Overview

overview

7

Static

static

3

internet-e...er.exe

windows10-2004-x64

7

internet-e...er.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/06/2026, 12:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    internet-explorer-9-vista-32-11.0.9600.17843-installer.exe
  • Size 2.0MB
  • Sample260629-phzbpsey9p
  • SHA256 e6d6fc8845a119cbe2a5d55b28e9906a9864b8303d21983c6a3eb35a1463085c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwarediscoveryinstallerpersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks for any installed AV software in registry 1 TTPs 9 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 10 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

    installer
  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 49 IoCs
  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\internet-explorer-9-vista-32-11.0.9600.17843-installer.exe
    "C:\Users\Admin\AppData\Local\Temp\internet-explorer-9-vista-32-11.0.9600.17843-installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:856
    • C:\Users\Admin\AppData\Local\Temp\is-XEJAZQR50T.tmp\internet-explorer-9-vista-32-11.0.9600.17843-installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-XEJAZQR50T.tmp\internet-explorer-9-vista-32-11.0.9600.17843-installer.tmp" /SL5="$6020E,847735,840192,C:\Users\Admin\AppData\Local\Temp\internet-explorer-9-vista-32-11.0.9600.17843-installer.exe"
      2⤵
      • Executes dropped EXE
      • Checks for any installed AV software in registry
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:5604
      • C:\Users\Admin\AppData\Local\Temp\is-Z8PFR8GZ2R.tmp\component0_extract\OperaSetup.exe
        "C:\Users\Admin\AppData\Local\Temp\is-Z8PFR8GZ2R.tmp\component0_extract\OperaSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdDBTmgUn7wxi44Ivj0l016NXQvMZmOe6VuPuYVDZ2D6jEAGVa4d7DrNIVLvesX6SwBL176mTl19E
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4724
        • C:\Users\Admin\AppData\Local\Temp\7zS472E4679\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS472E4679\installer.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdDBTmgUn7wxi44Ivj0l016NXQvMZmOe6VuPuYVDZ2D6jEAGVa4d7DrNIVLvesX6SwBL176mTl19E --server-tracking-blob=MjBjMWJlMDYyMGM3YzZjYmNkNTE2NjU1YWRiYWEwNzE0OWQzM2JkZjk3MjI1MWZiZDZiYjcxNTJkOWM2ZTdlODp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cyIsInRpbWVzdGFtcCI6IjE3ODI3MzA4MTIuMzI0NCIsInVzZXJhZ2VudCI6InB5dGhvbi1yZXF1ZXN0cy8yLjMyLjMiLCJ1dG0iOnt9LCJ1dWlkIjoiOGFhNGYyMWQtMDE2Yy00NmFkLWE5NzctMWNkN2NmMzQ1ZjY5In0=
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:6544
          • C:\Users\Admin\AppData\Local\Temp\7zS472E4679\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS472E4679\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff77fd7ad88,0x7ff77fd7ad94,0x7ff77fd7ada0
            5⤵
            • Executes dropped EXE
            PID:2108
          • C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\installer.exe" --version
            5⤵
            • Executes dropped EXE
            PID:1600
          • C:\Users\Admin\AppData\Local\Temp\7zS472E4679\installer.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS472E4679\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=6544 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_20260629132222" --session-guid=5eea143e-2f5f-43be-a319-920080d383f7 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0809000000000000
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Suspicious use of WriteProcessMemory
            PID:4332
            • C:\Users\Admin\AppData\Local\Temp\7zS472E4679\installer.exe
              C:\Users\Admin\AppData\Local\Temp\7zS472E4679\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff77fd7ad88,0x7ff77fd7ad94,0x7ff77fd7ada0
              6⤵
              • Executes dropped EXE
              PID:5028
            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe" --backend --initial-pid=6544 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221" --session-guid=5eea143e-2f5f-43be-a319-920080d383f7 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.10
              6⤵
              • Executes dropped EXE
              • Enumerates connected drives
              • Modifies registry class
              • Suspicious use of WriteProcessMemory
              PID:1900
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x2b4,0x2b8,0x2bc,0x290,0x2c0,0x7ff666e3ad88,0x7ff666e3ad94,0x7ff666e3ada0
                7⤵
                • Executes dropped EXE
                PID:3228
              • C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Adds Run key to start application
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Modifies Internet Explorer settings
                • Suspicious use of WriteProcessMemory
                PID:5004
                • C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\assistant_installer.exe
                  "C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xd34040,0xd3404c,0xd34058
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:7148
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:948
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x494040,0x49404c,0x494058
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    PID:6432
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Enumerates system info in registry
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    • Suspicious use of WriteProcessMemory
                    PID:5976
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4104
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x290,0x298,0x29c,0x294,0x2a0,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                        11⤵
                        • Executes dropped EXE
                        PID:4620
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:1268
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                        11⤵
                        • Executes dropped EXE
                        PID:5012
                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x2c0,0x2c4,0x2c8,0x2a0,0x2cc,0xd1c830,0xd1c83c,0xd1c848
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of WriteProcessMemory
                      PID:7032
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Suspicious use of WriteProcessMemory
                        PID:5884
                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                          12⤵
                          • Executes dropped EXE
                          PID:3256
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:2592
                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                          12⤵
                          • Executes dropped EXE
                          PID:612
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        11⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Suspicious use of WriteProcessMemory
                        PID:936
                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x24c,0x254,0x98,0x228,0xa8,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                          12⤵
                          • Executes dropped EXE
                          PID:7144
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\de932af914ba00303d4a2778a383ac9c831101e2.crx"
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Adds Run key to start application
                • Drops file in Windows directory
                • Checks processor information in registry
                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of WriteProcessMemory
                PID:3936
                • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                  8⤵
                  • Executes dropped EXE
                  PID:2252
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1920,i,8119751320526235479,5807877889808108717,524288 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2060 /prefetch:11
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Time Discovery
                  PID:6604
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,4471740424529093170,15550212339193056276,262144 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2020 /prefetch:2
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:4780
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2468,i,12748737704775306904,15282029768635824015,524288 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2656 /prefetch:13
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:108
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3416,i,209298871570371983,934189658783831358,2097152 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3448 /prefetch:9
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:3920
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3464,i,16956492393071245191,15606274078473103504,2097152 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3508 /prefetch:9
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:6552
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4256,i,2561332006159698446,9755093168347079050,2097152 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4272 /prefetch:9
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:6388
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4556,i,9748250300603305173,10209560311062589966,524288 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4628 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:4484
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4936,i,162010426873434956,5388265541462306969,524288 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4948 /prefetch:12
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  PID:2228
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4616,i,15133938495852307925,3482764138809596794,524288 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5048 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:4940
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5256,i,10132465815788336882,11507022848438111726,524288 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5252 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  PID:3696
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5452,i,15756551005436115463,2874207729215692759,2097152 --field-trial-handle=2024,i,9760841399454357960,17148140552239223367,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2032,i,3245077779059599064,7909766954162199594,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5508 /prefetch:1
                  8⤵
                  • Executes dropped EXE
                  PID:6956
