Overview

overview

8

Static

static

8

tmpk9jqzd6t.exe

windows10-ltsc_2021-x64

8

tmpk9jqzd6t.exe

windows10-2004-x64

3

tmpk9jqzd6t.exe

windows11-21h2-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    24/05/2026, 13:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    tmpk9jqzd6t.exe
  • Size 163KB
  • Sample260524-rablsaew3n
  • SHA256 5255aa5f489c656c6ba3557c47aa26805c7c5b29c8e5e107c87dcdc9b08acbe8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 24 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 15 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 50 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 14 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\tmpk9jqzd6t.exe
    "C:\Users\Admin\AppData\Local\Temp\tmpk9jqzd6t.exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4960
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" /allusers=0 /silent
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2828
      • C:\Users\Admin\AppData\Local\Temp\7zSC0B38698\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSC0B38698\installer.exe /allusers=0 /silent --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:5312
        • C:\Users\Admin\AppData\Local\Temp\7zSC0B38698\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSC0B38698\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x7ff676042e98,0x7ff676042ea4,0x7ff676042eb0
          4⤵
          • Executes dropped EXE
          PID:6136
        • C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:5984
        • C:\Users\Admin\AppData\Local\Temp\7zSC0B38698\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSC0B38698\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=5312 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_20260524145926" --session-guid=d89617f8-5724-418b-ab24-ddbea488e195 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=AC07000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:5124
          • C:\Users\Admin\AppData\Local\Temp\7zSC0B38698\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSC0B38698\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x2b8,0x2bc,0x2c0,0x27c,0x2c4,0x7ff676042e98,0x7ff676042ea4,0x7ff676042eb0
            5⤵
            • Executes dropped EXE
            PID:2356
          • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\installer.exe" --backend --initial-pid=5312 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261" --session-guid=d89617f8-5724-418b-ab24-ddbea488e195 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=131.0.5877.97
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:4460
            • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x7ff659162e98,0x7ff659162ea4,0x7ff659162eb0
              6⤵
              • Executes dropped EXE
              PID:2268
            • C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:5704
              • C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x994040,0x99404c,0x994058
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4360
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:3108
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x260,0x264,0x268,0x23c,0x26c,0x394040,0x39404c,0x394058
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4812
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:3960
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4968
                    • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x270,0x274,0x278,0x26c,0x27c,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                      10⤵
                      • Executes dropped EXE
                      PID:764
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5264
                    • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x26c,0x270,0x274,0x268,0x278,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                      10⤵
                      • Executes dropped EXE
                      PID:1716
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x284,0x288,0x28c,0x25c,0x290,0x12ec830,0x12ec83c,0x12ec848
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:5296
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5688
                      • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x268,0x26c,0x270,0x264,0x274,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                        11⤵
                        • Executes dropped EXE
                        PID:184
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:4596
                      • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x288,0x28c,0x290,0x284,0x294,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                        11⤵
                        • Executes dropped EXE
                        PID:5548
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:3664
                      • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                        11⤵
                        • Executes dropped EXE
                        PID:5744
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6028
              • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                7⤵
                • Executes dropped EXE
                PID:3440
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1636,i,2348554039582071417,1876776952652778167,262144 --field-trial-handle=1880,i,6381969919016860666,14458463738621741970,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,15214535355077606474,5749031508904512296,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1876 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:3660
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2008,i,8089906089228338426,18055853151211940925,524288 --field-trial-handle=1880,i,6381969919016860666,14458463738621741970,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,15214535355077606474,5749031508904512296,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2052 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                • System Time Discovery
                • Enumerates system info in registry
                PID:3944
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2380,i,17313682678085525063,8612865189374103711,524288 --field-trial-handle=1880,i,6381969919016860666,14458463738621741970,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,15214535355077606474,5749031508904512296,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2548 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:1224
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3376,i,11881951816417025525,16863145758131798748,2097152 --field-trial-handle=1880,i,6381969919016860666,14458463738621741970,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,15214535355077606474,5749031508904512296,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3780 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:5360
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3456,i,2620977607605366886,12485063245126086257,2097152 --field-trial-handle=1880,i,6381969919016860666,14458463738621741970,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,15214535355077606474,5749031508904512296,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3808 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:4192
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3132,i,11341364600920704119,16476008874665070102,524288 --field-trial-handle=1880,i,6381969919016860666,14458463738621741970,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,15214535355077606474,5749031508904512296,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4036 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:3536
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4452,i,4905555903326363548,13173644544660936248,524288 --field-trial-handle=1880,i,6381969919016860666,14458463738621741970,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,15214535355077606474,5749031508904512296,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4428 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:3192
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4608,i,4084062696211030940,15095939900007119682,2097152 --field-trial-handle=1880,i,6381969919016860666,14458463738621741970,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,15214535355077606474,5749031508904512296,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4632 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:2512
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4788,i,17973424667956957324,10028263920789771942,524288 --field-trial-handle=1880,i,6381969919016860666,14458463738621741970,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,15214535355077606474,5749031508904512296,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4800 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:4148
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4660,i,7650795198173184267,14391194860482373435,524288 --field-trial-handle=1880,i,6381969919016860666,14458463738621741970,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1884,i,15214535355077606474,5749031508904512296,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5152 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:4904
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\additional_file2.tmp"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6240
              • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdd55010c0,0x7ffdd55010d0,0x7ffdd55010e0
                7⤵
                • Executes dropped EXE
                PID:6556
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1932,i,6328766545233222705,1391917161264727286,524288 --field-trial-handle=2036,i,9014207875877957997,3989720666582257709,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,9979334692444912141,15405794725793018430,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2068 /prefetch:3
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • System Time Discovery
                PID:2664
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1736,i,9791829181814703471,8693836646246394095,262144 --field-trial-handle=2036,i,9014207875877957997,3989720666582257709,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,9979334692444912141,15405794725793018430,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2032 /prefetch:2
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:3176
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1948,i,17422013812884701253,14777840435520594431,524288 --field-trial-handle=2036,i,9014207875877957997,3989720666582257709,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,9979334692444912141,15405794725793018430,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2464 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:4316
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3436,i,5001864940086854299,10062628513757110772,2097152 --field-trial-handle=2036,i,9014207875877957997,3989720666582257709,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,9979334692444912141,15405794725793018430,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3680 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:6700
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3620,i,7469207099857313481,9607726359957037764,2097152 --field-trial-handle=2036,i,9014207875877957997,3989720666582257709,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,9979334692444912141,15405794725793018430,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3736 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:7068
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3484,i,3736604138328932037,12852247513431592500,524288 --field-trial-handle=2036,i,9014207875877957997,3989720666582257709,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,9979334692444912141,15405794725793018430,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3716 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:7052
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4016,i,4506667618895007708,11383450465960643404,2097152 --field-trial-handle=2036,i,9014207875877957997,3989720666582257709,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,9979334692444912141,15405794725793018430,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4124 /prefetch:2
                7⤵
                • Checks computer location settings
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:6836
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4876,i,12343135674180598568,5317035907581371695,524288 --field-trial-handle=2036,i,9014207875877957997,3989720666582257709,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,9979334692444912141,15405794725793018430,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3548 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:4504
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5064,i,18058542179686436134,13510416166558308552,524288 --field-trial-handle=2036,i,9014207875877957997,3989720666582257709,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,9979334692444912141,15405794725793018430,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5056 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:6208
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5172,i,11709402987783919685,7241463306318159622,524288 --field-trial-handle=2036,i,9014207875877957997,3989720666582257709,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,9979334692444912141,15405794725793018430,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4892 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:6392
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Checks computer location settings
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              PID:7020
              • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdd55010c0,0x7ffdd55010d0,0x7ffdd55010e0
                7⤵
                  PID:7084
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1932,i,694613399517378711,13115490020879185380,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2060 /prefetch:3
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • System Time Discovery
                  • Enumerates system info in registry
                  PID:4320
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1732,i,17726427056629510030,18017379974887737977,262144 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2020 /prefetch:2
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:3644
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2408,i,15687710081821912952,2012952779233544853,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2608 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:4748
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3100,i,6989776383981331068,4377425221932745140,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3192 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:6372
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3116,i,10975787803561372927,18038218718736674927,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3212 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:3012
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3128,i,16542042407573048451,16533413741059171951,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3232 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:4232
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3140,i,11267815525497592105,11881674227414487195,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3252 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:3132
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3152,i,9036255914993833930,17428156227466681407,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3272 /prefetch:8
                  7⤵
                    PID:2944
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3164,i,10016133908762916176,16417680561262159381,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3292 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:4804
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3176,i,9975691819620577021,15514550961953901644,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3312 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:6412
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3448,i,5336807507287559370,10401820602483115853,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3468 /prefetch:1
                    7⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:6248
                  • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_gx_splash.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                    7⤵
                    • Modifies registry class
                    • Suspicious use of AdjustPrivilegeToken
                    PID:4456
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4628,i,7743873019592659658,9471631951778690313,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4632 /prefetch:2
                    7⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:4892
