Analysis

  • geolocation tags

    eueuropefrfrance
  • user interaction
    yes
  • max time kernel
    681s
  • max time network
    680s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 06:45

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260804-hjkflsef39
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 8 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 35 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 56 IoCs
  • Suspicious use of SendNotifyMessage 45 IoCs
  • Suspicious use of SetWindowsHookEx 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4472
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3968
      • C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:5740
        • C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.26 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff6b1329d88,0x7ff6b1329d94,0x7ff6b1329da0
          4⤵
          • Executes dropped EXE
          PID:2004
        • C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:4816
        • C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=5740 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_20260804084628" --session-guid=91707ab3-e183-461b-9b9a-3713debbfa38 --server-tracking-blob=YWFlNTAzYjIzNDAzNDNjNjY4MmRkNzJmN2E3ZWFhYjcyY2FiNWYyMmEwYzU5MGRlMjVlNDM5ZDJkMWFlODgwMDp7ImNvdW50cnkiOiJGUiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzg1ODI1OTg2LjU4ODIiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiJjMGQzMTdiZC1kNTU5LTQ3NTktYjgzNy1lNjVjNjEwNzE5ZTkifQ== --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=2808000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:5416
          • C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.26 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff6b1329d88,0x7ff6b1329d94,0x7ff6b1329da0
            5⤵
            • Executes dropped EXE
            PID:6032
          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe" --backend --initial-pid=5740 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281" --session-guid=91707ab3-e183-461b-9b9a-3713debbfa38 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.85
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:1644
            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x2b0,0x2b4,0x2b8,0x28c,0x2bc,0x7ff76e3bad88,0x7ff76e3bad94,0x7ff76e3bada0
              6⤵
              • Executes dropped EXE
              PID:4904
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:4444
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffa6d4f8320,0x7ffa6d4f8330,0x7ffa6d4f8340
                7⤵
                • Executes dropped EXE
                PID:2572
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,8843678836338239924,18262407482657302419,262144 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1912 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1748
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2024,i,7285815067610536361,2280699986884351753,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2080 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                PID:3876
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2488,i,6484142514679373635,1820410831195207223,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2616 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1284
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3640,i,2952573929502208468,13987740681262620557,2097152 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4028 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1428
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3964,i,7403664369592590640,11897065074231487539,2097152 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4040 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:2800
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4000,i,17733439717380820340,4020125041923916617,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4068 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4124
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4248,i,6804520735838090206,1504895945135235697,2097152 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4456 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4412
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4832,i,1788772501917468374,9216812483238233069,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4864 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:120
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5020,i,11705987371882981231,14588636941984932960,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5032 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3480
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5008,i,16028175062792259528,8562143442104981600,524288 --field-trial-handle=1916,i,5088391753992994486,7427026866897211144,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9630994860718533358,6828271987021312324,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4508 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5724
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\additional_file2.tmp"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6628
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffa6d4f8320,0x7ffa6d4f8330,0x7ffa6d4f8340
                7⤵
                • Executes dropped EXE
                PID:6644
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,11569666581715098554,17252601876176960560,262144 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2036 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6816
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1952,i,4277195522912500446,7126315267055481284,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2064 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                PID:6824
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2496,i,2483294000945587956,7612422296233698829,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2716 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6904
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3816,i,14711186257936320451,2195411582581110436,2097152 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3880 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:7124
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3964,i,13246729495346408204,15868141978777908090,2097152 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4056 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:7132
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3780,i,15499680895531278940,17214714088141418426,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4036 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:7140
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4432,i,12718831863813663010,4992861977099837182,2097152 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4480 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5384
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4884,i,10112193581075492455,2252635232075450488,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4896 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6008
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5088,i,4911695550924925505,3787371645669122160,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5096 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6264
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5272,i,4859822725565796645,3335728317295182141,524288 --field-trial-handle=2040,i,13247040808878752726,16900711169024209177,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2044,i,14289054520055962868,69938770630638938,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5276 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4260
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:4712
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffa6d4f8320,0x7ffa6d4f8330,0x7ffa6d4f8340
                7⤵
                • Executes dropped EXE
                PID:1944
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,13264027306927049748,3186254886413187557,262144 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2080 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5692
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1952,i,9844241333067999497,14168873269164453728,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2108 /prefetch:11
                7⤵
                • Executes dropped EXE
                • System Time Discovery
                • Enumerates system info in registry
                PID:3268
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2480,i,18249505244647656057,11353714199996641482,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2496 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:3544
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3184,i,12792936595719308046,895726102616309089,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3284 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:1008
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3196,i,15848913184140697107,4875933182490836947,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3304 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2944
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3208,i,11394302555516699348,15798982780320531318,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3324 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:964
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3256,i,10572897263129325588,8916433855784093124,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3404 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4508
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3220,i,17489921038415864014,8039960631747952183,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3344 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:1572
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3268,i,3125651311063864403,9060388220604320666,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3424 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6160
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3232,i,11184697299329780912,18070363025119553051,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3364 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6184
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3244,i,12557153452790578850,3647543998415790711,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3384 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6172
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3316,i,8164798366208250349,16619693308699824098,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=3928 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6268
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Executes dropped EXE
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:6580
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4832,i,10304915764698859639,15546902406705003628,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4840 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:6616
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5000,i,12720431521905580161,18075800531601494422,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5004 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:5776
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5268,i,15085364206622413025,8006228405176781051,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5280 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:2656
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=5416,i,15698566561042568707,11267640306939801959,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5412 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:2848
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6804,i,4473552234941243010,13090553083287520293,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6868 /prefetch:9
                7⤵
                • Enumerates system info in registry
                PID:6440
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6412,i,707504749679792503,8514522810047768855,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6768 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:4908
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6936,i,7407537281821581393,4905599581027142219,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6992 /prefetch:9
                7⤵
                • Enumerates system info in registry
                PID:2068
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6320,i,2078317738924666371,15913481068611620222,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6428 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:4336
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6672,i,15326463816664378108,4850201201823817233,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6392 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:4892
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7688,i,12552311851848540570,14298902089000155827,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=5812 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:368
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7800,i,5770841356888930876,15873367829225014018,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=2520 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:1248
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7808,i,8732075913947411917,16860661018837175681,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6704 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:4140
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7844,i,17843997277611308882,17088446500949121458,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7960 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4232
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7964,i,1928996532973384476,6852962959516804664,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8120 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6260
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8236,i,13735817663410703091,9604356790717622063,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8240 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:3464
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=8436,i,12732537951665832137,8700114687557602708,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8444 /prefetch:9
                7⤵
                • Enumerates system info in registry
                PID:4704
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8624,i,2265033293727573391,15401584718627198770,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8644 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:4832
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8604,i,658321099114642974,17792873638164195930,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8616 /prefetch:14
                7⤵
                  PID:2088
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8688,i,10253205348087154468,16847402916123834959,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8916 /prefetch:14
                  7⤵
                    PID:2416
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8620,i,13170697811185838852,4319687633266030094,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8896 /prefetch:14
                    7⤵
                    • Enumerates system info in registry
                    PID:2396
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9196,i,10129196929341137414,3755195218602654050,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9192 /prefetch:14
                    7⤵
                    • Enumerates system info in registry
                    PID:6424
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9208,i,14295069014408501344,13136281228206316405,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9340 /prefetch:14
                    7⤵
                      PID:6516
                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                      7⤵
                        PID:6704
                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x25c,0x260,0x264,0x238,0x268,0x7ff756d28860,0x7ff756d2886c,0x7ff756d28878
                          8⤵
                            PID:6800
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8464,i,5231647362848257276,9321869249862637353,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8496 /prefetch:14
                          7⤵
                            PID:6760
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5800,i,18300208281770082154,18127123305584991483,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9636 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:2072
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9872,i,11336886958699412457,8520197809241280445,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9920 /prefetch:1
                            7⤵
                            • Enumerates system info in registry
                            PID:5372
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3316,i,7082658538430749354,3369889483962655059,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10364 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:6272
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10460,i,16403182857848129871,11122236568621631550,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10476 /prefetch:14
                            7⤵
                            • Enumerates system info in registry
                            PID:1224
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9896,i,16173433572539660904,14008028382585172250,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9892 /prefetch:14
                            7⤵
                              PID:7408
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10736,i,8457443448538758351,4776750887091674263,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10804 /prefetch:1
                              7⤵
                                PID:7624
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11028,i,10689614823760312527,13519184717572026890,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10996 /prefetch:14
                                7⤵
                                  PID:7704
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11172,i,2531698166548425121,4909874621184933449,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11180 /prefetch:14
                                  7⤵
                                    PID:7764
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11296,i,9873339711632986804,15518368904197332055,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11324 /prefetch:14
                                    7⤵
                                      PID:7816
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3296,i,11656366953285423805,2136489750744738172,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=6892 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:6996
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3508,i,1464687135073384792,14085534571157193799,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11612 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:1660
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11752,i,5276359273259214774,14153890010649830603,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11624 /prefetch:14
                                      7⤵
                                        PID:7104
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11768,i,1438071818475855421,13741406159270667244,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11780 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:6724
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11872,i,1277644386078932634,5817158331612804911,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=11384 /prefetch:14
                                        7⤵
                                          PID:7188
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=11360,i,5785546994092472435,4968848066477093244,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=12008 /prefetch:9
                                          7⤵
                                            PID:7300
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=3496,i,501339816730473906,9134357923143053321,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11348 /prefetch:9
                                            7⤵
                                              PID:7480
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=3900,i,1854238013258519364,2699726755157135085,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=12000 /prefetch:9
                                              7⤵
                                                PID:5948
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6924,i,9966376253549697366,8839914302300964502,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11380 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:4804
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11328,i,14630921268066033187,8805135907360856952,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=11284 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:5384
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10784,i,7223969048472491493,1335964560724419407,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=11820 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:6388
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=3496,i,2675329878454382178,14884810134633394080,262144 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=7100 /prefetch:10
                                                7⤵
                                                • Enumerates system info in registry
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:7544
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7232,i,15750239741582580681,2275265848256734111,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=732 /prefetch:14
                                                7⤵
                                                • Enumerates system info in registry
                                                PID:6568
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11184,i,14801921286338925237,2371595895210921956,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=11416 /prefetch:9
                                                7⤵
                                                  PID:6720
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4308,i,17540324253978036777,16279772916605350749,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=6836 /prefetch:14
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:1440
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4864,i,11298064159710876598,4922778995909363660,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=4816 /prefetch:14
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:6872
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=12068,i,18136239769112498569,3754022299261792153,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=7076 /prefetch:9
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:4132
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7372,i,1090031711349728877,9573855991145049180,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=11892 /prefetch:9
                                                  7⤵
                                                    PID:7700
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=7272,i,16340477922362305135,13208917435779591304,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=7108 /prefetch:9
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:1780
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6948,i,10737151286489198054,11587355351761290394,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8004 /prefetch:14
                                                    7⤵
                                                      PID:1544
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=3452,i,10227482542372549945,9291733458791634502,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=3488 /prefetch:9
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:2924
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=12000,i,10212990552933209749,10916614234700603720,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=6908 /prefetch:1
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:7876
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7020,i,958295644125022678,18143922450802665731,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=12016 /prefetch:14
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:2320
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11592,i,5766063901581083851,15063888767922168380,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=11672 /prefetch:14
                                                      7⤵
                                                        PID:8088
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=11696,i,12757264966017751611,10625858933246189706,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=11660 /prefetch:1
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:3284
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=11172,i,2811325380845097586,12356666914927879452,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=11224 /prefetch:1
                                                        7⤵
                                                          PID:4776
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11044,i,3297442408883206019,2864197957863700174,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=11288 /prefetch:14
                                                          7⤵
                                                            PID:3964
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=11044,i,16072050973899589855,11221493038025650034,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=11040 /prefetch:1
                                                            7⤵
                                                            • Enumerates system info in registry
                                                            PID:1148
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10996,i,18069524920025820937,2742664330309828309,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=11064 /prefetch:14
                                                            7⤵
                                                            • Enumerates system info in registry
                                                            PID:3168
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11072,i,54586592722502634,2840207138052900737,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=9880 /prefetch:14
                                                            7⤵
                                                              PID:2796
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3612,i,14728198639285381958,15115256829863787508,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=11428 /prefetch:14
                                                              7⤵
                                                                PID:7232
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3644,i,6228445072952207991,6419086232529285803,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=9912 /prefetch:14
                                                                7⤵
                                                                • Enumerates system info in registry
                                                                PID:3128
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=4908,i,293197563233523628,11580647451993579279,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=11768 /prefetch:9
                                                                7⤵
                                                                • Enumerates system info in registry
                                                                PID:7668
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5644,i,3457208080680031431,8234653681468959751,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=3516 /prefetch:14
                                                                7⤵
                                                                  PID:1276
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11880,i,8015562035453585683,5670412779609816349,524288 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=6620 /prefetch:14
                                                                  7⤵
                                                                    PID:5040
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=11940,i,16082691586201420385,14130322401670829807,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=4892 /prefetch:9
                                                                    7⤵
                                                                      PID:4756
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=11012,i,2148969864357214339,14113089493736175264,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=11880 /prefetch:9
                                                                      7⤵
                                                                      • Enumerates system info in registry
                                                                      PID:3164
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=12132,i,15021752042251662520,5358613671673765454,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=11588 /prefetch:9
                                                                      7⤵
                                                                      • Enumerates system info in registry
                                                                      PID:5216
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=11188,i,16209973931509902999,15305678141437087471,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=12208 /prefetch:9
                                                                      7⤵
                                                                        PID:1176
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --version
                                                                        7⤵
                                                                        • Enumerates system info in registry
                                                                        PID:7364
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe
                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x28c,0x290,0x294,0x288,0x298,0x7ffa6d4f8320,0x7ffa6d4f8330,0x7ffa6d4f8340
                                                                          8⤵
                                                                            PID:6584
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=off --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=6944,i,469866572951569599,14710748574771337971,2097152 --field-trial-handle=2084,i,1609716825703374425,11031542930075402458,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2088,i,1039598665556075820,5325526522319830870,4 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=10756 /prefetch:9
                                                                          7⤵
                                                                            PID:4716
                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:2404
                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\assistant_installer.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\assistant_installer.exe" --version
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Enumerates system info in registry
                                                                      • Suspicious use of WriteProcessMemory
                                                                      PID:5288
                                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\assistant_installer.exe
                                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x5d4040,0x5d404c,0x5d4058
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • System Location Discovery: System Language Discovery
                                                                        PID:2684
                                                              • C:\Windows\system32\svchost.exe
                                                                C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                1⤵
                                                                  PID:6124
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                  1⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • Suspicious use of WriteProcessMemory
                                                                  PID:6048
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe
                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffa6d4f8320,0x7ffa6d4f8330,0x7ffa6d4f8340
                                                                    2⤵
                                                                    • Executes dropped EXE
                                                                    PID:2312
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                  1⤵
                                                                  • Enumerates system info in registry
                                                                  PID:2644
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.85 --initial-client-data=0x258,0x25c,0x260,0x234,0x264,0x7ff756d28860,0x7ff756d2886c,0x7ff756d28878
                                                                    2⤵
                                                                      PID:7652
                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                      2⤵
                                                                        PID:6632
                                                                    • C:\Windows\system32\svchost.exe
                                                                      C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                      1⤵
                                                                        PID:6528
                                                                      • C:\Windows\system32\sihost.exe
                                                                        sihost.exe
                                                                        1⤵
                                                                        • Suspicious use of FindShellTrayWindow
                                                                        PID:5664
                                                                        • C:\Windows\explorer.exe
                                                                          explorer.exe /LOADSAVEDWINDOWS
                                                                          2⤵
                                                                          • Boot or Logon Autostart Execution: Active Setup
                                                                          • Enumerates connected drives
                                                                          • Checks SCSI registry key(s)
                                                                          • Modifies Internet Explorer settings
                                                                          • Modifies registry class
                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                          • Suspicious use of FindShellTrayWindow
                                                                          • Suspicious use of SendNotifyMessage
                                                                          • Suspicious use of SetWindowsHookEx
                                                                          PID:6524
                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                        1⤵
                                                                        • Modifies registry class
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:4396
                                                                      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                        1⤵
                                                                        • Modifies registry class
                                                                        • Suspicious use of SetWindowsHookEx
                                                                        PID:2784
                                                                      • C:\Windows\System32\SecurityHealthHost.exe
                                                                        \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                        1⤵
                                                                          PID:2156