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                7⤵
                • Executes dropped EXE
                • Adds Run key to start application
                • Drops file in Windows directory
                • Checks processor information in registry
                • Enumerates system info in registry
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of WriteProcessMemory
                PID:8184
                • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                  8⤵
                  • Executes dropped EXE
                  PID:5972
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1916,i,16869517106181682899,4297969911295617383,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2180 /prefetch:11
                  8⤵
                  • Executes dropped EXE
                  • System Time Discovery
                  • Enumerates system info in registry
                  PID:6352
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,17160380754937747757,16852581683890118701,262144 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2140 /prefetch:2
                  8⤵
                  • Executes dropped EXE
                  PID:5272
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2480,i,16893586164347307528,2383893356265800208,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3124 /prefetch:13
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:476
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3000,i,6333929936088901370,17536824099494362699,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3164 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  PID:1124
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2984,i,6064412397594573848,6184016164888895882,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3144 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:4040
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3024,i,16543948275842991051,7927346213128037499,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3556 /prefetch:14
                  8⤵
                  • Executes dropped EXE
                  • Enumerates system info in registry
                  PID:7280
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3012,i,17171716919738217196,16460832671113583253,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3184 /prefetch:14
                  8⤵
                    PID:1728
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3060,i,16749191327154295647,11383478436463571164,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=2860 /prefetch:14
                    8⤵
                    • Executes dropped EXE
                    • Enumerates system info in registry
                    PID:5276
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3036,i,18081996527961094032,13107663267149911872,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3596 /prefetch:14
                    8⤵
                    • Enumerates system info in registry
                    PID:3268
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3048,i,16962995539571048990,16468971963471715226,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3612 /prefetch:14
                    8⤵
                    • Enumerates system info in registry
                    PID:2156
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3120,i,3457969718345284984,936263091337719584,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3640 /prefetch:1
                    8⤵
                    • Enumerates system info in registry
                    PID:2120
                  • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_gx_splash.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                    8⤵
                    • Modifies registry class
                    • Suspicious use of AdjustPrivilegeToken
                    PID:7320
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4712,i,9772215994195862600,17949361628217310667,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4724 /prefetch:9
                    8⤵
                    • Enumerates system info in registry
                    PID:7704
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4888,i,7897868046220199751,3013475553453930462,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4892 /prefetch:1
                    8⤵
                    • Enumerates system info in registry
                    PID:7728
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5140,i,12175338420441336789,11521851733366230284,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5180 /prefetch:1
                    8⤵
                      PID:7668
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5300,i,2702046384177196629,10138927300505360720,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5320 /prefetch:1
                      8⤵
                      • Enumerates system info in registry
                      PID:7580
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6312,i,15631293028345996288,15441158005893951766,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6332 /prefetch:9
                      8⤵
                        PID:7860
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6768,i,10543226343128157744,11911447881993397792,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6864 /prefetch:9
                        8⤵
                        • Enumerates system info in registry
                        PID:7500
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6844,i,8047242843703447204,12905758211371249728,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6940 /prefetch:9
                        8⤵
                        • Enumerates system info in registry
                        PID:2320
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7292,i,4083371351577725815,15324814986993117003,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7304 /prefetch:12
                        8⤵
                          PID:616
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7404,i,11078406410409822719,5599339338015654128,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5480 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:800
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6380,i,18340372266997454585,4924750496229282855,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7444 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:6756
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6728,i,6392610575611279546,4843171651263482193,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6388 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:5412
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6544,i,15210944380779544047,18396204539131794476,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7424 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:6548
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7784,i,15825579339639963253,18079819532608022102,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7824 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:3784
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7840,i,2952537286040454953,10160944498393094972,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7828 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:6220
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8084,i,5664124432082719514,7086088019691889426,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8096 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:6276
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8228,i,5498244066810974642,10267418434470960455,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8240 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:7080
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8376,i,6571510390675224359,4042222639319749380,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8384 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:6752
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8404,i,15100312492987344526,4062368979295144780,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8392 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:7176
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8640,i,15033984109383188214,7483567708982753389,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8664 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:5952
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8672,i,7484929371401797006,99321205718233591,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8696 /prefetch:14
                          8⤵
                          • Enumerates system info in registry
                          PID:7392
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8732,i,12136874230012280910,17812405824139308667,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8940 /prefetch:14
                          8⤵
                            PID:7268
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=9088,i,11883177415211183828,12149608654531287703,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9100 /prefetch:9
                            8⤵
                            • Enumerates system info in registry
                            PID:7368
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9320,i,12504409227337427215,2012010886220469581,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9328 /prefetch:14
                            8⤵
                            • Enumerates system info in registry
                            PID:256
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=3624,i,3858117903871140758,9577870122532443982,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9496 /prefetch:1
                            8⤵
                              PID:8096
                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                              8⤵
                              • Enumerates system info in registry
                              PID:3484
                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff7c0a58860,0x7ff7c0a5886c,0x7ff7c0a58878
                                9⤵
                                  PID:8352
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10088,i,4183685507011665055,16356859574748546500,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=10116 /prefetch:14
                                8⤵
                                  PID:3568
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10104,i,16102711884487849687,13542690435436620709,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10252 /prefetch:14
                                  8⤵