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4760,i,15261466019397546061,11975700953345094197,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4756 /prefetch:1
                    7⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:1420
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5096,i,8402841922332156948,9136355857498631290,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5064 /prefetch:1
                    7⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:5908
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5248,i,15569536783596510808,17932129156067430374,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5256 /prefetch:1
                    7⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:6572
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6248,i,17673807692296055141,11978610992917873688,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6260 /prefetch:2
                    7⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:6520
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6892,i,3894407635025229745,8063490482558971254,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6904 /prefetch:2
                    7⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:6512
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6676,i,7041788557205457627,8162247165818007931,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6960 /prefetch:2
                    7⤵
                    • Checks computer location settings
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:6536
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7220,i,18397399712741043216,5067957692906960107,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7248 /prefetch:8
                    7⤵
                      PID:5588
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7192,i,18104623103940925389,2877431548409756273,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7268 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:5656
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6456,i,12950625723966216053,1371863207506472122,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6496 /prefetch:8
                      7⤵
                        PID:5420
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7592,i,13443247539926280652,1369825605204334213,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=5412 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:1956
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7492,i,16615810590957726472,11797313723007540451,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7688 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:6864
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7236,i,7025878850116401592,9273619331829905650,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7712 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:6544
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7468,i,14282375889627593234,2233525476693501899,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7732 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:7156
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8060,i,12236826495948749050,5995861360610573745,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8080 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:2732
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8088,i,17967781938527339325,10082732334080126739,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8108 /prefetch:8
                        7⤵
                          PID:2220
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8384,i,16151372770878862690,12260937400281975529,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8112 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:4844
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8520,i,3993234133886180297,11860099448202025550,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8528 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:4472
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8536,i,1784789985181841386,4600013646863816789,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8572 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:3208
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8688,i,3938548011028384089,18126552873585728090,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8808 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:4152
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8816,i,5254220485020636339,3769884441767244997,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8836 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:5068
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8964,i,6513122393001802864,12908935941296581298,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9088 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:1196
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9384,i,9381345523118162281,16857369198601998705,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9328 /prefetch:2
                          7⤵
                          • Checks computer location settings
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:5752
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9600,i,14125429339071955082,4737367773153922345,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9492 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          PID:7072
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9612,i,4109482552620052556,11711381698064012883,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9736 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          PID:4048
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10216,i,15300819872438871074,4595280615921814092,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10228 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:4064
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10236,i,12219879205602210328,8595033836130311395,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10260 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          PID:6368
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10516,i,13531226699827521774,818542892260557498,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9468 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:6948
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=9448,i,10255522377641627823,4748874224735260339,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10648 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:2864
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10828,i,18073287392926304945,2830992693696026654,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10800 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          PID:3944
                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                          7⤵
                            PID:7556
                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                              C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x294,0x298,0x29c,0x21c,0x2a0,0x7ff767883eb8,0x7ff767883ec4,0x7ff767883ed0
                              8⤵
                                PID:3484
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10840,i,10949784118739027311,8731102032629743945,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11032 /prefetch:1
                              7⤵
                              • Checks computer location settings
                              • System Network Configuration Discovery: Internet Connection Discovery
                              • Enumerates system info in registry
                              PID:4060
                            • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\installer.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\installer.exe" --fix-taskbar-pins
                              7⤵
                              • Enumerates system info in registry
                              PID:7776
                              • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\installer.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff659162e98,0x7ff659162ea4,0x7ff659162eb0
                                8⤵
                                  PID:7864
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11216,i,7007245212964042172,16860293130816994813,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11228 /prefetch:8
                                7⤵
                                • System Network Configuration Discovery: Internet Connection Discovery
                                PID:7792
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11364,i,8286259485030245693,9708610555551377864,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11380 /prefetch:8
                                7⤵
                                • System Network Configuration Discovery: Internet Connection Discovery
                                • Enumerates system info in registry
                                PID:7872
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9100,i,16252145178302027952,3624479385280576325,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=9144 /prefetch:8
                                7⤵
                                • System Network Configuration Discovery: Internet Connection Discovery
                                PID:1864
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9192,i,3229184669953230709,5768254533364438198,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11440 /prefetch:8
                                7⤵
                                • System Network Configuration Discovery: Internet Connection Discovery
                                PID:5944
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11364,i,8872290642411023236,2527225489046576069,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11288 /prefetch:8
                                7⤵
                                • Enumerates system info in registry
                                PID:7476
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11368,i,9467320624680949184,1703556611937872081,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=9396 /prefetch:8
                                7⤵
                                • System Network Configuration Discovery: Internet Connection Discovery
                                • Enumerates system info in registry
                                PID:7180
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10620,i,16229693896297553631,7458534671474042702,524288 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=11520 /prefetch:8
                                7⤵
                                • System Network Configuration Discovery: Internet Connection Discovery
                                • Enumerates system info in registry
                                PID:6712
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10424,i,15351568058169526522,2879557188542006676,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=10440 /prefetch:2
                                7⤵
                                • Checks computer location settings
                                • System Network Configuration Discovery: Internet Connection Discovery
                                PID:8160
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10568,i,3100210823270877007,10914498903903716121,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=8804 /prefetch:2
                                7⤵
                                • Checks computer location settings
                                PID:4552
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-filter=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10940,i,13111600541407050176,1304978410755366010,2097152 --field-trial-handle=2024,i,17800132978796776875,3118345110246391566,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,PlatformSoftwareH264EncoderInGpu,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,16857287691746445291,8922910523773616631,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10436 /prefetch:1
                                7⤵
                                • Checks computer location settings
                                • System Network Configuration Discovery: Internet Connection Discovery
                                • Enumerates system info in registry
                                PID:5560
                        • C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                          "C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                          4⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          PID:2496
                        • C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\assistant_installer.exe
                          "C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\assistant_installer.exe" --version
                          4⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:5504
                          • C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\assistant_installer.exe
                            "C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x260,0x264,0x268,0x23c,0x26c,0x994040,0x99404c,0x994058
                            5⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            PID:8
                  • C:\Windows\SysWOW64\DllHost.exe
                    C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                    1⤵
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of SetWindowsHookEx
                    PID:5712
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    1⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    • Suspicious use of WriteProcessMemory
                    PID:2892
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      2⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:5604
                      • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                        3⤵
                        • Executes dropped EXE
                        PID:4468
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      2⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5828
                      • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                        3⤵
                        • Executes dropped EXE
                        PID:6188
                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x274,0x278,0x27c,0x224,0x280,0x12ec830,0x12ec83c,0x12ec848
                      2⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of WriteProcessMemory
                      PID:6636
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        3⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:6756
                        • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                          4⤵
                          • Executes dropped EXE
                          PID:6892
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        3⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:7140
                        • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                          4⤵
                          • Executes dropped EXE
                          PID:1384
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        3⤵
                        • Executes dropped EXE
                        • Suspicious use of WriteProcessMemory
                        PID:5284
                        • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x260,0x264,0x268,0x258,0x26c,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                          4⤵
                          • Executes dropped EXE
                          PID:6476
                  • C:\Windows\system32\wbem\unsecapp.exe
                    C:\Windows\system32\wbem\unsecapp.exe -Embedding
                    1⤵
                      PID:5596
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                      1⤵
                      • Executes dropped EXE
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:3404
                      • C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffdafcd10c0,0x7ffdafcd10d0,0x7ffdafcd10e0
                        2⤵
                        • Executes dropped EXE
                        PID:6236
                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                      1⤵
                      • Enumerates system info in registry
                      PID:6608
                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=131.0.5877.97 --initial-client-data=0x274,0x278,0x27c,0x20c,0x280,0x7ff767883eb8,0x7ff767883ec4,0x7ff767883ed0
                        2⤵
                          PID:7628
                        • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                          "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                          2⤵
                            PID:7356

