Analysis

  • user interaction
    yes
  • max time kernel
    364s
  • max time network
    366s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    09/08/2026, 04:17

General

  • Target
    Opera_134.0.5954.46_Setup_x64.exe
  • Size 132.9MB
  • Sample260809-ewtm9szfnd
  • SHA256 bcacbfffa4cd0809a5eb75998322b6f8a0a1c768f83b423451310f00879efe93
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 2 IoCs
  • Enumerates connected drives 3 TTPs 8 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 35 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 57 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 34 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 17 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Opera_134.0.5954.46_Setup_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\Opera_134.0.5954.46_Setup_x64.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2408
    • C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\installer.exe
      2⤵
      • Enumerates connected drives
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4720
      • C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff7a4d5ad88,0x7ff7a4d5ad94,0x7ff7a4d5ada0
        3⤵
        • Executes dropped EXE
        PID:2936
      • C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_package_sfx.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_package_sfx.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:4660
      • C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_installer.exe" --version
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:4196
        • C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x204,0x208,0x20c,0x1e0,0x210,0x7ff67ddf8778,0x7ff67ddf8784,0x7ff67ddf8790
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1896
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:2044
    • C:\Windows\system32\NOTEPAD.EXE
      "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer\opera_installer_20260809051904474.log
      1⤵
        PID:2324
      • C:\Users\Admin\AppData\Local\Temp\Opera_134.0.5954.46_Setup_x64.exe
        "C:\Users\Admin\AppData\Local\Temp\Opera_134.0.5954.46_Setup_x64.exe"
        1⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4056
        • C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe
          2⤵
          • Enumerates connected drives
          • Executes dropped EXE
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4448
          • C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff70064ad88,0x7ff70064ad94,0x7ff70064ada0
            3⤵
            • Executes dropped EXE
            PID:1548
          • C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_package_sfx.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_package_sfx.exe"
            3⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:3936
          • C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe" --version
            3⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious use of WriteProcessMemory
            PID:4232
            • C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe
              C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff701fe8778,0x7ff701fe8784,0x7ff701fe8790
              4⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:2208
          • C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4448 --package-dir="C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A" --inside-package --session-guid=d690463d-c980-4de9-91a1-688e6862d353 --server-tracking-blob="NjFkODk4ZWJjMmNmNGQ1YjllMzkyYmJlMjJiYmQ5MDY3ZjdhY2U0Y2Y1NWMzYTQwM2Q2Zjk0N2YzZTU1NDA1Yzp7InByb2R1Y3QiOnsibmFtZSI6Ik9wZXJhIn0sInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjEwIiwicGFja2FnZSI6IkVYRSJ9fX0= " --desktopshortcut=1 --wait-for-package --initial-proc-handle=4809000000000000
            3⤵
            • Enumerates connected drives
            • Executes dropped EXE
            • Enumerates system info in registry
            • Suspicious use of WriteProcessMemory
            PID:5024
            • C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe
              C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x2a4,0x2a8,0x2ac,0x274,0x2b0,0x7ff70064ad88,0x7ff70064ad94,0x7ff70064ada0
              4⤵
              • Executes dropped EXE
              PID:2468
            • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe" --backend --initial-pid=4448 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A" --inside-package --session-guid=d690463d-c980-4de9-91a1-688e6862d353 --server-tracking-blob="NjFkODk4ZWJjMmNmNGQ1YjllMzkyYmJlMjJiYmQ5MDY3ZjdhY2U0Y2Y1NWMzYTQwM2Q2Zjk0N2YzZTU1NDA1Yzp7InByb2R1Y3QiOnsibmFtZSI6Ik9wZXJhIn0sInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjEwIiwicGFja2FnZSI6IkVYRSJ9fX0= " --desktopshortcut=1 --install-subfolder=134.0.5954.46
              4⤵
              • Enumerates connected drives
              • Executes dropped EXE
              • Modifies registry class
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:1560
              • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x7ff74634ad88,0x7ff74634ad94,0x7ff74634ada0
                5⤵
                • Executes dropped EXE
                PID:2808
              • C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                5⤵
                • Adds Run key to start application
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                • Modifies Internet Explorer settings
                • Suspicious use of WriteProcessMemory
                PID:1416
                • C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff701fe8778,0x7ff701fe8784,0x7ff701fe8790
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:1632
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:4664
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff6cfd98778,0x7ff6cfd98784,0x7ff6cfd98790
                    7⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    PID:4848
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                    7⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:5016
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      8⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:1388
                      • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                        9⤵
                        • Executes dropped EXE
                        PID:1716
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      8⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:4888
                      • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x268,0x26c,0x270,0x264,0x274,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                        9⤵
                        • Executes dropped EXE
                        PID:1184
                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x264,0x268,0x26c,0x240,0x270,0x7ff775812208,0x7ff775812214,0x7ff775812220
                      8⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:980
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        9⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:1760
                        • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                          10⤵
                          • Executes dropped EXE
                          PID:3112
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        9⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Suspicious use of WriteProcessMemory
                        PID:3860
                        • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x240,0x210,0x234,0x23c,0x238,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                          10⤵
                          • Executes dropped EXE
                          PID:1092
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        9⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:3748
                        • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                          10⤵
                          • Executes dropped EXE
                          PID:3848
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                5⤵
                • Adds Run key to start application
                • Checks computer location settings
                • Drops file in Windows directory
                • Executes dropped EXE
                • Loads dropped DLL
                • Checks processor information in registry
                • Modifies registry class
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:2152
                • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                  6⤵
                  • Executes dropped EXE
                  PID:1708
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1720,i,16135367851566359791,172023703303310803,262144 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1936 /prefetch:2
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:3208
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2024,i,14430009075094275950,5550077807499805841,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2064 /prefetch:3
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Time Discovery
                  PID:3936
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2448,i,13009967968194742723,12329282851105038737,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2440 /prefetch:8
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:5292
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3036,i,11524469112008096136,8957750045457654581,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3236 /prefetch:8
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:5484
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3244,i,436803303344218180,6414886407257084007,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3332 /prefetch:8
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:5492
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3264,i,15836505958858115529,11664645995829690045,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3356 /prefetch:8
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:5500
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3304,i,10086865031054708317,13509675471375574110,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3396 /prefetch:8
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:5508
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3276,i,965654909323986703,7915732131603864209,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3376 /prefetch:8
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:5516
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2996,i,3856028462500799324,9998229950129599131,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3288 /prefetch:8
                  6⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:5524
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3320,i,10847662668235670650,12934428056681457302,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3300 /prefetch:8
                  6⤵
                  • Executes dropped EXE
                  PID:5556
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4008,i,12488902138554370609,13375154260923801700,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4012 /prefetch:1
                  6⤵
                  • Checks computer location settings
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:5560
                • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_gx_splash.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                  6⤵
                  • Executes dropped EXE
                  • Modifies registry class
                  • Suspicious use of AdjustPrivilegeToken
                  PID:4684
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4684,i,15713388528394563190,603959694430215719,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4696 /prefetch:2
                  6⤵
                  • Checks computer location settings
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:5580
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4860,i,15201312949993660570,9650800932393375295,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4888 /prefetch:1
                  6⤵
                  • Checks computer location settings
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:3328
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5192,i,8115594323452213076,10909964361419916144,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5176 /prefetch:1
                  6⤵
                  • Checks computer location settings
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:1372
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5308,i,16021449923028876526,5270780638288553695,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5328 /prefetch:1
                  6⤵
                  • Checks computer location settings
                  • Executes dropped EXE
                  PID:2252
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5824,i,18273477773241555295,2209493377142241327,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5856 /prefetch:2
                  6⤵
                  • Checks computer location settings
                  • Executes dropped EXE
                  PID:3160
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6528,i,14369367995970097792,7648278462308337705,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6644 /prefetch:2
                  6⤵
                  • Checks computer location settings
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:1700
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6816,i,6026145161153749403,8966911989126993592,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6800 /prefetch:2
                  6⤵
                  • Checks computer location settings
                  PID:5676
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6640,i,13712610848098610642,12748640829488925369,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6488 /prefetch:8
                  6⤵
                    PID:6512
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6960,i,13482520003470248626,10295368102648065655,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6332 /prefetch:1
                    6⤵
                    • Checks computer location settings
                    • Enumerates system info in registry
                    PID:6072
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7116,i,13062894060863561473,8796318065234416544,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7264 /prefetch:8
                    6⤵
                      PID:5512
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7244,i,8762037400441661011,2080958857363187934,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7324 /prefetch:8
                      6⤵
                        PID:5520
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7104,i,1045516511772997600,13073344969834227184,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7304 /prefetch:8
                        6⤵
                        • Enumerates system info in registry
                        PID:6136
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7072,i,8305023957664846941,14442092013630093830,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7284 /prefetch:8
                        6⤵
                        • Enumerates system info in registry
                        PID:6172
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7252,i,4484488181315818153,13488347166106555005,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7344 /prefetch:8
                        6⤵
                        • Enumerates system info in registry
                        PID:5408
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7240,i,14153457967447149482,1711893978601178406,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7920 /prefetch:8
                        6⤵
                          PID:7180
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7924,i,16440804481971530553,7524277360184111554,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8036 /prefetch:8
                          6⤵
                            PID:7224
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8076,i,10641856665377473022,7211942755204463441,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8044 /prefetch:8
                            6⤵
                            • Enumerates system info in registry
                            PID:7236
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8200,i,12913747764383610503,12552508495105720858,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8356 /prefetch:8
                            6⤵
                            • Enumerates system info in registry
                            PID:7248
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8204,i,6653595963954358052,6078707286064408444,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8376 /prefetch:8
                            6⤵
                              PID:7256
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8612,i,11375484033979479852,9256292449382738918,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8616 /prefetch:2
                              6⤵
                              • Checks computer location settings
                              PID:7304
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8780,i,11427580816437728068,11432128649317431490,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8788 /prefetch:8
                              6⤵
                              • Enumerates system info in registry
                              PID:7364
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8796,i,868876273407217603,1522602627880429851,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8828 /prefetch:8
                              6⤵
                                PID:7372
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8820,i,14085330892314826926,1362475782865982007,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8864 /prefetch:8
                                6⤵
                                • Enumerates system info in registry
                                PID:7384
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8876,i,8571944355730548087,1611647749387988448,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9236 /prefetch:8
                                6⤵
                                • Enumerates system info in registry
                                PID:7684
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8888,i,5492451888404629850,14605862477235614793,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9256 /prefetch:8
                                6⤵
                                • Enumerates system info in registry
                                PID:7692
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9224,i,9156308612251655048,3198395989892662986,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9276 /prefetch:8
                                6⤵
                                • Enumerates system info in registry
                                PID:7700
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9692,i,3913250960221965776,4528790738671116283,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=8656 /prefetch:8
                                6⤵
                                • Enumerates system info in registry
                                PID:8084
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10380,i,15356893968858731148,10460139262789466770,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=3716 /prefetch:8
                                6⤵
                                  PID:6744
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10508,i,5627379329964121868,16755796710309203641,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10520 /prefetch:8
                                  6⤵
                                    PID:6896
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10680,i,17965408498585576289,6044220755871819739,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10700 /prefetch:8
                                    6⤵
                                      PID:7196
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe" --fix-taskbar-pins
                                      6⤵
                                        PID:6656
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe
                                          C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff74634ad88,0x7ff74634ad94,0x7ff74634ada0
                                          7⤵
                                            PID:5564
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10724,i,4165921171997783305,12368634561860869766,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10848 /prefetch:8
                                          6⤵
                                            PID:6052
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10976,i,8193405622128411327,6962157103038017696,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10984 /prefetch:8
                                            6⤵
                                            • Enumerates system info in registry
                                            PID:7084
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                            6⤵
                                              PID:7472
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x294,0x298,0x29c,0x228,0x2a0,0x7ff7d50e48d0,0x7ff7d50e48dc,0x7ff7d50e48e8
                                                7⤵
                                                  PID:7908