                                    PID:2520
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10420,i,3352958706634201297,7615889940121765057,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10440 /prefetch:14
                                    8⤵
                                    • Enumerates system info in registry
                                    PID:8448
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10428,i,11714890430908971004,17991366699149967211,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10548 /prefetch:14
                                    8⤵
                                      PID:8504
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=10764,i,11603963780801308386,14150948427857507511,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10772 /prefetch:1
                                      8⤵
                                        PID:8712
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3584,i,6401837444753662212,10018005952194933844,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=4576 /prefetch:14
                                        8⤵
                                        • Enumerates system info in registry
                                        PID:8968
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4208,i,13840663243926863893,178842729201825702,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=4476 /prefetch:14
                                        8⤵
                                          PID:9048
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4148,i,462263876135294184,5397837025202397781,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=3008 /prefetch:14
                                          8⤵
                                            PID:9064
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3828,i,10416998193640392715,12528953782338843226,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=3864 /prefetch:14
                                            8⤵
                                              PID:4064
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=10952,i,18411013635192034983,1532379922396640132,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=5656 /prefetch:9
                                              8⤵
                                              • Enumerates system info in registry
                                              PID:3252
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4520,i,10789704365293165356,2166243541533720310,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=4332 /prefetch:14
                                              8⤵
                                                PID:4912
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4160,i,11371311973615961980,5823344410843012635,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3584 /prefetch:14
                                                8⤵
                                                • Enumerates system info in registry
                                                PID:7620
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10612,i,8733364396722549179,9249284949387744058,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10600 /prefetch:14
                                                8⤵
                                                  PID:8896
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=5644,i,12002596549840454519,10588342408923346830,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3036 /prefetch:9
                                                  8⤵
                                                  • Enumerates system info in registry
                                                  PID:2120
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9760,i,9444910588181937123,3372460784421868490,524288 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=3016 /prefetch:14
                                                  8⤵
                                                  • Enumerates system info in registry
                                                  PID:8264
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10648,i,12965886292877383980,17894396640472275069,2097152 --field-trial-handle=2144,i,14295938894857315299,12811804793183212885,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2152,i,5046919241176471299,11661009652173000268,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=7096 /prefetch:9
                                                  8⤵
                                                    PID:8944
                                            • C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                              "C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                              5⤵
                                              • Executes dropped EXE
                                              • System Location Discovery: System Language Discovery
                                              PID:3080
                                            • C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\assistant_installer.exe
                                              "C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\assistant_installer.exe" --version
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • System Location Discovery: System Language Discovery
                                              • Suspicious use of WriteProcessMemory
                                              PID:6656
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\assistant_installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xd34040,0xd3404c,0xd34058
                                                6⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                PID:2084
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                      1⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • System Location Discovery: System Language Discovery
                                      • Enumerates system info in registry
                                      • Suspicious use of FindShellTrayWindow
                                      • Suspicious use of SendNotifyMessage
                                      • Suspicious use of WriteProcessMemory
                                      PID:7084
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                        2⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Suspicious use of WriteProcessMemory
                                        PID:3004
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                                          3⤵
                                          • Executes dropped EXE
                                          PID:2920
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                        2⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Suspicious use of WriteProcessMemory
                                        PID:6300
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                                          3⤵
                                          • Executes dropped EXE
                                          PID:2288
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x2bc,0x2c0,0x2c4,0x28c,0x2c8,0xd1c830,0xd1c83c,0xd1c848
                                        2⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • System Location Discovery: System Language Discovery
                                        • Suspicious use of WriteProcessMemory
                                        PID:6848
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                          3⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • Enumerates system info in registry
                                          • Suspicious use of WriteProcessMemory
                                          PID:5396
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                                            4⤵
                                            • Executes dropped EXE
                                            PID:5828
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                          3⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • Enumerates system info in registry
                                          • Suspicious use of WriteProcessMemory
                                          PID:6076
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                                            4⤵
                                            • Executes dropped EXE
                                            PID:2052
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                          3⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • Enumerates system info in registry
                                          • Suspicious use of WriteProcessMemory
                                          PID:460
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x298,0x29c,0x2a0,0x294,0x290,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                                            4⤵
                                            • Executes dropped EXE
                                            PID:5832
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                      1⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Enumerates system info in registry
                                      • Suspicious use of WriteProcessMemory
                                      PID:6396
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffeedb16f20,0x7ffeedb16f30,0x7ffeedb16f40
                                        2⤵
                                        • Executes dropped EXE
                                        PID:3016
                                    • C:\Windows\system32\wbem\unsecapp.exe
                                      C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                      1⤵
                                        PID:2896
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                        1⤵
                                          PID:6476
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff7c0a58860,0x7ff7c0a5886c,0x7ff7c0a58878
                                            2⤵
                                              PID:8624
                                            • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                              "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                              2⤵
                                                PID:8236