                        Network

                              MITRE ATT&CK Enterprise v16

                              Reconnaissance

                              Resource Development

                              Initial Access

                              Execution

                              Persistence

                              Boot or Logon Autostart Execution

                              1
                              T1547

                              Registry Run Keys / Startup Folder

                              1
                              T1547.001

                              Event Triggered Execution

                              1
                              T1546

                              Component Object Model Hijacking

                              1
                              T1546.015

                              Privilege Escalation

                              Boot or Logon Autostart Execution

                              1
                              T1547

                              Registry Run Keys / Startup Folder

                              1
                              T1547.001

                              Event Triggered Execution

                              1
                              T1546

                              Component Object Model Hijacking

                              1
                              T1546.015

                              Defense Evasion

                              Modify Registry

                              3
                              T1112

                              Subvert Trust Controls

                              1
                              T1553

                              Install Root Certificate

                              1
                              T1553.004

                              Credential Access

                              Credentials from Password Stores

                              1
                              T1555

                              Credentials from Web Browsers

                              1
                              T1555.003

                              Unsecured Credentials

                              1
                              T1552

                              Credentials In Files

                              1
                              T1552.001

                              Discovery

                              Peripheral Device Discovery

                              1
                              T1120

                              Query Registry

                              6
                              T1012

                              System Information Discovery

                              5
                              T1082

                              System Location Discovery

                              1
                              T1614

                              System Language Discovery

                              1
                              T1614.001

                              System Network Configuration Discovery

                              1
                              T1016

                              Internet Connection Discovery

                              1
                              T1016.001

                              System Time Discovery

                              1
                              T1124

                              Lateral Movement

                              Collection

                              Data from Local System

                              1
                              T1005

                              Command and Control

                              Exfiltration

                              Impact

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              8B2B9A00839EED1DFDCCC3BFC2F5DF12
                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                              • Size 1KB
                              • SHA256 71ccd39de69ec147afd8ad4337a36829dcababbf40897250380c7770de551242
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              B46811C17859FFB409CF0E904A4AA8F8
                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                              • Size 528B
                              • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                              • Size 471B
                              • SHA256 e3c776c80e807f607f2cdfd264da70ef6c34a1c14aeee176433bfe15b82afb5c
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              8B2B9A00839EED1DFDCCC3BFC2F5DF12
                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                              • Size 174B
                              • SHA256 4a03c9bc435477f76464f8794b690d559142975384b40f685973d3f574e994b0
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              B46811C17859FFB409CF0E904A4AA8F8
                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                              • Size 170B
                              • SHA256 365abb11b713d5a1b1ca41c082d6c4228b099543f0707c5c68c23e3cf8e54bbc
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                              • Size 416B
                              • SHA256 720b53ed53a3c0713e2c8dfd4bd3c500ac9d3e2f4053e878e05d6677ce879887
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              data_0
                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                              • Size 44KB
                              • SHA256 ecfd9992b00b7ec455564cb579bf4ea48ab45152b33e73ee8dfd04132f0dbc3d
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              131.0.5877.97.manifest
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\131.0.5877.97.manifest
                              • Size 225B
                              • SHA256 73a26892ff00aebe8c722ef27d32391f745d21a71ae1a8d991880ec7f12ef491
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              150x150Logo.scale-100.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\150x150Logo.scale-100.png
                              • Size 1KB
                              • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              150x150Logo.scale-100_contrast-white.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\150x150Logo.scale-100_contrast-white.png
                              • Size 1KB
                              • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              150x150Logo.scale-140.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\150x150Logo.scale-140.png
                              • Size 1KB
                              • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              150x150Logo.scale-140_contrast-white.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\150x150Logo.scale-140_contrast-white.png
                              • Size 1KB
                              • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              150x150Logo.scale-180.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\150x150Logo.scale-180.png
                              • Size 1KB
                              • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              150x150Logo.scale-180_contrast-white.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\150x150Logo.scale-180_contrast-white.png
                              • Size 1KB
                              • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              150x150Logo.scale-80.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\150x150Logo.scale-80.png
                              • Size 827B
                              • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              150x150Logo.scale-80_contrast-white.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\150x150Logo.scale-80_contrast-white.png
                              • Size 799B
                              • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              70x70Logo.scale-100.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\70x70Logo.scale-100.png
                              • Size 781B
                              • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              70x70Logo.scale-100_contrast-white.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\70x70Logo.scale-100_contrast-white.png
                              • Size 752B
                              • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              70x70Logo.scale-140.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\70x70Logo.scale-140.png
                              • Size 991B
                              • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              70x70Logo.scale-140_contrast-white.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\70x70Logo.scale-140_contrast-white.png
                              • Size 865B
                              • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              70x70Logo.scale-180.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\70x70Logo.scale-180.png
                              • Size 1KB
                              • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              70x70Logo.scale-180_contrast-white.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\70x70Logo.scale-180_contrast-white.png
                              • Size 1KB
                              • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              70x70Logo.scale-80.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\70x70Logo.scale-80.png
                              • Size 590B
                              • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              70x70Logo.scale-80_contrast-white.png
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\Assets\70x70Logo.scale-80_contrast-white.png