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=9684,i,920613618069238674,6593522260595394310,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=8080 /prefetch:1
                                                6⤵
                                                • Checks computer location settings
                                                PID:8036
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4044,i,15286387344201633643,15635907213436770986,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8536 /prefetch:8
                                                6⤵
                                                  PID:5700
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8440,i,7056974187900880250,11793749850082406608,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=10872 /prefetch:8
                                                  6⤵
                                                  • Enumerates system info in registry
                                                  PID:5968
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10724,i,14547594913078340392,7821963836444897060,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10852 /prefetch:8
                                                  6⤵
                                                    PID:7828
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6784,i,11766827779445846939,7771560514075776461,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=10952 /prefetch:8
                                                    6⤵
                                                      PID:5556
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10704,i,5378098264493759058,11534612746420822669,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=10640 /prefetch:8
                                                      6⤵
                                                        PID:6708
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10884,i,16318597908548844242,16033904787297863539,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=10536 /prefetch:2
                                                        6⤵
                                                        • Checks computer location settings
                                                        PID:964
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10652,i,10815082174872937157,12848621344432838920,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8436 /prefetch:8
                                                        6⤵
                                                        • Enumerates system info in registry
                                                        PID:6504
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10976,i,4204238635114956666,16103663121266108514,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11100 /prefetch:8
                                                        6⤵
                                                          PID:7616
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=8852,i,4223327369535588131,9835510750664990819,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=10876 /prefetch:2
                                                          6⤵
                                                          • Checks computer location settings
                                                          • Enumerates system info in registry
                                                          PID:7020
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10720,i,7055070306307095739,10130556640245555313,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=10680 /prefetch:8
                                                          6⤵
                                                          • Enumerates system info in registry
                                                          PID:5568
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5656,i,11143435297301168271,2284661099243292444,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=11048 /prefetch:8
                                                          6⤵
                                                            PID:6060
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11044,i,3186343995220846995,16305536112303264741,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=11060 /prefetch:8
                                                            6⤵
                                                              PID:7296
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=10916,i,6021877018440346603,7882174224323122205,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8476 /prefetch:2
                                                              6⤵
                                                              • Checks computer location settings
                                                              PID:4844
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10960,i,4648072613122892199,16646051559967102877,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=8404 /prefetch:8
                                                              6⤵
                                                                PID:7364
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=5632,i,1784335332553099490,6018872469740254020,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=5596 /prefetch:2
                                                                6⤵
                                                                • Checks computer location settings
                                                                PID:7332
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=4252,i,8987428150389963129,181177380736958339,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=10700 /prefetch:2
                                                                6⤵
                                                                • Checks computer location settings
                                                                PID:7700
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7680,i,8753582447371028559,2548224243461078955,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=6668 /prefetch:2
                                                                6⤵
                                                                • Checks computer location settings
                                                                • Enumerates system info in registry
                                                                PID:7604
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=4684,i,17457407771029191252,8930452776101428616,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=5764 /prefetch:2
                                                                6⤵
                                                                • Checks computer location settings
                                                                PID:7200
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=3268,i,3594716449520732717,14376782059219068622,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=4780 /prefetch:2
                                                                6⤵
                                                                • Checks computer location settings
                                                                PID:6952
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10824,i,7227592028074940543,18373500468649148880,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=8784 /prefetch:2
                                                                6⤵
                                                                • Checks computer location settings
                                                                • Enumerates system info in registry
                                                                PID:5504
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=9672,i,17146754964913108303,15403815869947598178,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=8628 /prefetch:1
                                                                6⤵
                                                                • Checks computer location settings
                                                                • Enumerates system info in registry
                                                                PID:7352
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=8088,i,4776720167320227427,17600380029820426263,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=8684 /prefetch:1
                                                                6⤵
                                                                • Checks computer location settings
                                                                • Enumerates system info in registry
                                                                PID:5924
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8124,i,2101332595683896010,5178804579291396011,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=8148 /prefetch:8
                                                                6⤵
                                                                  PID:7220
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6880,i,4151248246446302802,9036851800027912798,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=812 /prefetch:8
                                                                  6⤵
                                                                  • Enumerates system info in registry
                                                                  PID:7468
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=6796,i,7714115048421507055,8804830508541177735,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=10352 /prefetch:1
                                                                  6⤵
                                                                  • Checks computer location settings
                                                                  • Enumerates system info in registry
                                                                  PID:2264
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=3388,i,10891915063205407441,13648500193464624095,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=11028 /prefetch:1
                                                                  6⤵
                                                                  • Checks computer location settings
                                                                  • Enumerates system info in registry
                                                                  PID:7284
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=8128,i,7734734272064293682,414834659247353865,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=8700 /prefetch:1
                                                                  6⤵
                                                                  • Checks computer location settings
                                                                  • Enumerates system info in registry
                                                                  PID:6696
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=9312,i,195668708267379562,18008124660460149066,262144 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=8196 /prefetch:8
                                                                  6⤵
                                                                  • Enumerates system info in registry
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  PID:6180
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8476,i,7229201797986568779,17943107289784324928,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=3224 /prefetch:8
                                                                  6⤵
                                                                    PID:5676
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=10812,i,6513206092844897400,2227194103399733316,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=10860 /prefetch:1
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    PID:7848
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=4240,i,1099435057020854658,16311971641951207914,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=10476 /prefetch:1
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    • Enumerates system info in registry
                                                                    PID:1176
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=8420,i,5682641737627067522,5011131900576301577,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=10912 /prefetch:1
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    • Enumerates system info in registry
                                                                    PID:7404
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8860,i,1290761663617887083,198911181744777006,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=10484 /prefetch:8
                                                                    6⤵
                                                                    • Enumerates system info in registry
                                                                    PID:6360
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=10548,i,7209764834382138191,14875817123355953437,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=9552 /prefetch:1
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    PID:2532
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=5044,i,4198491428672252298,5367522774659821439,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=7220 /prefetch:1
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    • Enumerates system info in registry
                                                                    PID:3172
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=10408,i,11211433226261763896,10163880788896923425,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=9780 /prefetch:2
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    • Enumerates system info in registry
                                                                    PID:7892
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=7672,i,6561067887848077036,15938926026256202037,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=8576 /prefetch:1
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    PID:1620
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=8604,i,9560311040109773661,8951094554156408920,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=6636 /prefetch:1
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    • Enumerates system info in registry
                                                                    PID:820
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11052,i,2238134490510776155,764570152015853663,524288 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=9896 /prefetch:8
                                                                    6⤵
                                                                    • Enumerates system info in registry
                                                                    PID:556
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:make-opera-yours-widget=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:player-service-html-promo-banner=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-admitad=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=4908,i,12552223146843268091,1391961762643235962,2097152 --field-trial-handle=1940,i,944850980367023957,4405238613383027119,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=ExternalDecoderInAudioFileReader,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1944,i,13655542767867439235,11477719965589909973,4 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=5188 /prefetch:2
                                                                    6⤵
                                                                    • Checks computer location settings
                                                                    PID:5032
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --edition --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=134.0.5954.46 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --firstrunver=134.0.5954.46 --firstrunts=1786249288 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                                                                    6⤵
                                                                    • Enumerates system info in registry
                                                                    PID:4224
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff7d50e48d0,0x7ff7d50e48dc,0x7ff7d50e48e8
                                                                      7⤵
                                                                        PID:7600
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                            C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                            1⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Enumerates system info in registry
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:188
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                              2⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Enumerates system info in registry
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:3876
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                                                                3⤵
                                                                • Executes dropped EXE
                                                                PID:4620
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                              2⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:2372
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                                                                3⤵
                                                                • Executes dropped EXE
                                                                PID:1928
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                              C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x1ec,0x1dc,0x208,0x1f0,0x210,0x7ff775812208,0x7ff775812214,0x7ff775812220
                                                              2⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:5140
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                3⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Enumerates system info in registry
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:5224
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                                                                  4⤵
                                                                  • Executes dropped EXE
                                                                  PID:5608
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                3⤵
                                                                • Executes dropped EXE
                                                                • Enumerates system info in registry
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:6120
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                                                                  4⤵
                                                                  • Executes dropped EXE
                                                                  PID:1340
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                3⤵
                                                                • Executes dropped EXE
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:5320
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                                                                  4⤵
                                                                  • Executes dropped EXE
                                                                  PID:5388
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                            1⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:5456
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe
                                                              C:\Users\Admin\AppData\Local\Programs\Opera\134.0.5954.46\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffdf70ef0d0,0x7ffdf70ef0e0,0x7ffdf70ef0f0
                                                              2⤵
                                                              • Executes dropped EXE
                                                              PID:1612
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                            1⤵
                                                              PID:6836
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=134.0.5954.46 --initial-client-data=0x274,0x278,0x27c,0x20c,0x280,0x7ff7d50e48d0,0x7ff7d50e48dc,0x7ff7d50e48e8
                                                                2⤵
                                                                  PID:6684
                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                  2⤵
                                                                    PID:5772
                                                                • C:\Windows\system32\ApplicationFrameHost.exe
                                                                  C:\Windows\system32\ApplicationFrameHost.exe -Embedding
                                                                  1⤵
                                                                    PID:6504