                                                                        Network

                                                                              MITRE ATT&CK Enterprise v16

                                                                              Replay Monitor

                                                                              Loading Replay Monitor...

                                                                              Downloads

                                                                              8B2B9A00839EED1DFDCCC3BFC2F5DF12

                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                              • Size 1KB
                                                                              • SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              B46811C17859FFB409CF0E904A4AA8F8

                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                                                              • Size 528B
                                                                              • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                              • Size 471B
                                                                              • SHA256 cba55116b1cabdcf56cabb9ddfda1ac7eb27d06cfe0dedc07cad410490dbca1b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              8B2B9A00839EED1DFDCCC3BFC2F5DF12

                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                              • Size 174B
                                                                              • SHA256 32b45c58b977185a293bbe68f4c2ef586526a6f9d2f1861f13d6f502c997f77c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              B46811C17859FFB409CF0E904A4AA8F8

                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                                                              • Size 170B
                                                                              • SHA256 5d4cffef4c78a7dece6610e665535e863585af56db8b771d3396f1b6ea4fd747
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                              • Size 416B
                                                                              • SHA256 372c6fbeab1ae1a496544ea73d7d8e636932c7725501e04cbef9f3b11107fc3c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              f_00002e

                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002e
                                                                              • Size 61KB
                                                                              • SHA256 bb21de71e2261c703e2ca09ac57f922cac5790c19b23ced3acbba16d005ccd87
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000063

                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000063
                                                                              • Size 16KB
                                                                              • SHA256 5e54e8db00c35e9c995a6304dca16f9c68c5cf6c3a42c08756ebb5283e42e094
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              data_0

                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                              • Size 44KB
                                                                              • SHA256 64b54a67f67b845862a271e51b493c7e6d9487381c30c0b6d1099070a0476c39
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              data_2

                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                              • Size 8KB
                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              data_3

                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                              • Size 8KB
                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              f_000001

                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                              • Size 42KB
                                                                              • SHA256 cfc94c20e28eae8a768b718d919d725b1da49ec4428e9dae835e64739f1ea450
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              prep_Activatable Class_Hermes_perf.cache

                                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                              • Size 607B
                                                                              • SHA256 be6b74e52e5eef1f1c27c0976bf3bf1bfa99958c00bbef2898a602f691be6dae
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              133.0.5932.85.manifest

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\133.0.5932.85.manifest
                                                                              • Size 225B
                                                                              • SHA256 a448c0d8def61119902a7b81e79771d47662ac3d47f9d5342277461a84da4a59
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              150x150Logo.scale-100.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-100.png
                                                                              • Size 1KB
                                                                              • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              150x150Logo.scale-100_contrast-white.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-100_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              150x150Logo.scale-140.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-140.png
                                                                              • Size 1KB
                                                                              • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              150x150Logo.scale-140_contrast-white.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-140_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              150x150Logo.scale-180.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-180.png
                                                                              • Size 1KB
                                                                              • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              150x150Logo.scale-180_contrast-white.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-180_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              150x150Logo.scale-80.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-80.png
                                                                              • Size 827B
                                                                              • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              150x150Logo.scale-80_contrast-white.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\150x150Logo.scale-80_contrast-white.png
                                                                              • Size 799B
                                                                              • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              70x70Logo.scale-100.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-100.png
                                                                              • Size 781B
                                                                              • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              70x70Logo.scale-100_contrast-white.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-100_contrast-white.png
                                                                              • Size 752B
                                                                              • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              70x70Logo.scale-140.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-140.png
                                                                              • Size 991B
                                                                              • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              70x70Logo.scale-140_contrast-white.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-140_contrast-white.png
                                                                              • Size 865B
                                                                              • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              70x70Logo.scale-180.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-180.png
                                                                              • Size 1KB
                                                                              • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              70x70Logo.scale-180_contrast-white.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-180_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              70x70Logo.scale-80.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-80.png
                                                                              • Size 590B
                                                                              • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              70x70Logo.scale-80_contrast-white.png

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\Assets\70x70Logo.scale-80_contrast-white.png
                                                                              • Size 519B
                                                                              • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              assistant_package

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\assistant_package
                                                                              • Size 3.6MB
                                                                              • SHA256 a2b6a7d645b0483aad58c5d06483de791900f151f427399ab74914a056449ade
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              d3dcompiler_47.dll