                              • Size 519B
                              • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              assistant_package
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\assistant_package
                              • Size 3.5MB
                              • SHA256 8239681a356b425d4b79be0b651d153a7da62b2118946f050624432ce09b5a52
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              d3dcompiler_47.dll
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\d3dcompiler_47.dll
                              • Size 4.5MB
                              • SHA256 8685ca359d3987eefbef629241a91811220c9cce7646039e27113a6db550c733
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              dxcompiler.dll
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\dxcompiler.dll
                              • Size 24.5MB
                              • SHA256 e58a5323aa156a44c29a141e4007b240d4fe18d6dab81ea06788c18d73778cf1
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              dxil.dll
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\dxil.dll
                              • Size 1.5MB
                              • SHA256 0e2a6111f7b7c831f2efdb7150248dc2bdf87655216e7a0aac02fc71549a9526
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              files_list
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\files_list
                              • Size 6KB
                              • SHA256 fdcaa0c61f24aa3a5bfa15c2c3b703ceb334431512208b143abd78e26654622f
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              headless_command_resources.pak
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\headless_command_resources.pak
                              • Size 2KB
                              • SHA256 19f8d4e066ff126f07cc2b0e5fa9788b5b5b9a6eb790dc8fc0a8899ca7a300f0
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              icudtl.dat
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\icudtl.dat
                              • Size 10.4MB
                              • SHA256 92cbfb1c00ee305e4d085ef609c346795a1c13bf03d48c1a9dfc80d61a1e9ebc
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              installer.exe
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\installer.exe
                              • Size 8.2MB
                              • SHA256 f88286e766147cebb30360524cea6edb5bc00144dd338fcee55b304e5b21f627
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              installer_helper_64.exe
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\installer_helper_64.exe
                              • Size 646KB
                              • SHA256 029d9fe814e1c8c05afaae29d5732dcc93a5ad8336add4f4747e9926a46a0e2c
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libEGL.dll
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\libEGL.dll
                              • Size 500KB
                              • SHA256 dd2b07edad4dfed17b8f4359537989c3e7b38a2476405b4d4ea9b695567a2acb
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              libGLESv2.dll
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\libGLESv2.dll
                              • Size 7.5MB
                              • SHA256 858d676de03907e70b0fc7af4dcd014444bf3c845711d4590ddb4b806a7a0e31
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              bg.pak
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\localization\bg.pak
                              • Size 998KB
                              • SHA256 c0d5bb937694793651194e55ac7b01e0d879ccb592e3d694500234be8c700ce0
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              bn.pak
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\localization\bn.pak
                              • Size 1.3MB
                              • SHA256 0d4cf2375a25b929a636588d61f5ba7ec542eb9aba5dea433482aa0bb5c5cc91
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              ca.pak
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\localization\ca.pak
                              • Size 627KB
                              • SHA256 8781e2ca0fac5f20afe69583c40668dd982851fea3359b23b604baec15c09c9c
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              cs.pak
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\131.0.5877.97\localization\cs.pak
                              • Size 625KB
                              • SHA256 e323d939a8f0ec3702543d0d066760dec5db4a6b2894233f90e4a8d272b4ff51
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              installer_prefs.json
                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                              • Size 1KB
                              • SHA256 f5772af5c047fc800c2da69b4e846ddf2a3a2071f491d7ed99521a108ea319b2
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              Opera Browser.lnk
                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\Opera Browser.lnk
                              • Size 1KB
                              • SHA256 bb54b2265a75d71aa6b3c87bace970cc19b5015fa6b5252d7d72435dab56b57b
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              additional_file0.tmp
                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\additional_file0.tmp
                              • Size 2.8MB
                              • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              assistant_installer.exe
                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\assistant_installer.exe
                              • Size 2.4MB
                              • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              dbgcore.DLL
                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\dbgcore.DLL
                              • Size 222KB
                              • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              dbghelp.dll
                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\assistant\dbghelp.dll
                              • Size 1.8MB
                              • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              installer_prefs_include.json
                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\installer_prefs_include.json
                              • Size 224B
                              • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              installer_prefs_include.json
                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\installer_prefs_include.json
                              • Size 239B
                              • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              installer_prefs_include.json
                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3c5e0a0e-40c2-431f-bcdc-7920ab82dc18 Opera Installer Temp\opera_package_202605241459261\installer_prefs_include.json
                              • Size 1KB
                              • SHA256 c05c3ff7612636d298d1813f07fe1de5cb5009b4dfced7d0a601e1e4fef1bdea
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              installer.exe
                              • Path C:\Users\Admin\AppData\Local\Temp\7zSC0B38698\installer.exe
                              • Size 8.2MB
                              • SHA256 a11cc12047afb9fe77e3ba3890a217625e443f7eab893c58b572880cce443da9
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              OpInst.exe
                              • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                              • Size 3.1MB
                              • SHA256 a09d4354e56ac117f9781a42bf273f08469794cd1fd5a489641e931760889275
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              bg.png
                              • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                              • Size 224KB
                              • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              favicon_opera_one.png
                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6028_1509537685\CRX_INSTALL\favicon_opera_one.png
                              • Size 2KB
                              • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              webpage_content_reporter.js
                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6028_1509537685\CRX_INSTALL\webpage_content_reporter.js
                              • Size 113KB
                              • SHA256 037a9f1fc827596e3065cb719cf21d57c744d9a44feb8afbaab9f2790205c3c6
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              messages.json
                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6240_732340429\CRX_INSTALL\_locales\es\messages.json
                              • Size 527B
                              • SHA256 1947d1ebd22ed6cc132730012b53bff0e86957c8f80fc285ba8c4e910acf22a0
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              preview.png
                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6240_732340429\CRX_INSTALL\wallpaper\preview.png
                              • Size 464KB
                              • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              Icon_Light_Neutral.png
                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7020_379541633\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                              • Size 2KB
                              • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              settings.dat
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                              • Size 40B
                              • SHA256 db9f9f8d806c19e28a447d8c316885bfef5479142f5ee4ce26611650fe8c47ec
                              • MD5 SHA1 SHA512
                              Submit Download