                                            Network

                                                  MITRE ATT&CK Enterprise v16

                                                  Reconnaissance

                                                  Resource Development

                                                  Initial Access

                                                  Execution

                                                  Persistence

                                                  Boot or Logon Autostart Execution

                                                  1
                                                  T1547

                                                  Registry Run Keys / Startup Folder

                                                  1
                                                  T1547.001

                                                  Event Triggered Execution

                                                  1
                                                  T1546

                                                  Component Object Model Hijacking

                                                  1
                                                  T1546.015

                                                  Privilege Escalation

                                                  Boot or Logon Autostart Execution

                                                  1
                                                  T1547

                                                  Registry Run Keys / Startup Folder

                                                  1
                                                  T1547.001

                                                  Event Triggered Execution

                                                  1
                                                  T1546

                                                  Component Object Model Hijacking

                                                  1
                                                  T1546.015

                                                  Defense Evasion

                                                  Modify Registry

                                                  2
                                                  T1112

                                                  Credential Access

                                                  Credentials from Password Stores

                                                  1
                                                  T1555

                                                  Credentials from Web Browsers

                                                  1
                                                  T1555.003

                                                  Unsecured Credentials

                                                  1
                                                  T1552

                                                  Credentials In Files

                                                  1
                                                  T1552.001

                                                  Discovery

                                                  Peripheral Device Discovery

                                                  1
                                                  T1120

                                                  Query Registry

                                                  5
                                                  T1012

                                                  Software Discovery

                                                  1
                                                  T1518

                                                  Security Software Discovery

                                                  1
                                                  T1518.001

                                                  System Information Discovery

                                                  4
                                                  T1082

                                                  System Location Discovery

                                                  1
                                                  T1614

                                                  System Language Discovery

                                                  1
                                                  T1614.001

                                                  System Time Discovery

                                                  1
                                                  T1124

                                                  Lateral Movement

                                                  Collection

                                                  Data from Local System

                                                  1
                                                  T1005

                                                  Command and Control

                                                  Exfiltration

                                                  Impact

                                                  Replay Monitor

                                                  Loading Replay Monitor...