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\d3dcompiler_47.dll
                                                                              • Size 4.5MB
                                                                              • SHA256 a39ed0c79484f3e99de181624890a540b2fc5c41eb996269e5e4918bae092a53
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              dxcompiler.dll

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\dxcompiler.dll
                                                                              • Size 24.4MB
                                                                              • SHA256 05a76a701692c33096e19ce3e521b9fa827142348077ae8d73748d58a4123314
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              dxil.dll

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\dxil.dll
                                                                              • Size 1.5MB
                                                                              • SHA256 7e142d2b60f0ea517a5bb3d745f702d09d59a3c9846a31810fe1dc6163844057
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              files_list

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\files_list
                                                                              • Size 6KB
                                                                              • SHA256 63997f976ea4517c666ca44732befebb2fdc39aa1e4dfdbed4f116001ee73f17
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              headless_command_resources.pak

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\headless_command_resources.pak
                                                                              • Size 2KB
                                                                              • SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              icudtl.dat

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\icudtl.dat
                                                                              • Size 10.4MB
                                                                              • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              installer.exe

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer.exe
                                                                              • Size 8.3MB
                                                                              • SHA256 1864277ebeec240cbbf366db09b451c268d816ee21622618e39c7a3e39586fa1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              installer_helper_64.exe

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\installer_helper_64.exe
                                                                              • Size 639KB
                                                                              • SHA256 ce1ed2c9c0cb37b4316508b9d31782c1daf11b8fc2978b734d20cc1cf38441a7
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              libEGL.dll

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\libEGL.dll
                                                                              • Size 492KB
                                                                              • SHA256 df8c66c195091dd29f10543eef840ca4b13d32e0297a074239cfab6ea1b902e3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              libGLESv2.dll

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\libGLESv2.dll
                                                                              • Size 7.5MB
                                                                              • SHA256 b94d2d76b243ef6d1db9caaaf8503b28248790084ad764075bf035ea5798dca0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              bg.pak

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\bg.pak
                                                                              • Size 1011KB
                                                                              • SHA256 fc18b53fad3138037fc4219621a0ee20d9fa9285455f2e51934c1c302adb0b10
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              bn.pak

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\bn.pak
                                                                              • Size 1.3MB
                                                                              • SHA256 ebcff6e89b740071ea4653a4ae001a2f57593e4f835281d65e0139c4988338ea
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              ca.pak

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\ca.pak
                                                                              • Size 636KB
                                                                              • SHA256 09070612eb4b0cae10ccc834ff36e4681577acde46b6ee48614f1a43919b828e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              cs.pak

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.85\localization\cs.pak
                                                                              • Size 634KB
                                                                              • SHA256 975fdc0103942c61e9daf065fb393e66be7b7b1131ac1451b7d6d00586e5c22a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              installer_prefs.json

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                              • Size 1KB
                                                                              • SHA256 2eef7c43782b7aef93485f10de62b696e4624f2afe1a624a9e2791655aa92f60
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              installer_prefs.json

                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                              • Size 1KB
                                                                              • SHA256 1c5d174ed161418e9635bd1a2f5ab9aacbd07dcbd7caf2775670bd8fa1cee24a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              Opera Browser.lnk

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\Opera Browser.lnk
                                                                              • Size 1KB
                                                                              • SHA256 e229024403af1073a0e361af9dfe2d39fee51fde66edb1fc9d82d6b9d0c3ad19
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              additional_file0.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\additional_file0.tmp
                                                                              • Size 2.8MB
                                                                              • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              assistant_installer.exe

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\assistant_installer.exe
                                                                              • Size 2.4MB
                                                                              • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              dbgcore.dll

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\dbgcore.dll
                                                                              • Size 222KB
                                                                              • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              dbghelp.dll

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\assistant\dbghelp.dll
                                                                              • Size 1.8MB
                                                                              • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              installer_prefs_include.json

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\installer_prefs_include.json
                                                                              • Size 224B
                                                                              • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              installer_prefs_include.json

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\installer_prefs_include.json
                                                                              • Size 239B
                                                                              • SHA256 179d95b3a3b4df440c9746002f74ada31df05b8db6e92aa96b2db4c71da77b05
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              installer_prefs_include.json

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\e271be88-7159-405f-a206-991da58b612f Opera Installer Temp\opera_package_202608040846281\installer_prefs_include.json
                                                                              • Size 1KB
                                                                              • SHA256 f7b86d303d986c8baebaaaf777c015f1367ea60141bedabdc3715171662ff95c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              installer.exe

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\7zS08F3F079\installer.exe
                                                                              • Size 8.3MB
                                                                              • SHA256 49d33a257c47d2e32cbb967ef1c088c0ff5d71ced60950d902c9aa82311e306c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              OpInst.exe

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                              • Size 3.1MB
                                                                              • SHA256 30d994269fb74a02803b5b6b8fcf686144f27d8b7845c771ffc2d031fcc7def6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              bg.png

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                              • Size 224KB
                                                                              • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              favicon_opera_one.png

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4444_123985523\CRX_INSTALL\favicon_opera_one.png
                                                                              • Size 2KB
                                                                              • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              messages.json

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6628_1176773292\CRX_INSTALL\_locales\en\messages.json
                                                                              • Size 401B
                                                                              • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              default.exc

                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                              • Size 2B
                                                                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                              • MD5 SHA1 SHA512

                                                                              1f04426e-498e-4fd5-af4f-986e59ed38d9.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\1f04426e-498e-4fd5-af4f-986e59ed38d9.tmp
                                                                              • Size 2KB
                                                                              • SHA256 dfe05720f569d214ba7390ddee4f235f25704ed674d1c931f1835477ef5c9358
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              settings.dat

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                              • Size 40B
                                                                              • SHA256 b281cec571c4687c10bd7ae5aa30b88b20138880d57df071cc6389bc50ef5ed1
                                                                              • MD5 SHA1 SHA512

                                                                              0952a118-fb27-43a9-a8cb-bdaf550de7ad.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\0952a118-fb27-43a9-a8cb-bdaf550de7ad.tmp
                                                                              • Size 149KB
                                                                              • SHA256 0e49ba39910bd41086cb3f5e6be39e2f9628d3c22389fa84ef40ac8df9fe3f90
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              09ad5bbc-68a4-484f-a60f-02f63d2d2a6d.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\09ad5bbc-68a4-484f-a60f-02f63d2d2a6d.tmp
                                                                              • Size 10KB
                                                                              • SHA256 6733f24e553aea74c979f8dd2254387fda2517f35d36ec784b79ed66419ebcb7
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              36d0b134-1441-4510-a87a-8bd4ec60cd16.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\36d0b134-1441-4510-a87a-8bd4ec60cd16.tmp
                                                                              • Size 6B
                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                              • MD5 SHA1 SHA512

                                                                              65f58ac7-5ef8-4351-a41f-38e0ce6b66f6.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\65f58ac7-5ef8-4351-a41f-38e0ce6b66f6.tmp
                                                                              • Size 2B
                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                              • MD5 SHA1 SHA512

                                                                              Bookmarks

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                              • Size 24KB
                                                                              • SHA256 eb6e05a21f83c4fefd6387381d9efa8a6d60646a844aa65678326e945e522ee4
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              BookmarksExtras

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                              • Size 186KB
                                                                              • SHA256 0e006f8d5f21e293d321d8604cb29d22e362cdca0e31d5e9a0c58fe3883f0753
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              c03e6e83-b233-4a81-a380-c32718e6aa29.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\c03e6e83-b233-4a81-a380-c32718e6aa29.tmp
                                                                              • Size 48B
                                                                              • SHA256 e75d90b032f82b81e6c813a4826baf15b90f4d195429a861c4a8de111f6723ed
                                                                              • MD5 SHA1 SHA512

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                              • Size 264B
                                                                              • SHA256 1b0f7479c42481f5a9b702809e7952da17ece38c4a31d64b64814b871bb3d36c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                              • Size 264B
                                                                              • SHA256 1aece5da00403656bb9948d15340eb1ff13393e520021123daaa03be1904d08e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                              • Size 744B
                                                                              • SHA256 2da2785e4ac8701c14fcef4aa96cc220dc29ff7b317f8593ded7a12d2a99cd8f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                              • Size 3KB
                                                                              • SHA256 ef22991b5e48ad742f1b6052845391d622b5bc8772494ddb4d0aa47629052f34
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              CURRENT

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
                                                                              • Size 16B
                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                              • MD5 SHA1 SHA512

                                                                              MANIFEST-000001

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                              • Size 41B
                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                              • MD5 SHA1 SHA512

                                                                              preview.png

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\bckiheihmdiaaoadimffbjbjafkoooaj\1.0.4_0\wallpaper\preview.png
                                                                              • Size 464KB
                                                                              • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              main.js

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
                                                                              • Size 46KB
                                                                              • SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              logo_128.png

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_128.png
                                                                              • Size 7KB
                                                                              • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              logo_16.png

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_16.png
                                                                              • Size 653B
                                                                              • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              logo_32.png

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_32.png
                                                                              • Size 1KB
                                                                              • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              logo_48.png

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_48.png
                                                                              • Size 2KB
                                                                              • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              logo_64.png

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_64.png
                                                                              • Size 2KB
                                                                              • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              service-worker-loader.js

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\service-worker-loader.js
                                                                              • Size 49B
                                                                              • SHA256 3ac757f49d04af7076f9f1af2ea33c2ff4d77f5f3200821153c520b4c58fb873
                                                                              • MD5 SHA1 SHA512

                                                                              favicon_opera_one.png

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\favicon_opera_one.png
                                                                              • Size 2KB
                                                                              • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              reader_mode.js

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\reader_mode.js
                                                                              • Size 112KB
                                                                              • SHA256 4f72bc46754ceed048dccf5c83fa36067f144e5ba13b046b12538808986e3252
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              spotify_frame_interceptor.js

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\spotify_frame_interceptor.js
                                                                              • Size 5KB
                                                                              • SHA256 a6b9c0dcf141b8ac58176b870851294e492ecc79a83c8efbfc85e35cb3cada0a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              MANIFEST-000001

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\IndexedDB\chrome-extension_jifbgnmbgbdiedhdecealmlgmekpagde_0.indexeddb.leveldb\MANIFEST-000001
                                                                              • Size 23B
                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                              • MD5 SHA1 SHA512