                                                                  Network

                                                                        MITRE ATT&CK Enterprise v16

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB

                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                        • Size 471B
                                                                        • SHA256 f24819377506cffbbc34f9fd055fb8991378eb55d87e7b7fd81e4fd511b3272f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        819F061E7E96737A1F8899F54577F194_E518283D6FFE49F982551655D964F960

                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\819F061E7E96737A1F8899F54577F194_E518283D6FFE49F982551655D964F960
                                                                        • Size 471B
                                                                        • SHA256 7d5f4abfbe338a7a3bdd8a9b01cc8d9ec2760d8682b97c566b7deed7838558f8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253

                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253
                                                                        • Size 727B
                                                                        • SHA256 6244c1941fed10f32d3cf1517119ad7d80bc2c3d27d78169fba553423ac89864
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141

                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                        • Size 727B
                                                                        • SHA256 0f9634b74d5a8ea0237937b3c883d71ee6cf8c005b2ab41c53327d6078a2cb33
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                        • Size 471B
                                                                        • SHA256 5ea73e46d4d2a45a24b689bd156e299ecf330317f54f087d1da238f060dc8ed2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB

                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                        • Size 400B
                                                                        • SHA256 a9957f2e407d6a5eea7eca2b59d7ea0255c4895798ab7af70a12c74677738d92
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        819F061E7E96737A1F8899F54577F194_E518283D6FFE49F982551655D964F960

                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\819F061E7E96737A1F8899F54577F194_E518283D6FFE49F982551655D964F960
                                                                        • Size 440B
                                                                        • SHA256 d9e79ec0bd4ad711c5b233d200c3f99b15b08763dd36b5ea5190b6daf9268b43
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253

                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253
                                                                        • Size 408B
                                                                        • SHA256 f41aae57985509a2a13159a14842cc8339daec6f77d547b70af894fad075efe6
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141

                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                        • Size 412B
                                                                        • SHA256 73f5c2d7c2725e924dcf511a91aefd3a3f3f7be798ead63cced89ee8317d3e7c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                        • Size 416B
                                                                        • SHA256 6fccd77fafcf52f3f36e49c71a8770afa9d8a70255a04e2176c315a466fb74a4
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        f_00000b

                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00000b
                                                                        • Size 331KB
                                                                        • SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000001

                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                        • Size 162KB
                                                                        • SHA256 9711a9a0f35b15391f77189762f7adf15bb336d4e60f6510516c7c7ff116b1fd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        installer_prefs.json

                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                        • Size 1KB
                                                                        • SHA256 8bb139cd7d5ff1afe0ebb895b7796262e893eaefe3e83d08e14268d0f0a5fa35
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        opera_installer_20260809051904474.log

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\Opera Installer\opera_installer_20260809051904474.log
                                                                        • Size 2KB
                                                                        • SHA256 7bc566fcba0ccfccf07d93715f3a0d2a6c42e289109abe49b1bca206f2af32d8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        assistant_installer.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\assistant_installer.exe
                                                                        • Size 3.6MB
                                                                        • SHA256 e2e8801e03a318242e41605d348162e6e5e3af9969c1642917f45e03b77f09ef
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        browser_assistant.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\browser_assistant.exe
                                                                        • Size 7.5MB
                                                                        • SHA256 c88739b078faf0a9f39b568a3c50f8b187bac01824169a6db985bd7445c7fc9c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        dbgcore.DLL

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\dbgcore.DLL
                                                                        • Size 256KB
                                                                        • SHA256 f8f9b7c105bfd3e7021c81d65dc05480f5a2c80057ff9e3d0326390e0d2fa703
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        dbghelp.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\dbghelp.dll
                                                                        • Size 2.2MB
                                                                        • SHA256 c74f6b2420a16583f940d02f21c1bb3131a8c640f903c1e24a6a56fc05a76931
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        files_list

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant\files_list
                                                                        • Size 72B
                                                                        • SHA256 5b3741e12f14d0ae54d450fff585c5fbfa7b360800c863722472d320c26b4ef4
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        assistant_package

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\assistant_package
                                                                        • Size 3.6MB
                                                                        • SHA256 bcf1751bd4a26fbf8a66570da26e75993470b69e737950fc294cdb48d5269742
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        extra_apps

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\extra_apps
                                                                        • Size 21B
                                                                        • SHA256 7fff1ae3a38aceed8de26fe3de3c43fdc2526210c3f225557ee3c8411175882d
                                                                        • MD5 SHA1 SHA512

                                                                        installer.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\installer.exe
                                                                        • Size 8.3MB
                                                                        • SHA256 ed8a17da5e7ce86d6be3cb9956641c72033cd9de51bfb0a4b2caac6b93f2215c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        server_tracking_data

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS869F67D8\server_tracking_data
                                                                        • Size 256B
                                                                        • SHA256 cd33994a219644ea016b597fbb332b5d7ab58732ac20e7d17aa882f920f56ead
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        150x150Logo.scale-100.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-100.png
                                                                        • Size 1KB
                                                                        • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        150x150Logo.scale-100_contrast-white.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-100_contrast-white.png
                                                                        • Size 1KB
                                                                        • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        150x150Logo.scale-140.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-140.png
                                                                        • Size 1KB
                                                                        • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        150x150Logo.scale-140_contrast-white.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-140_contrast-white.png
                                                                        • Size 1KB
                                                                        • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        150x150Logo.scale-180.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-180.png
                                                                        • Size 1KB
                                                                        • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        150x150Logo.scale-180_contrast-white.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-180_contrast-white.png
                                                                        • Size 1KB
                                                                        • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        150x150Logo.scale-80.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-80.png
                                                                        • Size 827B
                                                                        • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        150x150Logo.scale-80_contrast-white.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\150x150Logo.scale-80_contrast-white.png
                                                                        • Size 799B
                                                                        • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        70x70Logo.scale-100.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\70x70Logo.scale-100.png
                                                                        • Size 781B
                                                                        • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        70x70Logo.scale-100_contrast-white.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\70x70Logo.scale-100_contrast-white.png
                                                                        • Size 752B
                                                                        • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        70x70Logo.scale-140.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\70x70Logo.scale-140.png
                                                                        • Size 991B
                                                                        • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        70x70Logo.scale-140_contrast-white.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\70x70Logo.scale-140_contrast-white.png
                                                                        • Size 865B
                                                                        • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        70x70Logo.scale-180.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Assets\70x70Logo.scale-180.png
                                                                        • Size 1KB
                                                                        • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Opera Browser.lnk

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\Opera Browser.lnk
                                                                        • Size 1KB
                                                                        • SHA256 e14baa716f6690b573311850ecc16e7364286284c9f07bfc72ef95760f132d07
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        e3a66f35-fa35-42ba-8638-dbb8997d0c6c.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\e3a66f35-fa35-42ba-8638-dbb8997d0c6c.tmp
                                                                        • Size 16B
                                                                        • SHA256 4304ad9301017a03d77d588218c73d2b5fbc0a292138994c023a10aed3196740
                                                                        • MD5 SHA1 SHA512

                                                                        files_list

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\files_list
                                                                        • Size 6KB
                                                                        • SHA256 a6a92b393512c688e29ee306223c4e22d6446cb49d882cfd3812fa7af34d4510
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        installer_prefs_include.json

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\installer_prefs_include.json
                                                                        • Size 907B
                                                                        • SHA256 73d3989a76ec3b4e332ec50c07b85922be1319336f8446a65663fee9d8987d5e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        07593226-C5C5-438B-86BE-3F6361CD5B10.ico

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\resources\07593226-C5C5-438B-86BE-3F6361CD5B10.ico
                                                                        • Size 1KB
                                                                        • SHA256 f06ebef0b912b94d7e0af3915f2a6b6b64f74cb60bc8aaa1104c874761a0dee6
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        root_files_list

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8DF2A12A\root_files_list
                                                                        • Size 693B
                                                                        • SHA256 d835cd27a880b62877ea68ca07c5240ee686f2744bee1580108fc786ac3affff
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        favicon_opera_one.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2152_1450120445\CRX_INSTALL\favicon_opera_one.png
                                                                        • Size 2KB
                                                                        • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Icon_Light_Neutral.png

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2152_1553790258\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                        • Size 2KB
                                                                        • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        default.dic

                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                        • Size 2B
                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                        • MD5 SHA1 SHA512

                                                                        d70cbdf642c9f8c5.customDestinations-ms

                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d70cbdf642c9f8c5.customDestinations-ms
                                                                        • Size 25KB
                                                                        • SHA256 aaee2af7bb687fb3929b1bad3d2246a129302f09dfa467e55045b06d4322e694
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d70cbdf642c9f8c5.customDestinations-ms