                              04eaa17c-7335-4dca-a909-58d4b0e1d9d9.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\04eaa17c-7335-4dca-a909-58d4b0e1d9d9.tmp
                              • Size 2B
                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                              • MD5 SHA1 SHA512
                              Submit Download

                              21c10bdb-1e8a-493f-bc1d-d42da26d69f7.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\21c10bdb-1e8a-493f-bc1d-d42da26d69f7.tmp
                              • Size 6B
                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                              • MD5 SHA1 SHA512
                              Submit Download

                              39f2b157-783b-4109-87fe-1720d3d611c9.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\39f2b157-783b-4109-87fe-1720d3d611c9.tmp
                              • Size 10KB
                              • SHA256 e1332fd4d87315d1e14e1efba40e715c146b46b82df16dbe4d2c94490cbcec2e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              Bookmarks
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                              • Size 36KB
                              • SHA256 9915fbfe6447c8dadaf6633e1e2d94f6c3ced4ad6d2418ed22013075a43dbeb3
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              BookmarksExtras
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                              • Size 239KB
                              • SHA256 588260dd99b46c2df61029b502ef35bc1f0d969a392897b9a860cdd3b3ac2808
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                              • Size 264B
                              • SHA256 4bf95b9488ccec39997915466f848d93f8b14ead535bb0a623c360d6803cbd3a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                              • Size 264B
                              • SHA256 eb3f9f168033d102c1e6d55d6fe6f7f1120be7a66113806c864b26fc8c92fe31
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                              • Size 792B
                              • SHA256 1e311066e31e29d4be676f264ead541f13ff1fd92b90d1564650964a5a7e171a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              the-real-index~RFe5a0c07.TMP
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index~RFe5a0c07.TMP
                              • Size 48B
                              • SHA256 2e71a2b9447416df0c47392d7bdbbf37d504847569a3c47852d5b096140155db
                              • MD5 SHA1 SHA512
                              Submit Download

                              data_1
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
                              • Size 264KB
                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              data_0
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
                              • Size 8KB
                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              MANIFEST-000001
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                              • Size 41B
                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                              • MD5 SHA1 SHA512
                              Submit Download

                              cos-bridge.js
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\cos-bridge.js
                              • Size 173B
                              • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              cos-content.js
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\cos-content.js
                              • Size 502B
                              • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              main.js
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.4_0\main.js
                              • Size 47KB
                              • SHA256 6aa809057957dd9c15900268b817b8ca0f87e0254086f80dbc58fa5b824819b4
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              background.js
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                              • Size 86KB
                              • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              Icon_Light_Neutral.png
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                              • Size 2KB
                              • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              popup.js.LICENSE.txt
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                              • Size 1KB
                              • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              rules.json
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                              • Size 839B
                              • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              data_2
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_2
                              • Size 8KB
                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              data_3
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_3
                              • Size 8KB
                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                              • MD5 SHA1 SHA512 SSDEEP
                              Submit Download

                              22765a02-fc3e-4c60-8f6c-a2adb4e6e762.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\22765a02-fc3e-4c60-8f6c-a2adb4e6e762.tmp
                              • Size 27KB
                              • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              24a38b48-3a1a-454a-9075-e04d85c7f76c.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\24a38b48-3a1a-454a-9075-e04d85c7f76c.tmp
                              • Size 27KB
                              • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              655104bc-0106-4efb-a9be-04343c291c4e.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\655104bc-0106-4efb-a9be-04343c291c4e.tmp
                              • Size 27KB
                              • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              7d5efd4d-68f8-4f82-8c87-158a83eed861.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\7d5efd4d-68f8-4f82-8c87-158a83eed861.tmp
                              • Size 27KB
                              • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              d0c828bc-d062-4fee-9edd-c309a20c17c4.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\d0c828bc-d062-4fee-9edd-c309a20c17c4.tmp
                              • Size 27KB
                              • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              e512ddd1-9af1-4e91-b8ed-be5c704de50a.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e512ddd1-9af1-4e91-b8ed-be5c704de50a.tmp
                              • Size 27KB
                              • SHA256 7253d2ef4fe5c071a564e8da1a9bf035b2a365d2f71fbdec15ac5d2b493c33de
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              0b91c76b-9290-4359-8590-b624acb35d9d.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\0b91c76b-9290-4359-8590-b624acb35d9d.tmp
                              • Size 2B
                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                              • MD5 SHA1 SHA512
                              Submit Download