                                                  Downloads

                                                  data_0
                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                  • Size 44KB
                                                  • SHA256 a3c2159559c03852070c3c253e13fc5075cd6ae97acb1658ea1771aca6d1a1a1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  data_2
                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                  • Size 8KB
                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  data_3
                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                  • Size 8KB
                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  f_000001
                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                  • Size 163KB
                                                  • SHA256 fd497a488838412508b55d5dc42d93a315689d3b73b81595f36abc26c48a75b1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  133.0.5932.10.manifest
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\133.0.5932.10.manifest
                                                  • Size 225B
                                                  • SHA256 2cee31085c0897643946e22e1b2d600bdf5b32a597d87dad9a2e93815bc15102
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-100.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-100.png
                                                  • Size 1KB
                                                  • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-100_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-100_contrast-white.png
                                                  • Size 1KB
                                                  • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-140.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-140.png
                                                  • Size 1KB
                                                  • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-140_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-140_contrast-white.png
                                                  • Size 1KB
                                                  • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-180.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-180.png
                                                  • Size 1KB
                                                  • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-180_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-180_contrast-white.png
                                                  • Size 1KB
                                                  • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-80.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-80.png
                                                  • Size 827B
                                                  • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  150x150Logo.scale-80_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-80_contrast-white.png
                                                  • Size 799B
                                                  • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-100.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-100.png
                                                  • Size 781B
                                                  • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-100_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-100_contrast-white.png
                                                  • Size 752B
                                                  • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-140.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-140.png
                                                  • Size 991B
                                                  • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-140_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-140_contrast-white.png
                                                  • Size 865B
                                                  • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-180.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-180.png
                                                  • Size 1KB
                                                  • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-180_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-180_contrast-white.png
                                                  • Size 1KB
                                                  • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-80.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-80.png
                                                  • Size 590B
                                                  • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  70x70Logo.scale-80_contrast-white.png
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-80_contrast-white.png
                                                  • Size 519B
                                                  • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  assistant_package
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\assistant_package
                                                  • Size 3.6MB
                                                  • SHA256 5df784a6e14387c0997175a5c4e7a12afabe36113ba87eeba7aebf3338d300ae
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  d3dcompiler_47.dll
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\d3dcompiler_47.dll
                                                  • Size 4.5MB
                                                  • SHA256 18dc434e0dc6527d7193b56bdb14fab6b348a4cb77d60f21aca18bdc1a9903d6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  dxcompiler.dll
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\dxcompiler.dll
                                                  • Size 24.4MB
                                                  • SHA256 a954dbb5cc2ce1a7bb2084c08ada1ed6f60dd3c710ddcb5a242abbf1713d7c2e
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  dxil.dll
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\dxil.dll
                                                  • Size 1.5MB
                                                  • SHA256 e4ec8e1e7f5ca726f1976b17cf0f294a357086edd06b70404076364215a21e20
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  files_list
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\files_list
                                                  • Size 6KB
                                                  • SHA256 8af7ed51d6e692bd3425358e8052fbf55f20edb55f07910eb8205061c5428d8c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  headless_command_resources.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\headless_command_resources.pak
                                                  • Size 2KB
                                                  • SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  icudtl.dat
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\icudtl.dat
                                                  • Size 10.4MB