                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d70cbdf642c9f8c5.customDestinations-ms
                                                                        • Size 25KB
                                                                        • SHA256 ada23a55b305e4b01c0c89979e809d6094216ad40759637ba830b6378d4d0603
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        93ef5874-7469-406d-b80f-487169025eac.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\93ef5874-7469-406d-b80f-487169025eac.tmp
                                                                        • Size 5KB
                                                                        • SHA256 90e01baabe56424eddc69483926bfdf9f8137a2d373368f459142bd493c84680
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                        • Size 40B
                                                                        • SHA256 a8dcce229a1387297362fc9b069745998a3bda607d6ca6a08c987420e802367c
                                                                        • MD5 SHA1 SHA512

                                                                        0de45c78-988b-4da2-aeb1-e1d85e6ba30a.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\0de45c78-988b-4da2-aeb1-e1d85e6ba30a.tmp
                                                                        • Size 171B
                                                                        • SHA256 f41f43f8ac3c34dede52b0f9efe8430c38556dfeaed924cd0b062f4d320b6e09
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        3c171b61-cf68-4c11-b7e7-bf67208461af.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\3c171b61-cf68-4c11-b7e7-bf67208461af.tmp
                                                                        • Size 14KB
                                                                        • SHA256 856ad9c7004e841760b0616d7787abc8ebff36ac5baee056dfcfe752a2e020a1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        4d2b86d5-285d-41de-ab2f-3aad12cf8477.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\4d2b86d5-285d-41de-ab2f-3aad12cf8477.tmp
                                                                        • Size 155KB
                                                                        • SHA256 9552da76362069e24428f06c4565a116d1c0970c8532143094cfee02c0353f20
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        54299139-9e01-4aba-bf6b-892a88056427.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\54299139-9e01-4aba-bf6b-892a88056427.tmp
                                                                        • Size 81KB
                                                                        • SHA256 4dd2e0f9479c6a012d1e663697f541d81f34beb42060df2bb408fd6358ef1736
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 48B
                                                                        • SHA256 943fd5f4dbe99901e3e5f0774ee85082cf70ef492583a44714ae89dbc4bbdf7c
                                                                        • MD5 SHA1 SHA512

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 1KB
                                                                        • SHA256 1f114fdee0b98bb9c5cac1ea68dee62700668004745ad5b5152c0a5105a12aca
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 744B
                                                                        • SHA256 60403c57e773beef17705a44c71e4a2aea84e81beff9420aea8fedcca669e936
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 2KB
                                                                        • SHA256 db7d108de5b41200332ec1c579f5cefac37469e5c62e78fea37f1ab2be7ace21
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        CURRENT

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
                                                                        • Size 16B
                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                        • MD5 SHA1 SHA512

                                                                        MANIFEST-000001

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Scripts\MANIFEST-000001
                                                                        • Size 41B
                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                        • MD5 SHA1 SHA512

                                                                        main.js

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
                                                                        • Size 46KB
                                                                        • SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        logo_128.png

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_128.png
                                                                        • Size 7KB
                                                                        • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        logo_16.png

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_16.png
                                                                        • Size 653B
                                                                        • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        logo_32.png

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_32.png
                                                                        • Size 1KB
                                                                        • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        logo_48.png

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_48.png
                                                                        • Size 2KB
                                                                        • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        logo_64.png

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\icons\logo_64.png
                                                                        • Size 2KB
                                                                        • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        service-worker-loader.js

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.6_0\service-worker-loader.js
                                                                        • Size 49B
                                                                        • SHA256 f8eef7c260d4743817755ab4987619c18d1266f27d2435f32ad3f50494a9058e
                                                                        • MD5 SHA1 SHA512

                                                                        favicon_opera_one.png

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\favicon_opera_one.png
                                                                        • Size 2KB
                                                                        • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        reader_mode.js

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\reader_mode.js
                                                                        • Size 112KB
                                                                        • SHA256 4f72bc46754ceed048dccf5c83fa36067f144e5ba13b046b12538808986e3252
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        service_worker.js

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\service_worker.js
                                                                        • Size 74KB
                                                                        • SHA256 220fca4d7acccb3242c07ce434e9b97dd48d9fb111c71c01c0c1b2dcafb35176
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        spotify_frame_interceptor.js

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\spotify_frame_interceptor.js
                                                                        • Size 5KB
                                                                        • SHA256 a6b9c0dcf141b8ac58176b870851294e492ecc79a83c8efbfc85e35cb3cada0a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        background.js

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                        • Size 86KB
                                                                        • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Icon_Light_Neutral.png

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                        • Size 2KB
                                                                        • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        popup.js.LICENSE.txt

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                        • Size 1KB
                                                                        • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        rules.json

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                        • Size 839B
                                                                        • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        MANIFEST-000001

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\IndexedDB\https_whatismyipaddress.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                        • Size 23B
                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                        • MD5 SHA1 SHA512

                                                                        20ce22aa-3004-49a3-8a19-02725986c81c.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\20ce22aa-3004-49a3-8a19-02725986c81c.tmp
                                                                        • Size 27KB
                                                                        • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        51338c2b-6d5e-4a00-a237-539026e81654.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\51338c2b-6d5e-4a00-a237-539026e81654.tmp
                                                                        • Size 27KB
                                                                        • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        5871b4ce-a1a2-4cb7-9b95-a0b0f0387d10.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\5871b4ce-a1a2-4cb7-9b95-a0b0f0387d10.tmp
                                                                        • Size 27KB
                                                                        • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        6b5b6e2e-44ac-48d5-8d7d-9a29ceb50e1c.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\6b5b6e2e-44ac-48d5-8d7d-9a29ceb50e1c.tmp
                                                                        • Size 27KB
                                                                        • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        88bfb1a2-23d9-4917-9d18-d261d3bcd6a9.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\88bfb1a2-23d9-4917-9d18-d261d3bcd6a9.tmp
                                                                        • Size 27KB
                                                                        • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        fcf0cbca-624d-4af1-bcb6-c85cc0f1b71d.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\fcf0cbca-624d-4af1-bcb6-c85cc0f1b71d.tmp
                                                                        • Size 27KB
                                                                        • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        6913a20d-c221-452a-aff8-83cafd424da4.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\6913a20d-c221-452a-aff8-83cafd424da4.tmp
                                                                        • Size 59B
                                                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                        • Size 17KB
                                                                        • SHA256 5a74b336f010e457dce308e1c7e58470d151b334607a7bda7650e76054fe3e6a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                        • Size 960B
                                                                        • SHA256 85f34f271824040c59837d59870e5a8a509e128db9915b9513677dd7ca122f60
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 16KB
                                                                        • SHA256 e84b96a0411a6ecacf69b3f84983f20ea34d4c6992f772f9702845ff9cd623ff
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 17KB
                                                                        • SHA256 d78ddc45bd3ebd5d7871f84b75baf531d698d29329f822bf166edfe0b512851a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 14KB
                                                                        • SHA256 14c00433cbd3f187cb829e8cdcd19526b6b9a852907b8a95e170fab37e06a554
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 17KB
                                                                        • SHA256 30f0a312688258a1511f4abf5076ed3857607059b46c9bfc90802fc3d58f703a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 16KB
                                                                        • SHA256 9ab31463ae17397bf717d9f99eec48327c68469ab0c4d521fd560122e3134c73
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 17KB
                                                                        • SHA256 00abc25944a804e56421a5ca4d55b79a33048dcf19527c959a449b079748d693
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 15KB
                                                                        • SHA256 37ef11fa4671ad21f68806110f26a435eecaa64fa67b88e2b148ac30d674a2f1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 16KB
                                                                        • SHA256 74f5a3e6c48e5a18fd975a87a28f383d8d1731f5f7972f1cb2936901f3dc5c4a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 20KB
                                                                        • SHA256 a5a29aec9c8d68ff030b790cd88a1483653d09b38410aaba1faa768e421808a9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 17KB
                                                                        • SHA256 e5be144606eb366f744e05f542b3f49f16ccb97208edde88cab91143804de886
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 17KB
                                                                        • SHA256 b3521c4f56ff7acf6f143cddfdaf3d1581ab0919c534c326e30269921743dd7f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 20KB
                                                                        • SHA256 ffabde8310470229b966b18f5f3986c9ba251473010b6a51b3a9382772205c4b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                        • Size 17KB
                                                                        • SHA256 59d392d15b19dd980f893215d7b64ceebc2f1ceb5d35cda4435dc328a383d0ad
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Secure Preferences

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                        • Size 111KB
                                                                        • SHA256 16a7cc05859cf310e785a0aeb9cd4901e4d734261f22fc78b4a6a7f9a73dacf8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        47e01aaa-8671-4108-a6af-44af218ddc60.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\47e01aaa-8671-4108-a6af-44af218ddc60.tmp
                                                                        • Size 48B
                                                                        • SHA256 071d417b8383971e5101f3b2407d95c2bf4d2d2a30612eabf89928bae762ba7c
                                                                        • MD5 SHA1 SHA512

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                        • Size 360B
                                                                        • SHA256 d823633df6871706f85cc6a35271b3808e384890c8703633e83620657a75bf98
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        6b60d8bf-5708-426c-abb7-5c9cbd5924cb.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index-dir\6b60d8bf-5708-426c-abb7-5c9cbd5924cb.tmp
                                                                        • Size 48B
                                                                        • SHA256 75977c1219b3642bca9b56d4cadb3d5369c0b0a94b5f80343f6c96d32b878213
                                                                        • MD5 SHA1 SHA512