                              Preferences
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                              • Size 15KB
                              • SHA256 16bc5bee20d59f298578fc03847e3466d786df9de28506ec9c9689b0102379b7
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              Preferences
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                              • Size 15KB
                              • SHA256 c40ad2c4192670c3935a615ec002971a47b8be16acaafd782f85f5f297084d54
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              Preferences
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                              • Size 10KB
                              • SHA256 9110985ea0031347ceb9fe06abeba59cfa2874ae00a58910dfc735eb37558e2c
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              Secure Preferences
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                              • Size 205KB
                              • SHA256 2da87acbb78b7965877227440ff7d2fc5f27b189d67c28d381e6a65e09eca3b1
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              Secure Preferences
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                              • Size 88KB
                              • SHA256 4e23cc1459a20462969f8c3912b5a68de550cdcdf965a213149de50134f03c32
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              Secure Preferences
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                              • Size 88KB
                              • SHA256 15f94635793d3096d4012a108ec3030106f178d15ce333f748eaa0b64d11eb19
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                              • Size 48B
                              • SHA256 f9172eb557eed67d1a2c991868954b102897791074af76d0b40899d3593521f0
                              • MD5 SHA1 SHA512
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                              • Size 72B
                              • SHA256 fe9857d8282886864101ab7d70611626959cd05aa7040a5a1c5072ded5a8734b
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              the-real-index
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                              • Size 288B
                              • SHA256 2f1f3247e8743caf120c44e7eba447a626ef428b213ab5268a4dba559a5e1e11
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              the-real-index~RFe5a0b8a.TMP
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a0b8a.TMP
                              • Size 72B
                              • SHA256 4e7ca6014540c117dc961a088adf304b9eefa619fe0145f1f69b783f2a250342
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              CURRENT
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\CURRENT
                              • Size 16B
                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                              • MD5 SHA1 SHA512
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Size 477B
                              • SHA256 35b587d1f11c575812a593e916d4dc6040a79c1cb58673faadc6cc14c677261e
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Size 765B
                              • SHA256 e4a1ebf84bd8ef51156bd75455762ff5625bb6eb0c1acab4c19a862c469055a9
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Size 781B
                              • SHA256 46b3213041cffe6d0366deabfe37f8ede755a06dc89fde580f1ccb7e9b61f82b
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Size 1KB
                              • SHA256 5e750428479fa0392cdec53de961f5a66e44bc1f15dee148f6e35564037f239f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Size 1KB
                              • SHA256 c7096289001dcfe7532225885f8f52f3b3f71cdb447a926f759feb1bb719928a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Size 605B
                              • SHA256 27f3b5ae8658983d78e916fbb8dcfad9ed390863d38f30f9472dea99fb9911c5
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Size 781B
                              • SHA256 4aaac6ba0994500e8c3b0886d2260973266accd5171da89e4a4486b8884d06f5
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Size 941B
                              • SHA256 2f6ce4fe40303c7c12c8a9bd85568b9aeed54a144dcf6f61837aa3160863ed35
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Size 1KB
                              • SHA256 645fd0ad8bfe7bc6179f99087f9935d14381062c3c87658ca004870e9ceec183
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw
                              • Size 1KB
                              • SHA256 1c847cdc563cfca10d136374ed3c4555081ec0ac73904a49fbb53d5f163c2448
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_48a60fe8-002f-435f-9811-71d1d0d10059.raw~RFe5a0699.TMP
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_48a60fe8-002f-435f-9811-71d1d0d10059.raw~RFe5a0699.TMP
                              • Size 381B
                              • SHA256 bdaa9d483d530a9fb924e8cfe5d1c602e40e713c865a8d39ea32dc661c371e84
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 477B
                              • SHA256 e7f12b82b1a6dcc11787e8a7e2cc48d4fa8b75cfd7680b714b024858ebc6c9be
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 957B
                              • SHA256 a951d671d57f80f5061fad30a54076e3c457b5cd0b23bd5f24a300e4fb5b1314
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 1KB
                              • SHA256 6a649f5651a8ada88a5502a8100583a06d72d1b71ed184ed6cb2b432dd9bc274
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 1KB
                              • SHA256 9fdf7a56ec970a5004b284e6a3dcb4b273f21063beac2fd915e0b4c4322ae2a8
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 11KB
                              • SHA256 7ffdcf46af6f82cffd7dac49ef95f1b0ae8beffe424a7baf823cbe087acd425a
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 605B
                              • SHA256 efcd722ab318908f8268a7bfcdda28ec2faa2a31c99d6ccb8580080821a43d36
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 733B
                              • SHA256 e5b2897f8dd4c12e0b32bb85d44a34ca57cd9fe26563b320a7379ca6216cf3af
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 909B
                              • SHA256 79b4d890474c0e56982af6a1814d687ba75821f019be22f136b10a1b5761545c
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 8KB
                              • SHA256 51794a50a1182f8c697255e545cab5ab43bfd167da95699da54d4b14c7898ce1
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 1KB
                              • SHA256 b2388b6e1422b3e62b601f5fc0f84e46687cb80486c1cce781c07048dafad700
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 2KB
                              • SHA256 e00b62d6abc6e1b51d8ff1ea12b0b9e48deff2e8a589118bf24eb5808cc2656f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 1ff6fdb62ce35d8628a6c1dceace7fa94f2adcd9e1285c3ad986f8226d9f2956
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 a38137ff87af9a4362681494faeb8051bcdf8d49f6196e29a6dc3616ce9d0bc5
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 3KB
                              • SHA256 bae3eb6208c63471867f17408781cbce526f89a51d2edc33f3b7d8b4f6c10e4e
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 8KB
                              • SHA256 3e334865c77f2e2cbf575dc5543bb130be63ee9ff3e8b58c9cc1cba2a54e615c
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 1KB
                              • SHA256 1a23bb8f0af8dac8ba3b1b8f219b8308b85fb41def664affab6e7f96747d904d
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 1KB
                              • SHA256 b2097f10f57dfb5d30c1b25e665a7807304e1827236d8cd2e8fdb5e75fdb1390
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 1KB
                              • SHA256 23515dd50c4d3a5f9ae9eb1416cf1361f6b474e92bc4ce37976888cdf079944f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 1KB
                              • SHA256 69b4625cd67a95fd9e9af3787730d1ced4c3454c54c809b3138324ee6053e51c
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 f81db7fa2807daa4fe344c17f3956541884688dba233e0ebd3f20ea476ff77c5
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 b677062867a5aa42afd236fd4437c0bd9e5e82284cc9ef165b2b1d7f686ca76b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 0d823541bbfa2ee38cceb741996bcd8cdb62e198e813d872c94f1c13c0da06a8
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 e3085ce09a3ed987ef8d156f2033f0d9ca8fb1a160c7c16dc345b3f721d4f26a