                                                                              20ff628b-172d-4940-be77-4b5621bc716d.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\20ff628b-172d-4940-be77-4b5621bc716d.tmp
                                                                              • Size 27KB
                                                                              • SHA256 6bd6b3dafcbffd70dd3275e6d9982936c7d21b4b3d0347414d256a8512f6fff5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              3951c50f-a9b3-4e93-9e0c-83c89189f60e.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\3951c50f-a9b3-4e93-9e0c-83c89189f60e.tmp
                                                                              • Size 27KB
                                                                              • SHA256 1cf990618d717d9febe7f274ca61fa0f03d3ff5265fca7080f51999e3dd38ea9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              4e15510f-5731-4b35-ad41-9312e55a15c6.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4e15510f-5731-4b35-ad41-9312e55a15c6.tmp
                                                                              • Size 27KB
                                                                              • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              81fcff05-b206-4769-9969-fd8c315b12d1.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\81fcff05-b206-4769-9969-fd8c315b12d1.tmp
                                                                              • Size 27KB
                                                                              • SHA256 01630b636ae1f8c3943d9dc0268438d6f022114197ec0007894463fe058ba7d1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              98478492-ca45-48aa-956b-c569fd6b1a2f.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\98478492-ca45-48aa-956b-c569fd6b1a2f.tmp
                                                                              • Size 27KB
                                                                              • SHA256 5141f12550467c2dbe7c5c1198ebe1190160e3f0ca2684f03ef05b83f6523c2d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              cee45db7-8cea-44e9-986e-0e07cc30571a.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\cee45db7-8cea-44e9-986e-0e07cc30571a.tmp
                                                                              • Size 27KB
                                                                              • SHA256 b947aaf4112ed87987d0e65bf4688654ced1661b950a36dac6628e4ab485ee22
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              e942fff8-2892-45e1-93b2-e1ab6e17b9bf.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e942fff8-2892-45e1-93b2-e1ab6e17b9bf.tmp
                                                                              • Size 27KB
                                                                              • SHA256 46032af1616740352b7d3950202b165fbef65c79d7bd39317581b90d3c3c7cd0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              0c776d44-a3e8-4691-ad5d-b0df0b2f327e.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\0c776d44-a3e8-4691-ad5d-b0df0b2f327e.tmp
                                                                              • Size 111B
                                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              Network Persistent State

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                              • Size 643B
                                                                              • SHA256 60bd96eca7c6cb1fc31509044b35d6f4cb03731bdf1d8d6de5722a6e9ba0e68a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              Network Persistent State

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                              • Size 8KB
                                                                              • SHA256 63325d8dce5643c7b07c14f48f37ccf0cd7eb7c50e9544f9b69d34498a82bc75
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Network Persistent State

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                              • Size 61B
                                                                              • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              TransportSecurity

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\TransportSecurity
                                                                              • Size 2KB
                                                                              • SHA256 d6d3e714e67c54b579dabb1836c6897c218f64bc92a2c2fe921801b80ced70ae
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              a1bf0685-5977-4716-b7a7-2a76bcfa7cbe.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\a1bf0685-5977-4716-b7a7-2a76bcfa7cbe.tmp
                                                                              • Size 2B
                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                              • MD5 SHA1 SHA512

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 17KB
                                                                              • SHA256 bc100de40e6bb6d7f2d369243380af826354d63d285dd9c85066e86629155418
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 16KB
                                                                              • SHA256 7e05880daaff2dbd4847a3595061c70ff8f4fa49a57c6d81ece2d360d8c9c54a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 17KB
                                                                              • SHA256 36cfbfbbd4bd11f514d44321dbbcbca97d719775bff8f90aa65c62928e7bdd32
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 17KB
                                                                              • SHA256 78230c02f8ec485e81a01bc3d98fa012044b29f435e4e7742c08e4254cdff2f1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 15KB
                                                                              • SHA256 2961815605caaf6535129bdd6bb90630ceedfd962af1e9e9a22ba5cf6a2e9cbd
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 15KB
                                                                              • SHA256 20303a1521d579edaecebf9191696768e09efeb813aa85fcdde5d0e9ff85b6e9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 15KB
                                                                              • SHA256 45420db2565a83d8d457d87ef98dcca063561b06c50268fcf9c3c6647f168ebd
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 10KB
                                                                              • SHA256 84e5c3fd326e8d6176a0a41bf42b786320432e7ff00b711a1ac0b24c4765c4a6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 15KB
                                                                              • SHA256 2027856d97f1b2d42c12914f418ad3436991e2419e7bd10713bb99a878e01c40
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Secure Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                              • Size 91KB
                                                                              • SHA256 16030710453db67f6caadb1b5cd0d1c6dd79d5c0a4d9a4cc7d27ddd9b0a555de
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Secure Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                              • Size 113KB
                                                                              • SHA256 6d24bfce96f55e0eb21b2f0f8699aba01cac7d23369cce42a37870babba164e4
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Secure Preferences

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                              • Size 91KB
                                                                              • SHA256 88db5fe1b1fb35abeda93c44b38ecb14d05e4ee5382bc59c880191c92dc3271a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              08b99d499107ba17_0

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_0
                                                                              • Size 46KB
                                                                              • SHA256 87985ae1bfe55d4b42a6b0a860f5ea1c32dba653280e91af4b10a600054bada8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              08b99d499107ba17_1

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_1
                                                                              • Size 110KB
                                                                              • SHA256 3cd4c9cbc944bc42413b1d054608970d51320081be271e758e59b9e610b47660
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              02275ec3-907b-4666-a3d5-00e8b6227d9d.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\02275ec3-907b-4666-a3d5-00e8b6227d9d.tmp
                                                                              • Size 48B
                                                                              • SHA256 b23bb41837454c63e06944437ae8d3f2ae764d33455fbf86e445d62fa53ac322
                                                                              • MD5 SHA1 SHA512

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                              • Size 336B
                                                                              • SHA256 7a1695388d75e8ba575f57bf2071883d4e2de72061e27e9ff938f5be90fca4ce
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                              • Size 72B
                                                                              • SHA256 535cdb3872d8f5beaa79d1be2a70a70c103b828bbf9565a5d3c893e9d858964f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                              • Size 48B
                                                                              • SHA256 88d48990b1bfb41494d7351c2c77e1a6cac1419c93038d9ce6527c7f65cdcf30
                                                                              • MD5 SHA1 SHA512