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                        • Size 72B
                                                                        • SHA256 1c3d567a6ab1449b80eea5318b38a53adb57330e8c4d4cad8497e8646db89a30
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        65a15f4c-be79-492f-8471-6fc0ef092d28.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\65a15f4c-be79-492f-8471-6fc0ef092d28.tmp
                                                                        • Size 19KB
                                                                        • SHA256 7078afdc22ba150dfa9ce157be1c062336e9ca49c79c19aec8b3899a75271d41
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        6785d2e1-827b-41c2-bbf7-e8a5d7478247.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\6785d2e1-827b-41c2-bbf7-e8a5d7478247.tmp
                                                                        • Size 24KB
                                                                        • SHA256 1f909d1a766ae4f63c4aaedbff616410e7291c2ab266ed69d28b8f11ae928f73
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        7b388518-78ed-473b-b543-a79e39b2933b.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\7b388518-78ed-473b-b543-a79e39b2933b.tmp
                                                                        • Size 301B
                                                                        • SHA256 c48a7743b317f9a0ec658bffe411e4a8fc759b03ef848155d014712aa394456f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 397B
                                                                        • SHA256 65be349a97346d6bb8a80644cb18175e9607483efe2e81b1ace2460eee937123
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 989B
                                                                        • SHA256 aa82163da4a5945a6b81dbd9a8c2723ffe16c04059276aba0f6de4ccc389d6d7
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 6ee925f8799ecf2ae584c5a47cd3ed2f3922ba12ca85572a4b8814f91c1d4ef1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 685B
                                                                        • SHA256 991c957d764b0a16029bec9f9444b97fa5290f2146ae76ea210352b96e021f6c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 8KB
                                                                        • SHA256 c67b5359938d70b90501b9ce57db15efe4ec0e1f47629d74a610f36e978d297d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 12KB
                                                                        • SHA256 f1fea637405945e63b7a3031e32a3f8cf13c1ba9e4088ecb2cff8385b872f860
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 12KB
                                                                        • SHA256 081f0a559981cbf1663d7144985bd344f7bc6220fd0e10f856e5c2c23cfa2618
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 12KB
                                                                        • SHA256 8a6ef36b277d8564e25e3d81e307a795e2c87593873b790b287b2fb80da69dc7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 96b4d1d673b47902a42133f0592066de4ca42e6e705fb9519a6634cbefb07541
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 20c111c88b119e81a636608265c305a4af2c98aef36e64f7eeaf004725ef9176
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 21f7c2e9b0270809912910c49437d238d8adb3d78bda8dfc1485d594e95f1cb3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 24KB
                                                                        • SHA256 4f79012e4ad9522df97ae5773cbf51e189c71a13e2b4ce6a994175ceab05ce86
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 8KB
                                                                        • SHA256 628098d0f72dc3001d9d07d5e1abe121eb62bd1547d736b2352d0425a1695de7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 15KB
                                                                        • SHA256 ab5a839b89ac39c1a5496c65985e0e06b073fcbfd7c4347149c337992c36b556
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 11KB
                                                                        • SHA256 a602aadce89ca144c496af9701a1f009569cd5fe6bfe255cf1b0fc2bdfb07258
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 15KB
                                                                        • SHA256 b08727b492fe2485d0876806fa395b1d5d77492808da4d14af7ed44e50ecf3d3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 11KB
                                                                        • SHA256 fe8eedeab68b3146b192362a3abec262e688a8f625594edb6c7c31fdbc71935c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 11KB
                                                                        • SHA256 3070568dcd426a728b9fdc5c1a84a787841af59e2f411b57b9115aee1630de7e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 12KB
                                                                        • SHA256 37ddbb2289200573ff6f07e8ee47add2fa8c6aae5f95f0c410c88773ce0eb897
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 12KB
                                                                        • SHA256 d731dd13719bcc464cf8b6b6e0d98ebe4e134e637c33111be882b0687b6e8fc0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 13KB
                                                                        • SHA256 800bc71562f73e1585ae48690c5dc46149a99be6d7a1d88942c3fc8a5ed47f3f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 13KB
                                                                        • SHA256 525ee70842fd85a669694951852910f96bbdbb1057cafd6e3d44627218c3ced9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 13KB
                                                                        • SHA256 e817f9bd59bdf630bbbae71969a03be4b30ca6cc3b9a64fe6394e099ec13f1d3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 15KB
                                                                        • SHA256 ce85035c2b20e68c5a881a24805c2d7f70ee675e7cff468ca7dffd35cfd84756
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 18KB
                                                                        • SHA256 36d48c0681fdd9648535e13b1bbde292696ae6cdaa1ff9964bacce27fc26601f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 0bcac5808ed210f8aba02f8c237d1d6775ac4aa3b57a9bd23087f94c7295f431
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 44273268fda4a638ac8cec5ce23a8c65fd489724798c7bd68871b0c3ff2cc5ba
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 dfc05cecc1e94f2a26da033eb1e76073b352d38d27cf75a76b08e8d4dc62634f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 520a5d5f9a68afeed224196a2762eeb06f16a3e2d2880bb1f04091b39e888204
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 22KB
                                                                        • SHA256 b22d0f95175fbeabfd90a7a77d754d87f84b81914d25b28919b2908747b687d7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 0e4a1ce412a0a1d4172dc21b5b72e740de58a3be9f7003ed92deeefe79831075
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 5ca1a96e83a3c918daa5973a1325b0af283ead556988d3eb5ce2cf47960a4038
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 24KB
                                                                        • SHA256 b2a0058e3285877ed184cf755ddc53d3bd50d4495dca7ef4f6e473b710715c7b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 24KB
                                                                        • SHA256 2dcf8d2b8b167dbbbd7b0d7b2032145bb808e2012dbb2e20ad31260c8ff82974
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 24KB
                                                                        • SHA256 490b77cb55fc7afad9a2e03f1d9e125f4013c135d4b26f445a344d4bfaa9533b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 25KB
                                                                        • SHA256 80d0fdaedb90ad49144ac8aabaf2cd4690d28dc9a22ad40ba828ee59da1eed27
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 25KB
                                                                        • SHA256 15d79b67d0f4f3bbdaa12e62016240b9008e5716702517d8e25edf5b151221fd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 574692ec6ebf1600c8a7fd77f21396486c5f8c5d25fa4a58c165d231f19f0386
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 8KB
                                                                        • SHA256 762314112f68e7b2b1a33f886fc984bef04c026c1af2c66ac7db7c0c75303d24
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 6998e998540b563db7d43f24b537fb233088d9a321905eeecbf68ca9a08d27cd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 525B
                                                                        • SHA256 e6e31f90531a7fa9d4bfc47312822150c993e88bb5dc925cc52d69347b4bfe29
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 99b1c23b14e24b665163e00c08d942c0b8f1ca4b8c3bbd4b064ccfbd0ce897a5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 bf91f31ab4b35e7431dc6b648bc7a1593d17244d84ab3d6362f1805734ce59f9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 f1532b571b0f49cc3d6d103fe9c26778bc27ab69b5b16e5729b9ae63bf45db3a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 12KB
                                                                        • SHA256 d852a35ff5e3ebac30ddb2df7d189b71770f11c02dee8675f6463d64614eb2e4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 12KB
                                                                        • SHA256 bcdf425a5c64509880101e6f82900336323eaf7ebe3cc1b76a9c4e6404c506da
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 17KB
                                                                        • SHA256 ef423cdbd0a1d33de3322c4d08e4a3bd5a182f00332de5bfe1aa585b953503d6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 13KB
                                                                        • SHA256 865e5a861210b8e34995085e652eab0803d5cae4731f25343705dd6222dac85a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 13KB
                                                                        • SHA256 001be804f22d77a9f3dd8532d637a8498f55e401d0835cf6f5f6fbfc00bd053c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 13KB
                                                                        • SHA256 bf7f7ca9227e64a31910c73a9422604d8d06b776a6b786e1c70bc00de56e0525
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 19KB
                                                                        • SHA256 b9d3db2af47c8ca25852cdebf56372a05351c529ba761b0a8868b891f345c905
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 22KB
                                                                        • SHA256 8c19c4ffb5772f5c8d4d706214c5eb27cc8ffbeb26e7d869c1ae4e6e099971c4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 24KB
                                                                        • SHA256 dbbf380b511e5f757e322fa4baf778b9c27a5069076e8fe256071bcfa65eb5b6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 25KB
                                                                        • SHA256 4d1cc84851ec2f18840ae8b4220a8b5eff15a137bbf21e3c4a19217ab2557407
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 25KB
                                                                        • SHA256 b8faef2653a025bb5d05df4a389461e025dd52a075f3163a1c60253b2aaa6ed0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 9KB
                                                                        • SHA256 86d474a9ec0c0c9b08fa857b453e00f8c0cbfbab286e4922711c3b514a6e18a3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 e4a0a56707f9318c63ce5b7a839d9631cdfcf8a373fb0bcb4ad2b6cdd18e9049
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 14KB
                                                                        • SHA256 66115fffc10292f8e1975eadeb8a5bbea4cf813fc5bee82a66175b8c37e5997d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 1KB
                                                                        • SHA256 e5605b1b6ab3c6a96f0daee3cd47f6e372e22c0309a0649e84e4482f41596299
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 1KB
                                                                        • SHA256 26a85bf7fbabfce8bbf804b922eb2e946c8bd20cf0af14301ac8e5c373841475
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 1KB
                                                                        • SHA256 3d44e01f10e42078436368a8a23d5a736ffe2790d3ed1bf0b6a2ce731ac04720
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 1KB
                                                                        • SHA256 eead3c99782238dd0b976790b6432dc603db0aab4ecdaab994aec2232bffa14c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 2KB
                                                                        • SHA256 586efc70771d9754ae6be14ef2773210e2391ac8f0096040b9b2c1bf994ed844
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 2KB
                                                                        • SHA256 c4fed23e3e236fd417d964067e2da0c1ed0393b107c3ba6b31eaf0409500a63e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 2KB
                                                                        • SHA256 9ab857ed2b6dbef061f3acc8aa42f316379d59a4eaaf494ac3bbd12a400eca41
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 2KB
                                                                        • SHA256 bf16a95fa7efa3cbdbb8329af2baf8f9dc91577ef514d2407e3f5f93123fd133
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 2KB
                                                                        • SHA256 cbc72cad100db87a0116d4087116320db13d300896924da915357c4ec741f282
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 2KB
                                                                        • SHA256 13ba972d6f1f22ec6ea3e39b6fd90caeec410ac31fc26b8e9246ec437f5754f0
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 2KB
                                                                        • SHA256 37dcf58591e6768c25fef7601166b9e71c84a66e8c748cbaf86c615038f6940d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 2KB
                                                                        • SHA256 ab7469fc86e69bafdac440c62ae12d03eb98bb3d9bf89dda1652669a619aae90
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 2KB
                                                                        • SHA256 1f1725415f5e957833ca10aa7e9ef465288c5b290ec05ab4ca1a359c105a4d5b
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 8KB
                                                                        • SHA256 4a3fc5acbe4ee586de530d795fc532f08a043531dedb462d1fe0cc6abf6da6a4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 8KB
                                                                        • SHA256 18ba1f61716ca8943cced22796efb334ec57ecde258b2f47e827a4953c5fcce7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 8KB
                                                                        • SHA256 33b586368ae87ff1d9ef5de5edde039469ca48194da5907391da289b2bc01c78
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 a6746a2a2e4a9728b4417696653760c0972ec3503fb2e24eabeda91900563164
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 4705cdcc0daed6608469ff4f6ab8c598d3f70a45c04355e641c4475566282031
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 8ff0ab794ae135e4b175f7594dd23db931e6dff5d242beeeddc711e6793ec697
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 f71f85739306ec05150f3f9eb22c5dba1d582c851cca93db1b9f3e9e35776657
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 366a34dc285e4e6c6d5519a9665620c5e36e3e244e5bad82425227b98e681ab6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 0ca13be335fa3a7db941cd9bbcec35702c1e1dabf11a4679320762f1208453af
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 3fc27d12c9e788de8a0ee55d69a7048b149c76a8954dc9ea066229b48935cbdd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 50dd042886d14740cb08c54c63fbed327adb441a70ff63b7a5511f617f1cf9f7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 16KB
                                                                        • SHA256 57e8bfb51a20893e9c0a0c178dd138d937b17cc38aa4159179bd7bef5a5f050a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 15KB
                                                                        • SHA256 2dc42798e8d5e31ddf507b277b5dee81248409a8b21a427f33051e3b1517554c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 18KB
                                                                        • SHA256 7d7814e79e2b2a9b88e75884c011cb9ab7228a7af0f1a94fff13c25875935cab
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 18KB
                                                                        • SHA256 94cafa1732a0c5641ea5e58c2b9764cc58772868a6d4fa6069091cd43b93aab3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 13KB
                                                                        • SHA256 de46b7ea5ce84a9b4d3c92e8a8e586ca63a83d9c3346f155f39eade60a0c0772
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 13KB
                                                                        • SHA256 76862a4081df4dc48f126f44fc8db934a42061ff602dcb792f19d682c30e47ca
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 15KB
                                                                        • SHA256 a16273c86f49d8aeafb6948fcb4994f5a8c961c5fcb292b65354f00c26f254cf
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 888105c798cdfc994808331e18ab5a02411f215c8757637887cd46858994e981
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 7814e711305f53d65644cf9379aa9d2b43fb2d889054c3a98fe61676bf38bd07
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 eec6a46164522b97345feba405b0a44343ea2c3504c8658d3630474aed3e3386
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 bf0ce4463b01c0d6c99e654c075d71d0965990d933133a9e0b409d7b88eab38f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 22KB
                                                                        • SHA256 0353c1e5fe813527d4ca96ad75bfacb2aa26261135c79bc67034e03a324dd749
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 24KB