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 7154a9abd084b1b6e35c7f53fc6dd8048ce4164b574022ed44b9b1ea907c70fe
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 357d984fd58e5e50c17ef2aa7626b470fec0563aa772786429a227d7369721e1
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 4dd07e0af3a2f752c34c4a04744aca8364ade3109c4fb06e03ba803c1736e772
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 3KB
                              • SHA256 1e9ada95703fcde397685b6aa86a2c4ad1a2639ed18040cc1e4f6051a2b3bcae
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 7134c382b61d16f61292061238b4a8351580d441bfdd3c9b4acb72fcdf05c200
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 8KB
                              • SHA256 fece53154b0718bb18838c5cef9a13b6ee89377728c5d1890211d1bf3bca4dd4
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 1KB
                              • SHA256 9bfa0a367459a112702f3d4e178af462af83fc6dfb62910d885397e0ee1d8de4
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 3d827ae5cb65bc6704796444b4e9810c1e993f194ba806dc5e2062cd58e8d2fb
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 3KB
                              • SHA256 a79cee38b1cb73a702e8e895fcf4f593aae2af1424769cb89f75d4285dd086c5
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 f3442e9dd45838ba1cfb1db4aef84405495995238c7ae1d2d662e18e5483ee16
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 dd9f3e0f9eeb383e7b6ebed393af369b6cbaeee884a9a8dbdb9c5478d36991d2
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 3d6bd5a1da190f99ad38affd9df8689538db9fd851ef3ffd85f361fbe2b3596b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 3a5cdc6f0e66f323a0ba2a1dc14646b4e31c060a7b37bb77e93672b174e555d6
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 b6c00fef86079934bda95fd556e05faa1880f809fa751fbd0fd9452450c346d6
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 cf03aaa7e8b045b5797d6b86f3230421ff2ec94669352c338759017035f14631
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 3fb6b991cc8dc6c612c8d5201a145f3d72c8d505c0f7fda597b07395ab92643b
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 addef84aa91799f02de0af4bd3adf34034154eb250387db6b451416024731cff
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 0f0c7b25f5447255883222f5fb162b9e368bf3b1179c0a4ae78efff2e2e7ae83
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 11KB
                              • SHA256 c5c8e7249a98702130321ef0fa7e6b2ed606b2e202ff08d55107a42e77ab7308
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 11KB
                              • SHA256 62d630a2bf70cb2c2f609b92b87dd7cc6bfcdfb2bb4bc98057362f8a3607dcc9
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 8KB
                              • SHA256 5842f8675191111ced3a33ac9e9d8ea3df1158bf4c6497cbac456d4d0f719c23
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 2KB
                              • SHA256 39a5fcad71a9016674f2e719ae81b5e4b75271e31c50f64ea2c75ebf90b9edd7
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 11KB
                              • SHA256 6eafb1c54ff5ae967133503548eeb1daeeb2c5061d2a158ae992a4950c9764fc
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 2KB
                              • SHA256 7c9ed7fb7020d09ec3d0cab9fea9931175d951584edb000b156ed67e01c2ba97
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 2b9861d2a5a714d88ea3335cecef3ee82fc3846a26ee1945656fdbb41869f580
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 2d576759fe59e2e08a48cdbd4b97398f1d67f98ce220033189bc55f0d7a28ee7
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 2cf9b475dfee979ba720d4846e03cb263fabd7158f2127e0907f2d0689c663a3
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 7435c855fca4a8e6e49fd4d2ef3c694201b59e7021f09c909de7d9d739fefd6e
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 eb04477d06f48ad33544bb2d1ff59d295fe61cfc51e22bae6c2503534648adc4
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 caf5802185cdc64622f9eecae31a3ee00e695dc5fae982151e1b1ca655fba4ce
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 160705a8ce522ac587d2d3e44f71697b0809d98eccd02de184fce8e62111fd50
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 568f9a913cac331131b2fa58c8f561c2f301fabbfc4c3b0481b10bf732dced6a
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 10KB
                              • SHA256 9558fa7935bfd763c813ddbec6fabfa8adca53bd62bd30f72eefcd13e15229b2
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 11KB
                              • SHA256 e2218d9f4ea044edc80b1f4c74d8ffaf9f7ef2501cdaac62a7e4efd8a04f59ad
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 9KB
                              • SHA256 02a66b8172ba906222ad05ae6682762f875bd3ab330d405ea7302f47108e11df
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw
                              • Size 11KB
                              • SHA256 322c21089d9e59e9104929a6567b1f472988e8f2590fefeb7acb6b132a83b175
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              session_63284e42-9e38-4939-a00c-041b248f2488.raw~RFe5a30e5.TMP
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_63284e42-9e38-4939-a00c-041b248f2488.raw~RFe5a30e5.TMP
                              • Size 381B
                              • SHA256 f0a307e05f36b4aa700319e8c048761462e041224a221f577d3930f2320ba130
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw
                              • Size 605B
                              • SHA256 b76a46ccd11077b399b4ecd25fbbaa52e2d24d912352b7e0e8371fa44e43c8ba
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw
                              • Size 637B
                              • SHA256 637d40541ae5a1aa5d87430af72cafea5f35b9af5e5e933ce03b5957060ca2c5
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw
                              • Size 637B
                              • SHA256 6301bc30c82bf9fc115fe50e2f601e5ef356e09fa57c28c6f3ef448985cf8287
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw
                              • Size 477B
                              • SHA256 a03ee2bbfccd3353cbfa9ab133cb805c60390dbe15b124c37691f4680315c496
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw
                              • Size 669B
                              • SHA256 6f98bc5996434961ac90b765c66842e86ba586d4dc8982f4d9f41be97171d3c9
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw~RFe5a11f3.TMP
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c22e2b78-eec8-4de4-8c35-d33341ead3df.raw~RFe5a11f3.TMP
                              • Size 381B
                              • SHA256 f04599445f3f844fef3c5d2f0de8a1a82e0ebc46937e3e2df10d98a8194013ae
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              a990f7e6-d109-4526-a2f1-1c270b0ae404.tmp
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\a990f7e6-d109-4526-a2f1-1c270b0ae404.tmp
                              • Size 666KB
                              • SHA256 037033215a1b47e2f64bd02a6f6b5faf768185dcc5ea69607bae339b60b43c64
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              ssdfp6028.0.689377681
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6028.0.689377681
                              • Size 265B
                              • SHA256 e59ecebf34151a952f9845cf7ea7a7dc0446e2060af2f5248fa0dff99a188d8e
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp6028.0.689377681
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6028.0.689377681
                              • Size 1KB
                              • SHA256 fc2133756591674032e28b1c11327a2f9bc74a537fc2c23fabdda53644994b62
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp6028.0.689377681
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6028.0.689377681
                              • Size 2KB
                              • SHA256 3fa880db014154da6d43d444e435e8c8e62ef468d3c82417a039a1c0fce13e6b
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp6028.0.689377681~RFe5a0c84.TMP
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6028.0.689377681~RFe5a0c84.TMP
                              • Size 203B
                              • SHA256 437a017e728c4ff9448b54c0fe21cdf39f2533cc7088b5e7c4638f2e3fa5122a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp6240.0.1040099295
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6240.0.1040099295
                              • Size 265B
                              • SHA256 94fb1749be9a5d72260e78fd274ec558c55291c372f4b237daace71db28acbe9