                                                  • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  installer.exe
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe
                                                  • Size 8.3MB
                                                  • SHA256 4a6f98e06a2335096914291ac2fb7026288e723d62f1ec03bcbd28821b165a12
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  installer_helper_64.exe
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer_helper_64.exe
                                                  • Size 639KB
                                                  • SHA256 508098c7eb5e42ca4ded3102e1eaf64de89314d598065075fdd97fdd552189ce
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  libEGL.dll
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\libEGL.dll
                                                  • Size 492KB
                                                  • SHA256 f2a5cef3a9edd51f9aa1307bb3b57a796450850cd752dc346a442db794154e3c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  libGLESv2.dll
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\libGLESv2.dll
                                                  • Size 7.5MB
                                                  • SHA256 bb494070187d6fc794ebbc1578c443bbbe2678b4a87d87241ecd67bfdd035676
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  bg.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\localization\bg.pak
                                                  • Size 1004KB
                                                  • SHA256 c3ddf1cf249a2ec617cc33db89e8da102f4c84a77f6498b9a8302bb7d21d31f6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  bn.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\localization\bn.pak
                                                  • Size 1.3MB
                                                  • SHA256 8bcab76945a69eb25439c192aabb7d4fc3f5aee98974e93909a4ba384382178f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  ca.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\localization\ca.pak
                                                  • Size 633KB
                                                  • SHA256 8d5762364d4ced09a20690943e2c740780ed911eb92e6cc20bbe7a92ded80284
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  cs.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\localization\cs.pak
                                                  • Size 632KB
                                                  • SHA256 142a486dd991cbc9fe1210071280f3061722f9cecd6acfd2805a230c9cc2a926
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  da.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\localization\da.pak
                                                  • Size 583KB
                                                  • SHA256 9041999cff60105ef33e7d10b36f88306375b008d22f981120fa0f7adb09bc16
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  de.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\localization\de.pak
                                                  • Size 630KB
                                                  • SHA256 e45877f81117b29d3062f083a9d697522518eccf40962afd89aa0fd95a5d3536
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  el.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\localization\el.pak
                                                  • Size 1.1MB
                                                  • SHA256 9519ed0a0ede2372c38d509e7626e68e41b60b219c9d3cdf271ec01114c576d1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  en-GB.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\localization\en-GB.pak
                                                  • Size 511KB
                                                  • SHA256 8a516c4e5a01472db0bd05a4a6e3e1ce3964390148a3509041fa283989d80ff2
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  en-US.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\localization\en-US.pak
                                                  • Size 515KB
                                                  • SHA256 4cd0cfc3fc8cd6031d1b2a9cc54b411d501907f7f3f8b561327e125e1fa77ea8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  es-419.pak
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\localization\es-419.pak
                                                  • Size 621KB
                                                  • SHA256 3d91070752fb4024717a3a4e138e43f49bc107823dc9132da1c59a2547da8ed2
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  installer_prefs.json
                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                  • Size 1KB
                                                  • SHA256 cd314a16e10930da215d58ea87362fac2445405f97734a551f5950cab04a3c4a
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  Opera Browser.lnk
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\Opera Browser.lnk
                                                  • Size 1KB
                                                  • SHA256 6cca15ede5a51dc1f4715fa5550d5042e6399092cb14796ee50ac829eb05558e
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  additional_file0.tmp
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\additional_file0.tmp
                                                  • Size 2.8MB
                                                  • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  assistant_installer.exe
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\assistant_installer.exe
                                                  • Size 2.4MB
                                                  • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  dbgcore.DLL
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\dbgcore.DLL
                                                  • Size 222KB
                                                  • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  dbghelp.dll
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\assistant\dbghelp.dll
                                                  • Size 1.8MB
                                                  • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  installer_prefs_include.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\installer_prefs_include.json
                                                  • Size 243B
                                                  • SHA256 b700fc51bcae66a2e3976fb66c5efd987b74172733c9d248912f19cbe1c79e21
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  installer_prefs_include.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\installer_prefs_include.json
                                                  • Size 258B
                                                  • SHA256 5ff430cd80cc1c10383b8f6ba823c64f4b875089fdc79adec4ec24f60638414d
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  installer_prefs_include.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\0e691198-4b09-43eb-a0cd-b1b97f8dbc80 Opera Installer Temp\opera_package_202606291322221\installer_prefs_include.json
                                                  • Size 1KB
                                                  • SHA256 5fd234a43ccfe05c4f4d249e498e3f57ee4c574f9f1c6b414109b3f45112c558