                                                                        • SHA256 868d66995f8f13502c53bef606434297fb3a0df5ddafb136027a0be8bfc8772b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 b2142a6611889777a9d7d3bdf158ba0d8388728e2c6ada421d16bc708b609ac8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 22KB
                                                                        • SHA256 a20c3cfcc443ee41032c95a5a1ad86d3cb4e2da7c4ab4f2a26fa0c0084ee541e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 813B
                                                                        • SHA256 9531e5c512ca1062f12a2d112c611b035cdbfe8e16824d4e249bddc569bd9761
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 8KB
                                                                        • SHA256 5c2d97cded3ddb26f547a3ff7fb3ef206be679fca8e63117eab248333d633e83
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 14KB
                                                                        • SHA256 aa2c319c9b61bf0465a433a4d3ccf96730716c3bea5c12fe96c0f137c6193c30
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 1KB
                                                                        • SHA256 29ca2b6d95ba721439d37111f21660e90021fb75aa83c8e6029845c088765d95
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 1KB
                                                                        • SHA256 b596dca4facc271066d3e880c4602637004e9cf34bce05e8dc4afd0f67378f07
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 1KB
                                                                        • SHA256 e49af00235c7eb4d8539c76a088a0df3f0db79a1493c6647ef4b9e30d12069d5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 7ecd08b71083c2260d5b9c0ef28b34603dcc7658cc58db2f5ccdbb660f04070e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 bd5b4c1e246dd0b0f6c97ac0fbf4a5f6918e28f3a3238c61cda11e8d6e7733ba
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 11KB
                                                                        • SHA256 76db7176b80e68c87236646400f1b998d7d866858d5216d7c0727752f4b4f7e5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 686eeb26c39c7139125b55dde97c0a711d9d9e711ef4be59ca78cad46403ee5d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 11KB
                                                                        • SHA256 3e6f3d1454dd5bb0f01c2783885e7daa7027c6c676768c502faa3148f9cc4767
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 16KB
                                                                        • SHA256 9c077e78296e9619b787dccc19082e1177034d6188c91e3980703b347dce9f65
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 24KB
                                                                        • SHA256 599bafccf348d1696f4007ecc5ffa92d962da38d9195919c6d128e2ee682b6d3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 22KB
                                                                        • SHA256 599eb79f5a74bd176596543ec1638377d1f6a0e0b9c2a35ab168a89db00a443d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 12KB
                                                                        • SHA256 5a2fb7ba90f79ea51fe5005f12222493002f252af24f1011f620df7bea099888
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 e36a737246379f3bb6e1a5a182dd75494c5516b066ddbaa06e7559516b6957f9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 2ad947cea0aee05ab21d9c17e82b2030539082672b3aa38172176c8b15e1861e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 498516bc58334d41934f7476f1752cb2c1d1fff0edf3113909e30a863cee2a33
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 d6bb386519a809dc0e58afe6bc13e37aeaa7a0fcaf5e17b10a7e7fee1e689557
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 899ea41891b0df353d6f89a8270fd99e0350e497eb480ad419d45bbe3dddf11c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 24KB
                                                                        • SHA256 315ba05a226bf4f371ec81a98586fcb065df85ef27e61b68f6605d141e8b60ef
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 24KB
                                                                        • SHA256 1572c5ba3797e4dbe9eaedfeaf87fb2ebce5c7daea42f2b1480b7c0e5e024a12
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 b3836d4b0cc696e4544443ec6bd9c343c050f5b2ed9ecea52a1c2ce3b99127b5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 74369dd91acaca4c697d06336b5840e9f22bc18fed4c273c443297caf19e8abe
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 14KB
                                                                        • SHA256 b3cd3036b286c8682d70542f47bcec460171dbabe1aa79b44d1c676983fe9c54
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 025a0caddbb2f6886e3205dd158401468e498223069b13ac84bd7aff3a873980
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 068762fa80efdbab7510d1575895d51ad0903bd54420ba052b430e89b252624c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 3ba1d410de095c0ad09bdb4e4759330ff1d6bf9061289ac3ef7a7417c6d1f86a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 179d88451a27afcd8d663ce29625531b1068063cb6ebed2196273321adf6f0ec
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 180f8fb353ed041ac873008c899380b09e15711e5a7d3636caa426311953f489
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 935d414f7561089520a6105047d7e24ab6e0756ffe41f17b613e43cd15f3e969
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 25KB
                                                                        • SHA256 b0cb256304f297a72c28b1140d56664cef4d3f7b41e546f3516ab2ad3887c85f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 17KB
                                                                        • SHA256 c13c0067055b2732f1d981676a9334c6524aa06ed6acccca88d7b4f5f06ba05c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 17KB
                                                                        • SHA256 fd75d72b4f43f81ba22172a5707205ddf5aa8a0bbbc4e5a4c666435f5d3d4964
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 18KB
                                                                        • SHA256 fc928085ccf221621ed93905394584c8bc587070651f3d9520e363b2e618f409
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 8a3c5b3791d2beae389461996ede89c1ffe8d948214980744486ddbd22fcedc4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 20ca6eada0989e706a04da336102ba77994a1056b113b089294be1d6c70d521c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 21KB
                                                                        • SHA256 86e89a74969ca8278f177f731f3562e839959059ff760296da1a143eb0f487f7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 22KB
                                                                        • SHA256 534fef4b6650bfa1326089ff137000512724a41cddd43a7e98fbddd36c9e592b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 a3dc4a39902d0bffd4535ba962849c2884097e7b950daf73a877c1bf0c31adca
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 e748340acb3d2bef9faa5eba615d7ba1c0dfa26a8b3ea497f9eb27c50034e769
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 82be62cb8a2e7ebad5e1e8b353762a804b90f920bf63b3c260e675eb385ea679
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 92ee7bddea084452c0f8c8ffd64c7d76ff935bedbdcb68dbbbea86ae0c0c534c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 9206ec63e2f9c26725f54b8f61c357ea5bd344e851e3287c0ea5ac4ca282f19f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 e5b170959f06168cd44dc2619fd5e0352d2873b2eeb16cec1ca2b69de58f8bd4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 9KB
                                                                        • SHA256 12e909403efdcd8c77c9423689fc6e54a37cb2b03204493171fbb4cf5a1a4d43
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 3b741dfbbdfbd012395e79d99151542875bf85ecc81394b79ac74448426febc0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 10KB
                                                                        • SHA256 f215330f57a631ceb17288d53a4288f82f47b432288ed7648c917eb7feeed69a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 17KB
                                                                        • SHA256 290ba7b479b7c40afda0918ad9efe5af3e6eb088f6b6dd3fabe649b4c58d445a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 18KB
                                                                        • SHA256 f45e8728a66c6663aa0ad5273e381dd53c34752e205598c5673d62264938fd93
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 14KB
                                                                        • SHA256 cd4f38ce67aa6ba4b6bdfb5efa5d1c2d4b4b604233c3dc2817f334ad40730ca3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 19KB
                                                                        • SHA256 2b6c8bc991f277c1da66d64f40b736017fbb0876a7e478eb785f7581835800f9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 d8321ff75f04c9f4442b52127ad9894cffdffb1f19aa6f4cc20e0ada1176cba7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 22KB
                                                                        • SHA256 22917c4ecd6fcac915d4cfbb65d472bd7d33198cac345ee2fdc031db1a42b7fb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 d77a05ee80bf0eb62cfa035417b7923198e969631f8fea44c4b5a2dbd72517b5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 11KB
                                                                        • SHA256 e15c5a294a00877a155b1a8a00396971ee43864c7d3f7b957ac7cc402c970639
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 17KB
                                                                        • SHA256 1bf35f1ad555c06083019c232c22193380c9bf4201a8bffced326540283ad363
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 25KB
                                                                        • SHA256 22e3df07875bcc2c910caed9daddfcb6e576155160adf40e76c2a954d856ccd0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 17KB
                                                                        • SHA256 3e9604b50eebcf7ba49af905a71b54583fcb24e1437db83daaf86f4bbe6c9fe6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 16KB
                                                                        • SHA256 40072365b2008adf4d02fbdbb9fd4517b634019e79ce178f52da7b438c491ed7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 19KB
                                                                        • SHA256 a20d76856d98418841466cca02f3d33c9f5a38611eb2c9493e36c93338c79b66
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 19KB
                                                                        • SHA256 720f19b420e12f3069b372e21c36c76e256c97f12c28e3f259225c7069af2d84
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 f179658b4266aca84e9cc9c34239e1a0ace23811dc14972982b2caa88601c6f7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 7adf75fdbdaaedc44748520c427b5372a04d70ba83f9aaf671acc6d48365a29e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 c46a6aca456faa47024e16c9baa285a2327e16c10345be97746509d1e2d5235e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 22KB
                                                                        • SHA256 17fa10cccbb128aa04bc194eedbc4e0178f31704f104acb3cc636dc8ed7c3a76
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 3ad895dccf468ef2c77eff0d3d095da59ec35630c6e7a704aff15da9c767d49d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 11KB
                                                                        • SHA256 ff53f72c86f6b9f16e70ce114abd85192f6ea0d9032e764ae36a881c382f26f1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 17KB
                                                                        • SHA256 b62c62051dbddd903ee56414ba2c6eb1c2d15e8cab18e8cde14256de9cb7638e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 63a8a73fcf3b10b43a5fb22007949ae6a0498da4c91d8483250e698af73fa018
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 22KB
                                                                        • SHA256 841ddc6156d0384272253ed0e711d74c67b79d89eee79de340d3af2713733228
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 d4191031ed522ded276e5d05a2fcae9dbb939b9c89d899d70606f34668a3eca0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 11KB
                                                                        • SHA256 56fd6f915d2bf8090f4612a972b26ca3be31e31a6f7c0290e22e7813c0804235
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 13KB
                                                                        • SHA256 5d0826d30f91318afc202e5cc671ada9a2ecd1293780dd2571cc61c1245fbe10
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 18KB
                                                                        • SHA256 c525a350e0b560581ad9aa52dc74648a05f5a6ce362527147a6e5f312cebe37d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 9c2651b59fdfca6b004879504eb0d816489ae040eab4a90e4a7d274ced41f531
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 24KB
                                                                        • SHA256 66b68c1440467fda8f1848c2c771fde773c06bb3a644ace041e05bfd558a27df
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 56a54fe5caee5521c3a3ed84b8e563c2945a1ec1abce63d5705d95a58551079b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 4df04ecec0f4267a2a0aa530869c60ac6bbc1c2231fa73f207d8be9779411a8e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 21KB
                                                                        • SHA256 6241444fe0b7ac35e99ddd2fea8fa9ed619b36ab907b60fd3b60a0b162fea7bc
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 84683648899c12ceace0ee1acd46ba92dcaa2051e2ac6071524e783671dd2cde
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 25KB
                                                                        • SHA256 a42f5e70f90956ca59a482e9602cdc885eaf54f3733c80f74c9dde3031106d8b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 11KB
                                                                        • SHA256 3f160fa5eb6453d2e78e265b42ce1590a31e981fabe99d86b7579d2bb0851e4f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 16KB
                                                                        • SHA256 1643dcfc8df8a88fa3ffa88c0e1fe90fee4681c0b492e78a29497252945f512d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 17KB
                                                                        • SHA256 f3f2ed5660feed964236eb93d2badf73ac373db331ac4ce554e8575b72fc8810
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 21KB
                                                                        • SHA256 2522f18f3d72ca10547f110a655a64500b49212a612b875981240cff50cf8a5d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 19KB
                                                                        • SHA256 3c5f7b43d579016649c06b831a31f980d3f407dbe40a4c31e7853953d1b741c1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 16KB
                                                                        • SHA256 d687ff890711a59b554405ab7d2c4c7be76027802628d87df0505e3e30f1f455
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 18KB
                                                                        • SHA256 6d2e63b9b39d0bf4e7aabc9dd4f7cf6d147f76ec5a87bf47945448200ff79ede
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 23KB
                                                                        • SHA256 36e65bc4de613bd277760defcdbf54603ba5d7785691bdc25f9ab400ba0a72ca
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 25KB
                                                                        • SHA256 03344ed42e33d1c9151b84413e802b99eb43b32765c8a05a3df558e39d6b1f23
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 16KB
                                                                        • SHA256 b1e24ff472f11567af9aec16b2a4bc53561af6c04402befa7bb596f7e70188e8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 17KB
                                                                        • SHA256 753aecd49f14428671d51d606f880617d6ac4f8f342d474f1711b91804851bba
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 21KB
                                                                        • SHA256 0d0a53e5514e8f894955fdd8b31c7867c8d3c6bbf2fd718baa4b3845dd226cf5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 21KB
                                                                        • SHA256 6c95486ca3b6a96550404d48254b3196b4920773c90c29b0e518e7d0f903c379
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 5b6bd2eb4f45c2b9db7d5fd1f6d7e7d5ec12fd0f51def33f57175b77e8df0f7f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 22KB
                                                                        • SHA256 43c00f37b89ffe40dd1bf90c97560af2143aa14f7feda051e599230a4b721b78
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 14KB
                                                                        • SHA256 cc03f20d29f63b93fc4f884fb292af51afc4ee27a8c3b919ae446e2bb68deb54
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 9d6a398250f60ea731cf5aaf6dbab61f4a0b909a4cc785723c8ab31cd3d5f372
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 14KB
                                                                        • SHA256 33afb261fa69a13c2b8f9c92287dea0e6f54f4357185953689a285f2718c15e1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 21KB
                                                                        • SHA256 02e62f7d6a048f9f358acf1268cac6afd398ffb7ee347a7b6f01d889ae65184c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 15KB
                                                                        • SHA256 e1939a60440d5d91b7d6b53d92975b3d679efb454da179f87204e0f75e919ff7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 550e80d19a5fdc395a112ed52f9b9ab78a82cccae6d222c054da9b13076a61a6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 21KB
                                                                        • SHA256 31b9ad0c72d725e8b97bcd2129a1fd0ab18691ba87ca4b21e5a7345cf6a2dcb4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 a566dea5bf81d2fbd1481ddda055785cb4e475bd1fc261c96b29c3012b93561c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        session_da1d9459-b937-457f-9939-d87a0c62738a.raw

