe357de
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        ssdfp6304.1.1577839937

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
                                                                                        • Size 224B
                                                                                        • SHA256 93aea9dd2ed3859e96b706fa5fa1aaebfb54ebea788dae4901f7ae41b867cff9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        data_0

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                                        • Size 8KB
                                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                        data_1

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                                        • Size 264KB
                                                                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                        • Size 2KB
                                                                                        • SHA256 83f8e895f184d00dd4907449a3d480a4fc2fff8375920ed12597de835d3a64c3
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                        • Size 5KB
                                                                                        • SHA256 923c149606b49e811473d6ce2d8fd69114459ee553eb5778601569e84d39520c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                        • Size 3KB
                                                                                        • SHA256 37abf401b2886b4ef898cdfca2b07a93a298fbcbe1f78e580767f17ee4787186
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                        • Size 3KB
                                                                                        • SHA256 7261509278e978139ceea0e084a5dcf40f18c415c495ffa0f417323757d2393a
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        assistant_prefs.json

                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                                        • Size 151B
                                                                                        • SHA256 622ec351abf55692a276662b4515683deba316f8386cf079c91f7a1aea04f84b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        opera-one-dark.jpg

                                                                                        • Path C:\Windows\SystemTemp\scoped_dir6304_2003650431\opera-one-dark.jpg
                                                                                        • Size 349KB
                                                                                        • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        persona.ini

                                                                                        • Path C:\Windows\SystemTemp\scoped_dir6304_2003650431\persona.ini
                                                                                        • Size 217B
                                                                                        • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        opera-one.jpg

                                                                                        • Path C:\Windows\SystemTemp\scoped_dir6304_511133154\opera-one.jpg
                                                                                        • Size 194KB
                                                                                        • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        persona.ini

                                                                                        • Path C:\Windows\SystemTemp\scoped_dir6304_511133154\persona.ini
                                                                                        • Size 207B
                                                                                        • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        memory/2108-514-0x00007FFB76BD0000-0x00007FFB76BD1000-memory.dmp

                                                                                        memory/2108-515-0x00007FFB77400000-0x00007FFB77401000-memory.dmp