                                                                              14621e90-1d5a-43a1-954e-2388487e8103.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\14621e90-1d5a-43a1-954e-2388487e8103.tmp
                                                                              • Size 11KB
                                                                              • SHA256 f3a1e68c82e1bbaa0290b377b4822ac606cd8d1196e9f03d281835d7cb9f0ce1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              14f41804-721a-402f-aa7d-a89a8083c0fa.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\14f41804-721a-402f-aa7d-a89a8083c0fa.tmp
                                                                              • Size 12KB
                                                                              • SHA256 54015a6270a70c50b83cf983336871cf770a83627381980bde48e353f25c8ca9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              26704d14-120e-422a-85e4-b5a4409e02b5.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\26704d14-120e-422a-85e4-b5a4409e02b5.tmp
                                                                              • Size 381B
                                                                              • SHA256 a347541b27b89004f43ab29cc91ff8efd2ba354f6d58fbeb47b2334808dd84a9
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              328eaec7-1fa7-4df8-a621-e70f14c881eb.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\328eaec7-1fa7-4df8-a621-e70f14c881eb.tmp
                                                                              • Size 381B
                                                                              • SHA256 1bf9aef8bf5429f7e4864a9769276f383294bbdb570e7dea28486dc9ab0adcc3
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              6a6c82b7-34e2-4344-ae78-445924442be9.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\6a6c82b7-34e2-4344-ae78-445924442be9.tmp
                                                                              • Size 381B
                                                                              • SHA256 dc3d90edc0802427c9c6e7994a319b771b7eac1321944f97fe4a7a86f525d5f9
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 605B
                                                                              • SHA256 c7ca46fb199fe417918333d730605c2383db3b12274f124658a97a7b2f1fd7e8
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 1KB
                                                                              • SHA256 fcd081bedf768ce54fe82acecde11dcfc97ba39520159e8dab5428591a09310e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 1KB
                                                                              • SHA256 b93113f77aaf764601efce639e378108a6d148ee58d3f6215a7ef58807038ec3
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 1KB
                                                                              • SHA256 dea5e2d45a5fccaf253c92a35c5b202023745a80ecffa331847e42958dee919c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 1KB
                                                                              • SHA256 d97edad40f703ee2a536fe427bd556eaaa4fd013e4a66c42094003c7555f2f8a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 493B
                                                                              • SHA256 c43ed6c964cac52c21201d85c481a08b75fa07dc366df1d1d39517957f0b773d
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 781B
                                                                              • SHA256 c66c41b4f14dc0548b977819f79964b1646080f4a534643152a1a3c35f3cb5f7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 797B
                                                                              • SHA256 19b0e181012716e666ce105888a92a8c230d42ee9ed2caa38e4a7ee43601ffe0
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 957B
                                                                              • SHA256 59aae8693f9e153074707aa1438bb2535845e0f0927a2a5ce83798818a1894ed
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 765B
                                                                              • SHA256 5bacd7836de8f9c581b0673f0d331616bac99483fa68d0732b03f19d120eb8d5
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e1569db-cb87-4347-b0b7-c851b6fd651c.raw
                                                                              • Size 1KB
                                                                              • SHA256 002df7f6044afd4bf3761ff6efbb259d6ccd80a84dbdaf5a6da9400918bc0872
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 49493e0e2feb271e851d65a042544d3f73264343489ec1bbe44c12f344c3d4ef
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 d412c334681b4c460cd7db7108dedc760aedcfba6c1a440a641f14f500c84c4c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 9392ea2e519d4623bc8d18fa5e4c71334936a906a540aaebcb843eedaa7d0de7
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 0df7741d6cdb77e4bd729ca750024c6b9b4b1fa48497c08a797c8b89efef9a04
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 a1c9641893dbfaad2c5c94c8b38ccc5a77cecac35ac3a34c6753c857186b1830
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 3bf4dd86c18fd00a78efe8fe3707b358c6f8e438c816ab45070dbc276848f92c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 1bac0621bd091ba8622551b8e4acd5e58f065940f3a661a95694d67072948c23
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 039d9d3f5b140085345be65a783e18b2bb2a5f55c943a72b9c6a55501eb47570
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 37b86c148b862bc8f0500b10741c0cb2217db61d995ba420bed725cff535bc69
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 42019d823fa7023ae48298cc4c712b73445d3d2f05859830a0c6a0d13468a935
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 17bb2be13b335223e073f446fb109ae3d0823d3120400b744796bd08afcc3f8f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 ce1d1f15ddea12b643d3cbba3cb3c6cd284ae42db674130cb7124aa30c0c4136
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 17KB
                                                                              • SHA256 2c1e47f74d596c75e000c6843fadbf10fd7a5163baa8ae2fadecb0c54a2b9cb5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 17KB
                                                                              • SHA256 279a9f6ead80420659bcc6ad5d9849c8ff534d0850ce60662e362caffb975aef
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 17KB
                                                                              • SHA256 c48fd9e4b9769397a39e0e5d41e440aaa16d0599cd06d287c2dac0e53e437734
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 17KB
                                                                              • SHA256 ab6681a256845ff8b1657688315b7cb8563a7e5607414e644d3766643ae420ed
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 17KB
                                                                              • SHA256 99cb6d8c1306b641b4c5710d7c9a194709dbf9ed156673ead18307063bde1061
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 4bf7ffc721a4a5fe5252d8d37ea0f45d3f2a6d5679c373145926c58270a1fa67
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 2de915410528b06dabe57a35cd9da56ab65ec146ab3991051533f968a8c7b9a6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 77f6a4bf7e92a4a2c02f963ef14e73608be7f5450f1ab2bee47e721c1a13961b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 87ccac79345e3be3060ca68cb31b1026e92a6a9c71a03316413c21c895e69e51
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 7312c5e3411445f894c29896dd93fd13097604a6d7d8c7506900f9225a4b7a13
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 2168f23992ebb7ce98535b87e8038db6c8e94e8cd99bec5ff4ded171d408d934
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 fdcdfd5e208ab52d4e4990ccc651680d93659d175b5545ca9902eff77b77f1c1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 ef4ad7d6a1e47bef262b3bb19d3a4087385273c63ae73d7e14c06dfcc5e59725
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 43297e03072eb142d9d5dae5b5b9a8ceae6e5a293dc5e8318e6691d29e3269e2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 d0295a79a3e53e4d8b75140845d22ad08adf1958e389d04422937c5d0fe86ef4
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 e748e33c10fc07c65879c164525e6c07e7665ddd00041d11a437c70fdc77304d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 c37ee07f5c2d65505454967b2ec9c036b78b63a418ab3feece14a418bfec5cb7
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 32b52eee23f9c58ddb0258e76a1faa61415533df2dd6725d9a6c09a4a5ec896d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 bda0d55c544a1e535efbb6910dbb42a27701314bdedb3321d0d12051e1cdcbc2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 cdebcdffbd2d7377d5805f6f77c5a0a43c746ecd2f81dcd776ee4030b1b8d75d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 7b9c801ed83ff78a6b12efda5891ae8250e3d9cca9dea22798b74369abd8ee06
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 62f8bae0ebfbf1e57a9475454b87866e5e452edbc8dc02b6b2a7a59224447ae9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 12KB
                                                                              • SHA256 930a90e3508ea0362ff430efb3d4569e7485b3759949c2c1e91767a470104eb6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 14KB
                                                                              • SHA256 72e2a974266d2460aa2632c87eb6ff71492b94f12127dba9972ab07a38173c86
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 68f9c9e29f0f7955ca50636055eeb0c57eeb598c2851db873a3da13c691d947f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 3acfa2a4dd04d51b059bde6ad026a93b63e0aa0addbb49715df09c21f9585e65
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 250d88c463529b4aabae45d4d3ce9ef5119942821c9bddd007d0fe993f153b8d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 6bdc508b8ad51708e4e27c040def8bec14f04bec68a202c5ab0de9a6fe5d4e5c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 e851fa4a5d185ec097e4fee9135140b0756416b6bd177f81f8f69cdfb937a449
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 c6b3699deb36662fc90294508045a5a135fe291e47fed9d1e7680e26713dda6f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 48302a7086110405c4e5ff9bf5489af59fa3f1fad59d6ed78a3216f15a4922e0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 ea4efd2fa5d07fd245db23af4f58dea6b39b0b106e5db484f2967a6734a07d2a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 16KB
                                                                              • SHA256 d763a9f14a03398124f942ec6631ad5d20c4dc935ba421b9998c0ba373997ec7
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 17KB
                                                                              • SHA256 395c26519da39efac174f0bbe28a86999c5b10ae6a53257c14cc2d08891050f3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 17KB
                                                                              • SHA256 fc477d434ec6c3ebd421a7796d88be1714a081619e0756ead8ee180da632c23d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 3be28cadf2928d74c0f7cec30738f8f0220f5a31299584ddef21c19085610b11
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 9b7715484f3e2bcfd39934149f7cf5e94ea211906ba4a68eb8d63e72ef43a81f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 dff40f1acbe9bdfcd97a0ebc144b3e4e3fac6d2bf8dceb3f9063c9bd3f1b9369
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 5e7c721106885f83838d0d798d46c4c98ea4c3e284cb5a38348ebcff4cdcb162
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 31af5b86214fc8a8a4ae2a751d29054bbb10ab22cc9ce399ee36794ccf81624b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 cf135f3986d393454bec1e864e70445733253a878c8109840df53886433b4c00
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 7KB
                                                                              • SHA256 b4a97062a901cdbe902c1a16a7c20ff0a1daf19b97391fd4e89aebd5310b820e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 09a1ed27f74b4f0b82ada1c1a6ab8feadaa6f2d9ac1189cad6f989b6c4e850b0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 d4b3d12b525586d1f382aebc9ca9f41fd52bd0551d12d1ca3296ea66d27c60e6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 8cb459c661decfbea384ae54b73af2334bccdc5a2f34d57f75837bb4764cbc4b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 ab221471b6601c7c6396415f44d52cf3de4fa1e1d42ce523298b2f81ef6c589a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 00cf7492486b7d0a8bbeb2f690dc332b8b3630cace37811b2c1d9402508e6e16
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 55fc7aadd83eec4ac8c795a554818092bdd2956b7a119b0475a3f388e7bf700a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 5da2127b386a447a03c3e4f56b8fc7d6095e05f6044a8dc8d903a7d151f2a7ad
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 612205092417b51756ec9d3f00dde042cc8f25d7caefd4f1b327171b2b1e2fdb
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 11KB
                                                                              • SHA256 933a6e066a8ea2fce75a88c41fb321cb60a335e4151b9dda0d51560e0da14aeb
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 4a6ecdaa6efc2f33153ca61c5ee0ac6681a359cb8c13157a686533c84ec15fa3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 12KB
                                                                              • SHA256 fa63fab5724c109e919cb72ebf424862e3dbd3e18a058bf465ff23ef6d124c38
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 13KB
                                                                              • SHA256 5649fc6a14d40f04b06253c3a42a9c0f6da0921c1b3b17edcb005eb52f39b2a2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 14KB
                                                                              • SHA256 2905f448155445b431424f819572d327eefb70df84228d1b93da096408d533b4
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 4a0827d4dcb8848e4155272a9ec73e571816e3d22ff1b08670ccf608e58735bd
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 7ef1d7b0af46fb2a218a29dc80cc9cfe2decf617db032839687a652f21757979
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 b56ca346cfd46a6830b67084a9de5735b0cc1f1f4631ce4b512ed7fd413aa48d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 16KB
                                                                              • SHA256 0ce3507255cea5464bb87e3c13c10468f2af7b5b78fdedbc41b1105058536f46
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 19KB
                                                                              • SHA256 2d757d58e2e8f2351b45fdc15cbc2d0d4178cc11707791794a2c2c6655dbb355
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 e898b990c3a9c7780b94d1b0255469d6b81e2ca333384b9bd38b725b5355bd16
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 0e0858b0750e050f7c21e41e389af839260c08a63b97a3f29ddaad70abf1a401
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 f2941eef8e3c54728715406f64e181b17a4bbda1aaf64bda5a2fc4a3dd5553fd
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 430138652f117a3dc87c7d65c1b0d5e679b9c9ebca201aac52467dc1fb07f46b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 b552532ab81075350b90e13f2f2ec79b6bc0e93fe8685ec18ca2ac18da2f0580
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 bc1a5d0e458f094752eb57cdae2a1e555b0ddb03e715d8bca362268849530797
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 b1f07b82423cbfeb24dfcde2a55ed1a94b755c14d7030ddf9733374494daf7dd
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 11KB
                                                                              • SHA256 017c029f43ff644c01f5f764328ac6262270ca145f5a17f95610e26f6f5e3e2f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 11KB
                                                                              • SHA256 d9a2f24adb027dcfa6aa95255c5b0c744585f544b3d23ab6ce0fd60fdfe72fd8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 13KB
                                                                              • SHA256 5cfd9cb419d0802fca6b695b8c6c5f1ec0ddeb240537cfadfea9249204e427b7
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 31d069c5839e1f719a5fac69e3c9d86b9e392ee7ea96a66c5c51932bd2ff7d77
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 19KB
                                                                              • SHA256 70d4ce010e4587c3fff6de9287f3dde7420b3a37700083d88cce7ff49d176735
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 17KB
                                                                              • SHA256 03975a1954de07e4456b6d6c1fcde00c9782d19355ce969e4e2d3e536dd0833b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 7b6f63178709fe7898ea6b10552da9d76231dfa93df2ff1099442a748f65529b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 e87f2811c31ca003ddff80f72e4cabab2abe524ac9f7aa120a71f37086550f2f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 55134d56e7f58f5e7bb35d2389336f845b5c8a54d0d3376b3d6967fa0e26ff5d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 621B
                                                                              • SHA256 e34018c6392feb65602678985c00ad659da1b397f8f8f400d1715b2246cc5f4f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 909B
                                                                              • SHA256 afe5d4a07cee179f81271ece9a1e2c443a4c02078d7efe9ef9dd982aca6db7a4
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 9KB
                                                                              • SHA256 974c45e0d69d087388bad52ebddce8ec9dec36e901ceb4365986a2b8b7068c5b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 1KB
                                                                              • SHA256 54bf1bf5d836baf192f25a229b14173835711eb6bdd0d7e0d38208e8d5d926c5
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 11KB
                                                                              • SHA256 6ca235d4c510de3525f050fb8d56335b8055c44e3d323ac56ba1ac8cee5171fc
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 873603fa48509fe73dc8fda1a6fe60682de536d83701eb1dc8b9a1f5440039b5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 14KB
                                                                              • SHA256 47e17225f8faa2f43276ef74f82819208250ab824ae3729c7e19430536261ce5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 ede0108adab50f9bdddeb8bedf90be61f3dfe1a915c18c2062a78f441abbaafe
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 16KB
                                                                              • SHA256 3c8eb7e02df9375caa13d036d3fbd736bf981d42999a0190a2976560fcc77237
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 df406b164a62f7edce9f1e7c44dd83008806f4e245d3f3af6e1af5ee11315f38
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 11KB
                                                                              • SHA256 4ae863a74351b22750396bb5a70d9159a9a20d12556b720d3674f876e48c9d83
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 1KB
                                                                              • SHA256 6f265fcb6bba96c05a47261175ce33d32c959da37418e2bd78edf38454f2e2f8
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 1KB
                                                                              • SHA256 6320dcc26674613f3418d94a4d4e798af7d9b29ed9bdef90c83aaa33f029081a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 1KB
                                                                              • SHA256 e458412741d39d6df46e89c661e7fae9b3184c2bee42a61b72229ea66873c77f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 1KB
                                                                              • SHA256 bd3cf1dc97d32562615d5b5de0477bf8d4933fe49cd4e6059f9136d86b61d852
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 67632ed9f3859481016f1bd378d36a266d2dd4ed66afad4a4330ae22723727b0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 f8fb7b4736f81be0cdddab9d5a9a8b44e4ed6fea4248cbb3427c87289deb095e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 11KB
                                                                              • SHA256 730a28c3132ad398d698e5974fe890c7899b835bf44c4a9447ac0ab1e74ae34e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 13KB
                                                                              • SHA256 a7e1f93487f6d40f92ceb4f03979338bd6b1bac2cf81af0ddd7ac110e74f99ae
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 14KB
                                                                              • SHA256 b0fd743bcda3c794d7b20005323b227278af0549bbf20171ae0da1e4719013e3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 8659a377c72df97f0eb8055d2f2d08d42205c42d616a7628f337750cff01be1c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 16KB
                                                                              • SHA256 61ac9f3977621728dda2270b9ff5ebfc20afc6c2a9ddb35972afb54c7e10728f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 66887d8bf4d401743351747e24beaef6f6e15a70df709e9cef127895fbade2ca
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 afb0dc3c6e8f7080d032fb1058f545df58a6d2d5be26b0c561bc39cd1cab941d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 493B
                                                                              • SHA256 eda5fbca1e13d06ff57c2ecf0e73f28b56bbf7bcb74599e75f6d166c58022ed7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 8KB
                                                                              • SHA256 983f37d6877c26add533097fb6c6f910d9620ff4542787dd5f6d451c6fa5c4a8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 7KB
                                                                              • SHA256 a2fb84ee846fcd4e0ecd52e0afce9071974329a3850789c9a559e54a330418e1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 9KB
                                                                              • SHA256 7c6caa8587a2d4d7e98af82b37266a51c27e80ecf5b9a06688e77176a1f7d80a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 7KB
                                                                              • SHA256 098598a42a34c6fc6b24e4f34c00f6157afaac495a595ab4d88eb17d008269c7
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 9KB
                                                                              • SHA256 2c4aaad84b97e8c67c372fd3992f9c8a336fa379aa25dd0eda247a6f9eaaf4e1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 10KB
                                                                              • SHA256 f03975161ea44a382c17ea398ac7ee405d0857413247965e1ac4915439112fa9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 935f3e960f4bb65fed0ad76aeb657e59ff8dba1d0f5487fa616821384dad5548
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 16KB
                                                                              • SHA256 3fff8be71b7de115f60fdc7c3ed727d4112e8cff956cbee47fc1fed9d2da3a3e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 13KB
                                                                              • SHA256 cb1662a168c97ccab4929ff82946ad591335bc480f7357a4e6ad7473c95004fe
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 14KB
                                                                              • SHA256 ce4fbc8d97db4a861227e2e449e7e60aea00ff427e8dc42a7b37fe116c6da1ad
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 19KB
                                                                              • SHA256 fa5c0750f89f378dcf1628c225daa6c325d04a054f9d2bab66407bae2472e93b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 733B
                                                                              • SHA256 5cedfc9a76bee13329ba9db8b5bdbddfbacccb4ef304036ce9d17e10f2510711
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 7KB
                                                                              • SHA256 96d93208bfdb6df1a679ba569615081d20ab46c145d990935b169c3b74c1909f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 14KB
                                                                              • SHA256 d50d070a92a90f276deb3a5bda76e4f0930b76de8182be3b2f056f0413f53c8d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 9KB
                                                                              • SHA256 64f3af71ca36907f55d9b2e325b1fc05116ecf1e233cbc84378e7ca0d5c3c600
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 1KB
                                                                              • SHA256 203e610a13ad4fb98273efb6445915f8b71a6e4f82a739211f9decd5b167500f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 1KB
                                                                              • SHA256 697126a93a42e577d10b8bffde3ce1406e1471d4142cd1c614b3ac2e6ce30c2a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 1KB
                                                                              • SHA256 a5de36e696cc2558930fd1d2c19f644334ab4cdac4401ec1b4a413f878714d3f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 8KB
                                                                              • SHA256 19c1fdb49c2311f340e90eb334e110c51d0892d9258e91d9be1269b2edb945f1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 1KB
                                                                              • SHA256 9a2461761f1159db810d0f6c95b61c3c6f4dc57fb7b3a10d330b887a9070d344
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 14KB
                                                                              • SHA256 5cf80760259d1caa974d0362983be4b0043bcc099d820e198105c84e7252133c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 3030fe26fd92be67fa1573e5837dd09a5197dd211193af72e855607742a22a51
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 16KB
                                                                              • SHA256 bd54e068cc296719b1c7718a6ec98d471eebe4a5b67935b99fde1fcdc7d0b108
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 16KB
                                                                              • SHA256 223c25f806f5da9a76d6cd69b934e3e969039524397c50c5db6c3f8ee6d5f5d1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 14KB
                                                                              • SHA256 2e2bdb207522d722eab8650818b3298e4bd9b5bafb5e0c16bc9d93d0ab66354e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 973B
                                                                              • SHA256 f87c4b00f413353f661a600b40b2ecd3a8f75b4dccf9d5e1c623e6612f2be3f5
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 8KB
                                                                              • SHA256 faad1bb6553d229024b47d2ae6fcbef3ea3bf4781d1673faeed16abc3b4cacbf
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 213d38c201d4c0fefbc0b443cbad1a10fb02e23ecc16818eaf3bc9add6ee5e78
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 12KB
                                                                              • SHA256 4dc172f7f56c28f56dce4a9f0283fd80b548421cf438708e1f76c0cf29936499
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 14KB
                                                                              • SHA256 4d0a44c7d907e5e071c39bd33853549e709b1d8d13271e0c9e6fba5944901fc6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 16KB
                                                                              • SHA256 7f588b8e973cc4ee9bbf2e3ffad1b9d126ad06a6a9a6655bce9542a56a8b09b0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 19KB
                                                                              • SHA256 14e83decdeb816019a7e9db77c0e432bd82fd1db022529730bf6b218791eb307
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 8KB
                                                                              • SHA256 cf7a02e28965ba0ddd5b44eeef55403d03fd876a89687749e41740aa3fa5a002
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 d7982344d1ce4f542bee2e6f57f1a7e0805e206b19debfa96ed59d124b0540b2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 8KB
                                                                              • SHA256 e38b565fe2c77b9cbf1691728a00ca1811f2a2fbfaef4ea005b71ab99db7dd41
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 9KB
                                                                              • SHA256 3f0a09e51efbc58df157ff7c5ebc0d1956b4c881a2c78d78ba495d9222f51b30
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 18KB
                                                                              • SHA256 236fa2c857d702c70ce690b9bf555ee10915b2ad54d30679ec505a5b629a24ed
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 93e4820b33d4447a3405a3c1c9aa06af2de147f3385ec244e73f0a32174e77df
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 16KB
                                                                              • SHA256 d7e0315f220819214c6e8edcc17d708354ee9f75a6913ae428a66dd43672eb51
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 19KB
                                                                              • SHA256 8dce4424816d0caf6f963be5f8d51f6c58dc6364bfa1d736471e3956eef1c0f2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 8493d531898ead5d4ba74eb1220064141128e2e1bf6fc5b1c6667e40b0f03d8b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 8KB
                                                                              • SHA256 7bb28f7478fdbe72de4974fd4652354241530bad011512c316cf9b12bed81108
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 12KB
                                                                              • SHA256 006ffa1c24093b403ff7510f9e895c9e1b5d47b71d6101fa0ec5a4a393fc7f90
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 9KB
                                                                              • SHA256 26f3988b67eb9b5dce03d0b0d45ca6f88c42aafb6fb96e62ee0d5874489f02bc
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 9KB
                                                                              • SHA256 1a210a5a8706ae83dcb2a7f2dc540f668c5a4a93102a0db0e15a23dd38de4628
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 9KB
                                                                              • SHA256 89a4b6538310cc974cede4e19207d2748bb7ca3278cc42578aca6c25baa14c94
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 9KB
                                                                              • SHA256 c3e07caa714a30ef3706edb30deb927ab87792d7b3c20c2346d24c350aee69b0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 13KB
                                                                              • SHA256 779bfb82cf98caefce540b55a19ea0e4fa6124783375a9b8b74c198705930d58
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 9KB
                                                                              • SHA256 1c62f5b1d5c23ad2d9f893c352b3bda90155e5aaade3a32b378d180c27e3cebc
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 19KB
                                                                              • SHA256 21d816cc991ff92e5a0587c31a6112c73fa1c488a435ad808e56b011cec2818a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 13KB
                                                                              • SHA256 04a96bc5e1650f9a7a5612162ca8b659694ac6d742cd8aafd0523f17300d67ef
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 15KB
                                                                              • SHA256 81d30708fe6d46ed347470b8623f312afd818a2214f62e7af863b9d17f7eb9e2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 19KB
                                                                              • SHA256 26d81753af31a72d18b6a666f43b5512b550a681c5c3760d8806dd146cf65472
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 20KB
                                                                              • SHA256 58f4b4031f7238c49ad9857c6c71ce98f47856676d2fc32c5d68cd171a35e5d8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 11KB
                                                                              • SHA256 3fa4ff7b8f006243fd9bf9556562a71e658e6b5f5071dda5f71c9031f812695c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_717a0097-b6a9-4493-8e49-9d4943eb3c58.raw
                                                                              • Size 12KB
                                                                              • SHA256 86058b66e6e07973e3707cf4f1054714e2a5246faa80f6aefd9e5b33a2b2a3c4
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              session_fc94c406-ede9-4312-8d82-ec0dae762761.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
                                                                              • Size 637B
                                                                              • SHA256 f03a5b054712e97888c54dc1b4bb46dea09284c01d4692566a7a3f3b5eae1ee7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_fc94c406-ede9-4312-8d82-ec0dae762761.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
                                                                              • Size 845B
                                                                              • SHA256 a6188577bb17633f7ed6aa7e3d0dedb32cf0b58361282b09992bc0934deda5a6
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_fc94c406-ede9-4312-8d82-ec0dae762761.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
                                                                              • Size 797B
                                                                              • SHA256 e2d12490d40f78c952e761f141ee8db5b321e434a28ce1b0e6c02fd0d5344671
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_fc94c406-ede9-4312-8d82-ec0dae762761.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
                                                                              • Size 493B
                                                                              • SHA256 5a9658a45f8db5dc97e7ae3d51aaa9765ae34a4ed1f22fff0e49f23eb91c96b8
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_fc94c406-ede9-4312-8d82-ec0dae762761.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
                                                                              • Size 621B
                                                                              • SHA256 24ea5b4186f4d00f7f551d62d610c588cda8d5de75061457d5f8f78f1cb6acaf
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_fc94c406-ede9-4312-8d82-ec0dae762761.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
                                                                              • Size 637B
                                                                              • SHA256 4602c2c32a64248c85f1201828fed4214008b80db6c6bf19176379d27176d456
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session_fc94c406-ede9-4312-8d82-ec0dae762761.raw