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_da1d9459-b937-457f-9939-d87a0c62738a.raw
                                                                        • Size 20KB
                                                                        • SHA256 7eee9083b5d7ca62118e1bf1d3cf593a6eecb7a5d20997b566e425da72b53b01
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        c1613d07-8ca1-4a48-81c4-2f54c36daec6.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c1613d07-8ca1-4a48-81c4-2f54c36daec6.tmp
                                                                        • Size 608KB
                                                                        • SHA256 3f84fe1fd9b115cafc7558d55250e063e6de1433d8752c420e0f694449af23bd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        df1786a9-bf4c-4071-ad03-adf51c79a135.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\df1786a9-bf4c-4071-ad03-adf51c79a135.tmp
                                                                        • Size 173B
                                                                        • SHA256 1c680feb5d4c62325a8bc707512d5ff37ac093db94a0afc9cf1a1e503b9b94da
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ffbbcbf3-1559-4409-88c6-2704d4146a3b.tmp

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ffbbcbf3-1559-4409-88c6-2704d4146a3b.tmp
                                                                        • Size 412B
                                                                        • SHA256 88f026f12f96081756413562ecc91d5f189ac179f42b99737bdafdff981203fa
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 1KB
                                                                        • SHA256 3c546902a40655b077f11e5fcf504f41abeb0495cdbc6bb6450ae903d28c4788
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 2KB
                                                                        • SHA256 be281d3bcf1145de4d96aa0d77238612476cb3882487faedc692ed17dd03ec32
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 3KB
                                                                        • SHA256 521699cd6410d1df5eae246dd8477fea025244247f2792b86807ba632ffbf761
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 4KB
                                                                        • SHA256 666af3a94581e6dc68f099794e279cb00f7f21933ec3dd089e3744827dcad3bd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 4KB
                                                                        • SHA256 389b9f6afd08fdfa14143f97515143202ad969b842b8e8c124ab225b1971dbd9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 4KB
                                                                        • SHA256 cd8df510be958adacd2a152836f929aabf0448039afd012968864c442f5e6c7a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 4KB
                                                                        • SHA256 21d29c67b97f066b39a1bd3e9c7713418803df6afc92ed4fe8b012b85b843b1f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 4KB
                                                                        • SHA256 268634471508e4ffa61a3fafcfadef99f81694695c0219580996ae5857fa5d09
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 603B
                                                                        • SHA256 7543fd650f7d559f963a0b54ea15d0735733e9ccdbf3acb817c59330c60f3333
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 693B
                                                                        • SHA256 5928ca2b5836410b323806cef87e6a9d84dfabbe486d2ce63198bae3c32a962c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 874B
                                                                        • SHA256 e7560a63acfb7d1b4319196c2e37a3412976bc79b14a50a030c3538d4c8d25d1
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 970B
                                                                        • SHA256 4a2e3dd62627626440a5a72cc012f4712e3d43b6213a2e4293102136570912a3
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 1KB
                                                                        • SHA256 39f0b0e4fefe0e8178b16de35281bf25cbc540b9a5ac46bd250ba099e145c98f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 1KB
                                                                        • SHA256 393ee895a3fd27eb4a89b1e0c5430b7604345f93f03e1826c265be7ebb4347b8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 1KB
                                                                        • SHA256 002e15bf4e651aba7df4fda870bd7f6deb827e536b4e519020673c9ee172a560
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 1KB
                                                                        • SHA256 7596d97bc6fe0a80fb10487f6e21dbfa7e7fda602bb0fe3d722442857cbd00e8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 4KB
                                                                        • SHA256 c905099828a20e2965863a0b1155b7e015ef6fe47c7399ce2a505c45aaebab4f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 780B
                                                                        • SHA256 2cb41d36d67f06518e5c721f7a0cd7a937e1a1065f8fd91c75c0faf25214f87e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 505B
                                                                        • SHA256 89947b3d56aa5c29cea828057148ed79ba62c1793ef0c282d6966459adf8104f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 1KB
                                                                        • SHA256 9bedf4bfb5032ea19843f0eff5e5739faf02e29d97045b8c6a940ed37c24dabd
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 4KB
                                                                        • SHA256 b87d4dc30079a97fa0553cc5a78415a4026601e48d30a20f41c6fe0d1301779e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.0.353803132