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp6240.0.1040099295
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6240.0.1040099295
                              • Size 1KB
                              • SHA256 8a869949f17b2a8b3b253a17db5067944781fd4f25c55e71cd1034d147eb134b
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp6240.0.1040099295
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6240.0.1040099295
                              • Size 2KB
                              • SHA256 cc0314e29006c936ffdde3da618a6aab4b2b5a41fb8f6b77d39bdb9ee20199d2
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp6240.0.1040099295~RFe5a14d1.TMP
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6240.0.1040099295~RFe5a14d1.TMP
                              • Size 203B
                              • SHA256 296a41267f52b75190823238175c0281f33490a52c0ef56996e591f77beb594d
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 499B
                              • SHA256 c1ed926c17c0961e44817c1293d1f2b4d2d5252c91d4870f74330835ac2c6650
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 3KB
                              • SHA256 5521176ee6eef879a9626c2f6a50d788b78fad4d1195c72698d8d09ce93b0263
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 3KB
                              • SHA256 fb109d5879f29c0c6af986f2f7865f95f89a20bbebcf7836ec87dd990b871cde
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 3KB
                              • SHA256 6ed21f170a6940d40abdf0412bc1e9adcb9a15d35cf0f6f4e4980ba0350e7fbe
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 561B
                              • SHA256 3c324d1ff2d4a3f3d0f5177285aeafc51ecb1a31d9fb6c6cd93204fe016d51c6
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 1KB
                              • SHA256 8d54798c5583317265a44e91e4d1fb7538657b4eeb7f79645512a99523b95c62
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 3KB
                              • SHA256 6f006f87c211f5e0428cdbd722455707885e7ac33f01f4426b1b439ce6766f99
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 3KB
                              • SHA256 ef78d1ea7a439273150baf70e9f688dab771b875f3252b775a1ccb2561de20cb
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 3KB
                              • SHA256 7b0d02980fcca311cf5ee9782a7412137d435b8854e18d0056c537575d8c554a
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 2KB
                              • SHA256 989af6bdee0cc5e118ecad3d566a1edcf5dcee2893144a08d37c185d9b685289
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405
                              • Size 3KB
                              • SHA256 59760e8f5c01b055f841e85f1305f5d82820f5fd9aebc027b5549de67774977d
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.0.817861405~RFe5a3c8d.TMP
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.0.817861405~RFe5a3c8d.TMP
                              • Size 401B
                              • SHA256 e59c8accd45d9eaab39d7a8d3dc28c6e64f7eb496e2714c4b297881280c9e1c8
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 664B
                              • SHA256 b5ea9ac3314a715d5a45deee64e8d9d5361713b1f26f38caf7b65d6616ac516b
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 758B
                              • SHA256 c70de649902914246e7a15dd9a844d0cc24da2bb03b9be5aed736db723cd0e84
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 854B
                              • SHA256 c142bd34121b980717b117da22006e80efce9137c5fa9d099367e16f5bff5e1d
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 389B
                              • SHA256 704ecccac4441a444a211f826583371f10e8539aa55a42182c1a297e3754742c
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 1KB
                              • SHA256 12cf1b87ccab780e8bd2a97f3f58c3061fd7036539d78bc2c8640db079bdd374
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 577B
                              • SHA256 1589e2a300730766eebb6f4046b1adf4410454e9a2cc28e4369052487b679886
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 1KB
                              • SHA256 32c4d9fbf4d1cb9235afb81f1f54b752e506254c4d8626b061281e38ea0b1f8b
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 944B
                              • SHA256 0c0ef50f148cc0536b68ca5ea11a6283f39d600711b9cf83a40a130e5685d359
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 1KB
                              • SHA256 20d02b93158e061f6fddef21f771e67c531e24d34e341a2e85c3176efa94231f
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 296B
                              • SHA256 0a625e1f1b9d8538e2a84b710d5ae8c428ab571dd2b4517bd146755169bc355b
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 487B
                              • SHA256 6c536d2ab5d2510756534976d8e257b067133b075724388d2fc4b549f85c3006
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 1KB
                              • SHA256 46bad014995125f97daa3000a9ef1cff399a92147cb02c11c1f1915847e126e9
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996
                              • Size 1KB
                              • SHA256 4df437de00ab69224676eb0e3bb42dbc603870f9a10967a1d881cd73bf04f094
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              ssdfp7020.1.930200996~RFe5a3d68.TMP
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7020.1.930200996~RFe5a3d68.TMP
                              • Size 171B
                              • SHA256 23be64a0b70a90e81b23eeaf655fa3f73c76e18361b51d1b24fc4eea4c49fae2
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              Local State
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                              • Size 2KB
                              • SHA256 88e83093eed1eb38abb162718c5d0ef97bb858897036c67c4b1c31be5317e6b2
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              Local State
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                              • Size 3KB
                              • SHA256 fe8d38e8d85ac81c0e7efa35f83b7a6fcc30e7839debd9e341b6dda61d5d6f93
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              assistant_prefs.json
                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                              • Size 151B
                              • SHA256 079f1ea6b43d03b60b6cf983e3a9ccfd27037cb06106c8a4a15c908a98167b5d
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              opera-one-dark.jpg
                              • Path C:\Windows\SystemTemp\scoped_dir7020_1901699498\opera-one-dark.jpg
                              • Size 349KB
                              • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              persona.ini
                              • Path C:\Windows\SystemTemp\scoped_dir7020_1901699498\persona.ini
                              • Size 217B
                              • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              opera-one.jpg
                              • Path C:\Windows\SystemTemp\scoped_dir7020_545390954\opera-one.jpg
                              • Size 194KB
                              • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                              • MD5 SHA1 SHA512 SSDEEP TLSH
                              Submit Download

                              persona.ini
                              • Path C:\Windows\SystemTemp\scoped_dir7020_545390954\persona.ini
                              • Size 207B
                              • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                              • MD5 SHA1 SHA512 TLSH
                              Submit Download

                              memory/1224-424-0x00007FFDF8240000-0x00007FFDF8241000-memory.dmp
                              Download

                              memory/1224-429-0x00007FFDF7290000-0x00007FFDF7291000-memory.dmp
                              Download

                              memory/3176-2432-0x0000014226460000-0x0000014226BED000-memory.dmp
                              Download

                              memory/3644-3266-0x0000018F7C8B0000-0x0000018F7D03D000-memory.dmp
                              Download

                              memory/3644-3665-0x0000018F7C8B0000-0x0000018F7D03D000-memory.dmp
                              Download

                              memory/6028-1866-0x000001CEDC180000-0x000001CEDC8A6000-memory.dmp
                              Download