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_fc94c406-ede9-4312-8d82-ec0dae762761.raw
                                                                              • Size 637B
                                                                              • SHA256 3bb6061339cd34de688355365f10cd44cf10e24f632d0163a7275b1695e57bab
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              df7b8847-f1e7-4c41-baac-c0b03603ac57.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\df7b8847-f1e7-4c41-baac-c0b03603ac57.tmp
                                                                              • Size 203B
                                                                              • SHA256 5005d262a6be10817e594573e2770488d37a79866dcf5afa66d3351a888a2c80
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              e1ad974d-e368-4e0c-b055-a518d06dda9a.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\e1ad974d-e368-4e0c-b055-a518d06dda9a.tmp
                                                                              • Size 371B
                                                                              • SHA256 a4fbae74c5910df260aae4a4b71624c00e5af9d1b6d99e19113819169d049848
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ee60c5af-34e6-4c63-8706-009cc95cde98.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ee60c5af-34e6-4c63-8706-009cc95cde98.tmp
                                                                              • Size 171B
                                                                              • SHA256 075d75f322296a71cd7367154dcc3fe5bd5653a9a754de89f5ad756697f04ea8
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              fe11407e-31b1-498c-b224-573933a54bc7.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\fe11407e-31b1-498c-b224-573933a54bc7.tmp
                                                                              • Size 203B
                                                                              • SHA256 953fd62d5a937efb495d352c9246946dcd1a129d6df3c30cbce8e381af9e135d
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4444.0.1254113670