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.0.353803132
                                                                        • Size 1KB
                                                                        • SHA256 2c268bf845b7ef092066dda659cda1e8de420d4f5312d20d89bb4977f0f3d78d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 200B
                                                                        • SHA256 07d0cf664e2f58290b2dfd03f0673fe7dccbe84fbf81822ebbe452e66bb8a520
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 873B
                                                                        • SHA256 ca2c1e80605b8853319870e3dfa0e0008a08d87b348add2de00d7f048f5c8070
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 4KB
                                                                        • SHA256 5f1e008434c13c01e8832be4e90c9fedaf54792b2f8277ecca335f8a01e04c26
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 779B
                                                                        • SHA256 9e6b8e93fba4f4dd67168ef4fe0d8fd50b194a6e96a41c24283cbf6c73de9375
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 692B
                                                                        • SHA256 6c6fb69a1df83f833466efc06fc9ae07f77e822c27318a5296aa5ef477d09677
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 1KB
                                                                        • SHA256 59f40e80e04e86097d57e2af303408c8be7a38cd98dff61638531cba9ea6c92d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 1KB
                                                                        • SHA256 829b305d7914c67f4482a50c38a7efa18b4938148c27520d6d4aaa08f6501327
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 1KB
                                                                        • SHA256 e4f4ef622c3d95559345c2d68591b42fa41585fb6ca1645ae615d04cd0ddafd9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 1KB
                                                                        • SHA256 dfafc637c730ed97d5b4e226e7f9dd2bfe43f3bbe87cb2a1afa5f729952ea51a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 4KB
                                                                        • SHA256 b8414f1db8bccf400d2dc7d53afb9f32a1ff22267161349c370e2229ceeceb03
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 602B
                                                                        • SHA256 4ead51cfb45d8a1a7d5f11bf0f931aa4ddc9332460f87756454a6efd7c466b27
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 1KB
                                                                        • SHA256 81e4a103797e21ccc8eb59caa1dfbecc97e548b840f4fd2e98a2f517387c6d23
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 2KB
                                                                        • SHA256 30aa4120d595512aae804c930d11083197fcfc087fe667fc737f9aa5c4aff0d9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 504B
                                                                        • SHA256 b83565c50b4c1135803ab1be4ba828e16de90faf9b14f03eba9a7ec912476b04
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 4KB
                                                                        • SHA256 6b02617a6e1fbc2dfc59d8eafd5e8965d0277e82832f73763711604aa279358a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 411B
                                                                        • SHA256 6e7480f4138b268dbe027db26f74f43d19f79bde2db886ec0ddeedc344c41586
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 1KB
                                                                        • SHA256 01881d7d3e4e0d46f65c01c44b8fe9d1b89f5f70c16256ed12773708593e0f38
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 4KB
                                                                        • SHA256 b2ca579b5cc848836731f5cc0c78b9c7df46ef520855755382c1315a3794e1b9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 1KB
                                                                        • SHA256 94a8523e570f79deef6f6d15de2e39c2dd99fee664ad0c351bc7f82cfd8beba9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 4KB
                                                                        • SHA256 663e0384ebe3d5f6a0c0d50e078da8fbd9f05b8cd85bb63139ee54fb7cd7d3b4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 4KB
                                                                        • SHA256 5f9dd5fd8c0c3cb46b24e9f164c20e26ef283b1626da74937996353c7332b4c6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 4KB
                                                                        • SHA256 94103c1a2365250ecc8e6276201a648d606f832fe9193f30c4b787d316bde0a4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 5KB
                                                                        • SHA256 2bd745604d1ec2d1496620b16fbe143c408e09bb1d118c982660ec04369953ca
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 969B
                                                                        • SHA256 a620acd4e1ccd3dc68b9e0d062c6a330d8fa8760d2fcb8e0e9313fcd55c213ae
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ssdfp2152.1.1411322065

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.1.1411322065
                                                                        • Size 4KB
                                                                        • SHA256 46018180ee29e01f3efe10a42a59b804be5984189f44708956d0aa831a11ea4c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ssdfp2152.2.2063191810

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2152.2.2063191810
                                                                        • Size 217B
                                                                        • SHA256 91eaf64c0d7d9825d2ed8ac4a52087ca663d632b2c938e6aa611a66bc19d75e1
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        suggestions_cache.json

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json
                                                                        • Size 617KB
                                                                        • SHA256 1b98d917e55e16596d6cfd9e92025bb97adf7a3d8049a95547e43d5915e203dc
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        data_0

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                        • Size 8KB
                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        data_1

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                        • Size 264KB
                                                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        data_2

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_2
                                                                        • Size 8KB
                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        data_3

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_3
                                                                        • Size 8KB
                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                        • Size 3KB
                                                                        • SHA256 eba4b938297a6891c96e726fa4fffc0bd396682df66703927c17af55041b4b69
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                        • Size 7KB
                                                                        • SHA256 5ddbcdf4e98ee244c9db553eb2b5165646fab75d5f92f3511b05e1207c0846ec
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                        • Size 5KB
                                                                        • SHA256 297bba9f0bb0e973a68099e1342355d6ad9ab7cf61a03743bc2560ebe2c37be3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                        • Size 7KB
                                                                        • SHA256 3503b271b82ac3ce7965b1acc65baead9b00449aba00aa8eca0b6fb48c88c8af
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        VariationsSeedV2

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                        • Size 11B
                                                                        • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                        • MD5 SHA1 SHA512

                                                                        VariationsSeedV2

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                        • Size 19B
                                                                        • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                        • MD5 SHA1 SHA512

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                        • Size 124B
                                                                        • SHA256 840c09c32522c72c590f895bd4e1284948f28e7ff0486abbd4d75ce6e003da46
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                        • Size 348B
                                                                        • SHA256 d9a71ebb685bce275b22ef2d94894f21bd39f202cd31d999a088c784ecb3384f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                        • Size 13B
                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                        • MD5 SHA1 SHA512

                                                                        metadata.json

                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                        • Size 236B
                                                                        • SHA256 c72b223f22e71760f2b7f5a0c553dd84df081a5d46bfcc312c8995a94eb4b001
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        hyph-bn.hyb

                                                                        • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-bn.hyb
                                                                        • Size 703B
                                                                        • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        hyph-mr.hyb

                                                                        • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-mr.hyb
                                                                        • Size 687B
                                                                        • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        hyph-nn.hyb

                                                                        • Path C:\Windows\SystemTemp\chromium_chrome_Unpacker_BeginUnzipping2152_1165856368\hyph-nn.hyb
                                                                        • Size 141KB
                                                                        • SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        memory/3208-5341-0x000001DDAB860000-0x000001DDAD0DC000-memory.dmp

                                                                        memory/3208-4477-0x000001DDAB860000-0x000001DDAD0DC000-memory.dmp

                                                                        memory/3208-1764-0x000001DDAB860000-0x000001DDAD0DC000-memory.dmp

                                                                        memory/3208-3321-0x000001DDAB860000-0x000001DDAD0DC000-memory.dmp

                                                                        memory/3208-5099-0x000001DDAB860000-0x000001DDAD0DC000-memory.dmp

                                                                        memory/5292-982-0x00007FFE28720000-0x00007FFE28721000-memory.dmp

                                                                        memory/5292-980-0x00007FFE27740000-0x00007FFE27741000-memory.dmp

                                                                        memory/6180-4658-0x00000155CCD80000-0x00000155CCD81000-memory.dmp

                                                                        memory/6180-4651-0x00000155CCD80000-0x00000155CCD81000-memory.dmp

                                                                        memory/6180-4652-0x00000155CCD80000-0x00000155CCD81000-memory.dmp

                                                                        memory/6180-4650-0x00000155CCD80000-0x00000155CCD81000-memory.dmp

                                                                        memory/6180-4663-0x00000155CCD80000-0x00000155CCD81000-memory.dmp

                                                                        memory/6180-4662-0x00000155CCD80000-0x00000155CCD81000-memory.dmp

                                                                        memory/6180-4659-0x00000155CCD80000-0x00000155CCD81000-memory.dmp

                                                                        memory/6180-4664-0x00000155CACD0000-0x00000155CC54C000-memory.dmp

                                                                        memory/6180-4657-0x00000155CCD80000-0x00000155CCD81000-memory.dmp

                                                                        memory/6180-4661-0x00000155CCD80000-0x00000155CCD81000-memory.dmp

                                                                        memory/6180-4660-0x00000155CCD80000-0x00000155CCD81000-memory.dmp