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  1fdfafe6-5109-480a-9895-1144eae68700.tmp
                                                  • Path C:\Users\Admin\AppData\Local\Temp\1fdfafe6-5109-480a-9895-1144eae68700.tmp
                                                  • Size 14KB
                                                  • SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  installer.exe
                                                  • Path C:\Users\Admin\AppData\Local\Temp\7zS472E4679\installer.exe
                                                  • Size 8.3MB
                                                  • SHA256 d0849794c12edb3ecee59a4cf621f82cd009efc926615bd4c1211f04976a7562
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  internet-explorer-9-vista-32-11.0.9600.17843-installer.tmp
                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-XEJAZQR50T.tmp\internet-explorer-9-vista-32-11.0.9600.17843-installer.tmp
                                                  • Size 4.1MB
                                                  • SHA256 ad44ccbfc69fda66fef3c812fe4aab5eafaf8bd654f8b707081c30233677544a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  100.png
                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-Z8PFR8GZ2R.tmp\100.png
                                                  • Size 51KB
                                                  • SHA256 3f63f320e919830fb21fff8dbd82509ecc8330c89513163daedb1b7687a0a529
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  101.png
                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-Z8PFR8GZ2R.tmp\101.png
                                                  • Size 42KB
                                                  • SHA256 2ddd50ca3bb30387c309b0a627cc14f2820352679caa1d59f0dd35aed9540453
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  component0.zip
                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-Z8PFR8GZ2R.tmp\component0.zip
                                                  • Size 3.1MB
                                                  • SHA256 5e4d1041fb23031c2ff40fa93a5b3d8663dba407defe5ba4ff328cbd284fb56a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  OperaSetup.exe
                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-Z8PFR8GZ2R.tmp\component0_extract\OperaSetup.exe
                                                  • Size 3.1MB
                                                  • SHA256 5eacbca5ef8dc39478f2a1f357e83f4bbd6cd408c7726740431eb1bccc756c0c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  component1.zip
                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-Z8PFR8GZ2R.tmp\component1.zip
                                                  • Size 782KB
                                                  • SHA256 4a59596213b8e401401fad6249213596400943f72f98d8810c48538374137f52
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  image.jpg
                                                  • Path C:\Users\Admin\AppData\Local\Temp\is-Z8PFR8GZ2R.tmp\image.jpg
                                                  • Size 18KB
                                                  • SHA256 b875c33967c43e26bfd1e2b734cd2010eb4ab66346714508d3199d7dc9f965c8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  favicon_opera_one.png
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3936_1164893835\CRX_INSTALL\favicon_opera_one.png
                                                  • Size 2KB
                                                  • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  reader_mode.js
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3936_1164893835\CRX_INSTALL\reader_mode.js
                                                  • Size 112KB
                                                  • SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  spotify_frame_interceptor.js
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3936_1164893835\CRX_INSTALL\spotify_frame_interceptor.js
                                                  • Size 5KB
                                                  • SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  manifest.json
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir8184_586405503\CRX_INSTALL\manifest.json
                                                  • Size 1KB
                                                  • SHA256 8fb5674e49dc503b27e5959880938cd58ac16b8b1b96cb5e5274dcd88c9ea31f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  Icon_Light_Neutral.png
                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir8184_866696025\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                  • Size 2KB
                                                  • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  17d27194e80f2aaa.customDestinations-ms
                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\17d27194e80f2aaa.customDestinations-ms
                                                  • Size 25KB
                                                  • SHA256 13a18d6fa247357acacdb43c6dad247cec176c871de10b34b78fcbec3ff6af1a
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  17d27194e80f2aaa.customDestinations-ms
                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\17d27194e80f2aaa.customDestinations-ms
                                                  • Size 25KB
                                                  • SHA256 e13f5140772c553489544be0213d2252f68df0409bd48d35ffa9d5092f5009c3
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  17d27194e80f2aaa.customDestinations-ms
                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\17d27194e80f2aaa.customDestinations-ms
                                                  • Size 25KB
                                                  • SHA256 cda07aff57cf567ca65ef2c2bceaf8c9c15178c8a4149b65578f1ac57a060761
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  17d27194e80f2aaa.customDestinations-ms
                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\17d27194e80f2aaa.customDestinations-ms
                                                  • Size 25KB
                                                  • SHA256 1e4769251460a2adad719d8778b361eae92756048d881c0e810754527e4e45e1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  17d27194e80f2aaa.customDestinations-ms
                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\17d27194e80f2aaa.customDestinations-ms
                                                  • Size 25KB
                                                  • SHA256 4dd9037ba14779d79223e6136afe0ad7dd2b0f3a0d2369d56eb59c87c46e59cd
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  17d27194e80f2aaa.customDestinations-ms
                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\17d27194e80f2aaa.customDestinations-ms
                                                  • Size 25KB
                                                  • SHA256 1444e5a097430891f42df262e612bb87b661a9f4385f7a16b3179dfc74e9bf1f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  17d27194e80f2aaa.customDestinations-ms
                                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\17d27194e80f2aaa.customDestinations-ms