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4444.0.1254113670
                                                                              • Size 1KB
                                                                              • SHA256 e8c37f9615054d6abd247bc197d5c9e44a3d3d451d38efe60108bf82c7bb6da5
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4444.0.1254113670

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4444.0.1254113670
                                                                              • Size 2KB
                                                                              • SHA256 a074f8df24eb9ae07f648b3d9ce24158355113faaf36cf344b7a39ed92fecb39
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4444.0.1254113670

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4444.0.1254113670
                                                                              • Size 265B
                                                                              • SHA256 18cf02e5001a5516975a6569c757e3487850ae942828a0631f54c3631d0028ef
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 3KB
                                                                              • SHA256 bcce659a9f3b500b423ca69f95dffda5f8ef673ab32a31871340e942d34752cc
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 3KB
                                                                              • SHA256 581afe0d4ddffce07e3afaf0f563c716526f86ea21d3907e74efbe5a14085b10
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 3KB
                                                                              • SHA256 fc7d1bc545f8052cd2802ccad1800a4842d294965c3e7c9d0033b24b65bb7a1f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 3KB
                                                                              • SHA256 0197535fbfccfeb2c87814904e66d5b61812fa75d9e304d6dabc7a739310eb4f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 1KB
                                                                              • SHA256 2f6e8fb859b26430eb28b20e8926b59e3b1349453956c46c26fc8cc446c03a6c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 3KB
                                                                              • SHA256 05d999095d51993c3e369ccb347edfad33ab874a88d7079571dfd1a222033a48
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 3KB
                                                                              • SHA256 50918bd48ec21be6c348e38ff39ba6b060429d52956ef2b30ab0b60ec3cf354e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 3KB
                                                                              • SHA256 59e923caa2fdfd1c1fe289fc0e4e93467c50cf934d107f74496cf1cf766a15f7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 531B
                                                                              • SHA256 607413a810ad2862141eaf649cc20e78aa84c15a4a8040a6a72551f244a03c90
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 2KB
                                                                              • SHA256 2ac4b5718ec67f74b66ac867a8fd641361015d25ac19e3c89668be35b8bb1509
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.0.983600335

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.0.983600335
                                                                              • Size 469B
                                                                              • SHA256 fa99a10bbe3aa07fc0667d3b4bc7228a7ef9c71bc930f4ff7be719d60be91572
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 e7b0e37246746503228b7e31de4794a5abeecb6617f66f3782c312b031af767b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 f98548bbc912b58da2b628d32ce7edb903788f0cc6b06afb0959037d4077fd24
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 03e8f707520f792d1ff32ac2478c1c9df764c460eb426f7016ad2054d9b2114a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 39a96583c0deaecde622475602369e5f9ebc8aa12632f63bb45209dca7f7a01f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 25604488246896bc1f64689c254a36f80c2add5ecc0aa005183896e9fda7ac34
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 b7dd8aa94ac918650e0a38409d5364ac24ed750a3f5299cea3a56a299b5e8331
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 823B
                                                                              • SHA256 1567677796ae536d56d93777776dd53b13393dc28fcd5e37a58a83d759b3ef9e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 918B
                                                                              • SHA256 35834f2f690e489e1f49badbd51839431567d36ca7ac3cacdadd9f1be4a9b127
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 a2db7edeb2e3f5717f08c7d25e126b30fe1a336688b74997dca6b156631da5a0
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 8b7d9f3609e2d2ea1b7085828170fe9fedff3a2b68ec8cea1c12aec104c4337d
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 08da478d798affcb9d566631b8eacf46a44dd61faf7fb8f2c3795dd706bd1b4b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 f582ebd56222cbe6224f2b26b68592db8e7c5fb997ef74af16c57d705492dbe4
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 2194db7d3a219d9255da8dec65342ede13517bcf4f817c9bc60e06469b05da04
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 d05b64e1039f4f6d784ce87b9465ec7b0bf8ac063d660bf8ac7673447661c300
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 0e39da764bdf3f723c1b63a532fdefa5f01a51b524f3b3a3f8d525fee0b5535e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 4b87658e047d9434f2405080e986894590ef5f936448b4de5f825a9c88844c9b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 8c2a87d09668d37d2e5fb960502b14f3f4a47065a83f8cd4f0b429df82c15822
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 c81ad5ceeef96b577297039b576ef2b1cbc479efa3a80a026d3d06b706981dc8
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 294bc9a52d60785cb5564f82c4f6987c668b42e97dc9753d074a2a72778c91c7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 07e218d13993c3081978eb5b6b3846f0d393279c82c99d4ed47ca65439cd3f39
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 722B
                                                                              • SHA256 c5d598d1618bb2f7bf8fb56dda65afb0814f4e46d811f8ef113d3e4a6d6c5d0d
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1015B
                                                                              • SHA256 6ffce000d4c6e0e2986c7c6dc16e0aa59790ec349d16f3ed01c85db993804b24
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 626B
                                                                              • SHA256 60cb3b1fba68a555cf3bd613c1cea4fec78d2303a89df77822d1b69feb423a1f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 f821c3e45dd3ad170fb8acfd6b60f762ad1ffe2056cc203bcde1b9d051c1c30f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 ae4b4892485b361616382fb9e0a199a01f4e25b640409002e1b8edfd7daaad21
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 369541528dbcf46a3aeb2e0be7a0909230ebad255643a704b43dac8be069e178
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 356B
                                                                              • SHA256 e3dadc7a11c5fb056a4831b38fd5bcb4434669fb921ae18e230f67ec1fc81802
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 538B
                                                                              • SHA256 c6938819697d2856e336aa22f4663112f4ce61e630d72634637b6081a256c71e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 200B
                                                                              • SHA256 50dfed2a7d7514e532c32e056558ebc477873d1a68ece4397a754d28b42278f9
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 f3e8af87d22d7d61ba1f3c0bfb21f694e63fc947e92c0cf33eb465b00d881724
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 1KB
                                                                              • SHA256 ddbc76f1b59812ed9ebed0b5cf615c58f77aeb65c93900751539dbcc55b8e611
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp4712.1.1128187791

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4712.1.1128187791
                                                                              • Size 448B
                                                                              • SHA256 486ee4e2a6b20a9c28384ce3774efb2a59efa223101a4f3071788a1283a7139f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp6628.0.1208051048

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6628.0.1208051048
                                                                              • Size 2KB
                                                                              • SHA256 872f67917cb4a0d76c0c8cdc44f71e0e3f1cef1d41b74d3054b27611575d7e92
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp6628.0.1208051048

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6628.0.1208051048
                                                                              • Size 265B
                                                                              • SHA256 81d092e97db3516739b918ca4cbdc888fae0244aa0685c33e1743e5e4aa342f8
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ssdfp6628.0.1208051048

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6628.0.1208051048
                                                                              • Size 1KB
                                                                              • SHA256 560293c0f06b5d647594c355694a5fc7185697b554d7652e6b68920149d2b5e7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              suggestions_cache.json

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json
                                                                              • Size 157KB
                                                                              • SHA256 c5a15ce51e3e8a3315d03c947baf64cf47b87b64a26b6363a63b576d0a752219
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              data_0

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                              • Size 8KB
                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              data_1

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                              • Size 264KB
                                                                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                              • Size 5KB
                                                                              • SHA256 e946ca3c84fe601b23669e44f8008c587792f35dbadeaa0a8aa4c88dc8adc7b2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                              • Size 5KB
                                                                              • SHA256 712d8a4cecaa9dc0d55579a2037c4fb2aaca06d68c87344454c423cc27b417d2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                              • Size 5KB
                                                                              • SHA256 12a82739735a988f653c1bce7b4552dfed30fb5ef62608684a3e8b5cf5a5d02e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                              • Size 5KB
                                                                              • SHA256 718f9c9e55a0b2be5adac25d7c1d1a9f8441fa991582e862258e21675ff4d189
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                              • Size 5KB
                                                                              • SHA256 6c66c7e2970e7fec8bd1d71041e1d9f5221426e06c0818c5ab0f90c599329494
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                              • Size 3KB
                                                                              • SHA256 e4d44c1ba253289904f2492b0f48c4532510f4521de8d1e4359ac127673da692
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              1406e157-b554-4ded-9bbb-8b2c237c16ad.tmp

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\1406e157-b554-4ded-9bbb-8b2c237c16ad.tmp
                                                                              • Size 348B
                                                                              • SHA256 623b23fc4a74968ef5d06903da56f4a7006a399a65ef5ba1b50c9033d3d78556
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                              • Size 124B
                                                                              • SHA256 d94de90c0cf39e350e6e61f584f44e4ac815a000c94e9cba769dcccb3d70b25c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                              • Size 796B
                                                                              • SHA256 3dc0104195cab4f946fead5fbd028d56101ce2c6a246dbb0bacfc584dd4517dc
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                              • Size 572B
                                                                              • SHA256 29400fb17775227c2895883740ce13de6eb5cd60402952d2f0af42707008bf53
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                              • Size 460B
                                                                              • SHA256 a72029d441aa7f1ca6cbfacb5d96f9902dc1b31d25a9c6b95e36427f2d1b606b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                              • Size 684B
                                                                              • SHA256 dd04d34b867f264cf5f7346da770f403db8cc4cf19d57934b7f549cbaa9aaafb
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                              • Size 908B
                                                                              • SHA256 34608d1a9ef6e0a27858f95806b6a197bbfdd6e438472501f9516f2740bc2cd1
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                              • Size 13B
                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                              • MD5 SHA1 SHA512

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                              • Size 236B
                                                                              • SHA256 b14b91d6fc1282f83a877c8bda61dfdd36420ca190f370f5e14705344d403b9f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              hyph-bn.hyb

                                                                              • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-bn.hyb
                                                                              • Size 703B
                                                                              • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              hyph-mr.hyb

                                                                              • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-mr.hyb
                                                                              • Size 687B
                                                                              • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              hyph-nn.hyb

                                                                              • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping4712_2099908409\hyph-nn.hyb
                                                                              • Size 141KB
                                                                              • SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              opera-one.jpg

                                                                              • Path C:\Windows\SystemTemp\scoped_dir4712_1681049468\opera-one.jpg
                                                                              • Size 194KB
                                                                              • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              persona.ini

                                                                              • Path C:\Windows\SystemTemp\scoped_dir4712_1681049468\persona.ini
                                                                              • Size 207B
                                                                              • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              opera-one-dark.jpg

                                                                              • Path C:\Windows\SystemTemp\scoped_dir4712_325813001\opera-one-dark.jpg
                                                                              • Size 349KB
                                                                              • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              persona.ini

                                                                              • Path C:\Windows\SystemTemp\scoped_dir4712_325813001\persona.ini
                                                                              • Size 217B
                                                                              • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              memory/368-2628-0x000001D52D850000-0x000001D52D87F000-memory.dmp

                                                                              memory/964-2225-0x000001DA933A0000-0x000001DA933CF000-memory.dmp

                                                                              memory/1008-2223-0x0000012EFF580000-0x0000012EFF5AF000-memory.dmp

                                                                              memory/1224-2611-0x00000292E82C0000-0x00000292E82EF000-memory.dmp

                                                                              memory/1248-2613-0x000002790AA70000-0x000002790AA9F000-memory.dmp

                                                                              memory/1284-534-0x00007FFAA6540000-0x00007FFAA6541000-memory.dmp

                                                                              memory/1284-535-0x00007FFAA6550000-0x00007FFAA6551000-memory.dmp

                                                                              memory/1284-1253-0x000002C756B50000-0x000002C756B7F000-memory.dmp

                                                                              memory/1544-3854-0x0000022C73960000-0x0000022C7398F000-memory.dmp

                                                                              memory/1572-2227-0x000001DF9DD20000-0x000001DF9DD4F000-memory.dmp

                                                                              memory/1660-2709-0x00000175F9720000-0x00000175F974F000-memory.dmp

                                                                              memory/2072-2607-0x000001D9540B0000-0x000001D9540DF000-memory.dmp

                                                                              memory/2088-2610-0x00000203C2F80000-0x00000203C2FAF000-memory.dmp

                                                                              memory/2320-3830-0x000001E2FFF60000-0x000001E2FFF8F000-memory.dmp

                                                                              memory/2396-2615-0x000001BA53C90000-0x000001BA53CBF000-memory.dmp

                                                                              memory/2416-2608-0x00000221AF310000-0x00000221AF33F000-memory.dmp

                                                                              memory/2796-5123-0x000001A91FC70000-0x000001A91FC9F000-memory.dmp

                                                                              memory/2944-2224-0x000001B2B4600000-0x000001B2B462F000-memory.dmp

                                                                              memory/3168-4929-0x000001D7A1620000-0x000001D7A164F000-memory.dmp

                                                                              memory/3464-2606-0x000001B750140000-0x000001B75016F000-memory.dmp

                                                                              memory/3480-1251-0x0000016C51E80000-0x0000016C51EAF000-memory.dmp

                                                                              memory/3544-2222-0x0000026997B60000-0x0000026997B8F000-memory.dmp

                                                                              memory/3964-4280-0x000001B2252B0000-0x000001B2252DF000-memory.dmp

                                                                              memory/4124-786-0x0000018C11A20000-0x0000018C11A4F000-memory.dmp

                                                                              memory/4140-2605-0x000002AF323B0000-0x000002AF323DF000-memory.dmp

                                                                              memory/4232-2617-0x00000118E3880000-0x00000118E38AF000-memory.dmp

                                                                              memory/4260-1721-0x000001ACFCD80000-0x000001ACFCDAF000-memory.dmp

                                                                              memory/4336-2612-0x000001A0CBAD0000-0x000001A0CBAFF000-memory.dmp

                                                                              memory/4508-2226-0x000001BCD2750000-0x000001BCD277F000-memory.dmp

                                                                              memory/4804-2986-0x000001B92F750000-0x000001B92F77F000-memory.dmp

                                                                              memory/4832-2609-0x000001C125710000-0x000001C12573F000-memory.dmp

                                                                              memory/4892-2614-0x000001F3DA430000-0x000001F3DA45F000-memory.dmp

                                                                              memory/5384-3000-0x0000011899300000-0x000001189932F000-memory.dmp

                                                                              memory/5724-1252-0x0000023BCC110000-0x0000023BCC13F000-memory.dmp

                                                                              memory/6008-1705-0x00000167340C0000-0x00000167340EF000-memory.dmp

                                                                              memory/6160-2453-0x0000020436650000-0x000002043667F000-memory.dmp

                                                                              memory/6172-2463-0x0000020689F40000-0x0000020689F6F000-memory.dmp

                                                                              memory/6184-2454-0x000001D975680000-0x000001D9756AF000-memory.dmp

                                                                              memory/6272-2630-0x000002941B480000-0x000002941B4AF000-memory.dmp

                                                                              memory/6388-3035-0x000001355A8E0000-0x000001355A90F000-memory.dmp

                                                                              memory/6424-2592-0x00000167FF070000-0x00000167FF09F000-memory.dmp

                                                                              memory/6516-2616-0x000001B2AF4E0000-0x000001B2AF50F000-memory.dmp

                                                                              memory/6568-3094-0x0000023384DE0000-0x0000023384E0F000-memory.dmp

                                                                              memory/6724-2741-0x0000022F2F660000-0x0000022F2F68F000-memory.dmp

                                                                              memory/6760-2603-0x0000029F32D00000-0x0000029F32D2F000-memory.dmp

                                                                              memory/6872-3300-0x0000019257640000-0x000001925766F000-memory.dmp

                                                                              memory/6904-1723-0x0000022D34CB0000-0x0000022D34CDF000-memory.dmp

                                                                              memory/6996-2739-0x000001C945930000-0x000001C94595F000-memory.dmp

                                                                              memory/7104-2740-0x0000019250340000-0x000001925036F000-memory.dmp

                                                                              memory/7140-1704-0x000001A629880000-0x000001A6298AF000-memory.dmp

                                                                              memory/7188-2803-0x000001F428010000-0x000001F42803F000-memory.dmp

                                                                              memory/7408-2631-0x000002A920B00000-0x000002A920B2F000-memory.dmp

                                                                              memory/7544-3065-0x00000142ED100000-0x00000142ED101000-memory.dmp

                                                                              memory/7544-3054-0x00000142ED100000-0x00000142ED101000-memory.dmp

                                                                              memory/7544-3060-0x00000142ED100000-0x00000142ED101000-memory.dmp

                                                                              memory/7544-3061-0x00000142ED100000-0x00000142ED101000-memory.dmp

                                                                              memory/7544-3056-0x00000142ED100000-0x00000142ED101000-memory.dmp

                                                                              memory/7544-3062-0x00000142ED100000-0x00000142ED101000-memory.dmp

                                                                              memory/7544-3064-0x00000142ED100000-0x00000142ED101000-memory.dmp

                                                                              memory/7544-3063-0x00000142ED100000-0x00000142ED101000-memory.dmp

                                                                              memory/7704-2633-0x0000018855540000-0x000001885556F000-memory.dmp

                                                                              memory/7764-2634-0x0000025DBCF00000-0x0000025DBCF2F000-memory.dmp

                                                                              memory/7816-2635-0x000001E1346F0000-0x000001E13471F000-memory.dmp

                                                                              memory/8088-3836-0x000001DACF740000-0x000001DACF76F000-memory.dmp