                                                  • Size 25KB
                                                  • SHA256 e818b4e785b3c0a93b73f3bdac217badfe2fa94e3d08c9442bf516db9d86d039
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  settings.dat
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                  • Size 40B
                                                  • SHA256 7eabdf61efa048e4c15a0ca56daeb07833271b47a883337ad7306bac66600953
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  29340e6b-037a-4eec-8c3d-75e75c816aab.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\29340e6b-037a-4eec-8c3d-75e75c816aab.tmp
                                                  • Size 203B
                                                  • SHA256 2ec15c1cc3ba733321898937284fec008a01764a40f1db8aab4e68806a23a5b3
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  2958d049-6a29-4909-891f-73489ece7624.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\2958d049-6a29-4909-891f-73489ece7624.tmp
                                                  • Size 6B
                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  510a729f-b4e5-4735-88ef-bd2d1a0aebf6.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\510a729f-b4e5-4735-88ef-bd2d1a0aebf6.tmp
                                                  • Size 171B
                                                  • SHA256 9bdd60bdbf2e363366a39f60d087c7a1cce9deb74efb47c0d71d9b05d5a64083
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  522b4e96-4814-4f32-9b55-f2d81589b94a.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\522b4e96-4814-4f32-9b55-f2d81589b94a.tmp
                                                  • Size 15KB
                                                  • SHA256 bbb263e30a7c9bbceea2634442af41a0ff9b47eeff41d255354b12ae74950630
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  6962ab74-f637-479f-adf8-5f6424141a4b.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\6962ab74-f637-479f-adf8-5f6424141a4b.tmp
                                                  • Size 357B
                                                  • SHA256 0483e6b89375b0b3f3e5c375e7170ba8d984ac9714482411ecd59dcbf609cc3c
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  Bookmarks
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                  • Size 30KB
                                                  • SHA256 0b009cdadaa3ebc31add1401f0483654802265450894ccd08abf624688bf6c69
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  BookmarksExtras
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                  • Size 257KB
                                                  • SHA256 50462b6cc25b7c6f066a9a89a162b618f2eed8c622c3613ad2d3a4a2b1b8101b
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  9d2a4b66-4b64-44a8-9aab-176f5155fe66.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\9d2a4b66-4b64-44a8-9aab-176f5155fe66.tmp
                                                  • Size 48B
                                                  • SHA256 4e02deca9f9aa48c30224ada5999c2b5fac791e134dc3e1619e86adea63e2044
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                  • Size 264B
                                                  • SHA256 39ff1384dcb3932561bbf4ec44332653814de49519d95c9d72784b77b1f59644
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                  • Size 744B
                                                  • SHA256 35e24193625d7e3afe3f639bf714aedc2a48c3760b0f26514ffbd3a3c43871e8
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  MANIFEST-000001
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                  • Size 41B
                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  cos-bridge.js
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                                  • Size 173B
                                                  • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  cos-content.js
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                                  • Size 502B
                                                  • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  main.js
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                                  • Size 47KB
                                                  • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  manifest.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_1\manifest.json
                                                  • Size 1KB
                                                  • SHA256 028acb85f69bedc88c9f9ce97bf0c31615f83032d90de1b7017614a389648b71
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  background.js
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                  • Size 86KB
                                                  • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Icon_Light_Neutral.png
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                  • Size 2KB
                                                  • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  popup.js.LICENSE.txt
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                  • Size 1KB
                                                  • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  rules.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                  • Size 839B
                                                  • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  1802b8ae-e21f-488d-8673-841e1114d995.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\1802b8ae-e21f-488d-8673-841e1114d995.tmp
                                                  • Size 27KB
                                                  • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  43567104-923c-490c-a46a-abb5a1c9c2b7.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\43567104-923c-490c-a46a-abb5a1c9c2b7.tmp
                                                  • Size 27KB
                                                  • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  6d3c7d63-f17d-43f3-a49b-b79be57854a9.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\6d3c7d63-f17d-43f3-a49b-b79be57854a9.tmp
                                                  • Size 27KB
                                                  • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  90307f18-84c2-46ab-8f47-410b840ec6b9.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\90307f18-84c2-46ab-8f47-410b840ec6b9.tmp
                                                  • Size 27KB
                                                  • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  b0a3f20e-fca9-4e8b-8831-e0b3485f9068.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\b0a3f20e-fca9-4e8b-8831-e0b3485f9068.tmp
                                                  • Size 27KB
                                                  • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  e1299c8f-6658-4508-9dad-60ffed36df75.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e1299c8f-6658-4508-9dad-60ffed36df75.tmp
                                                  • Size 27KB
                                                  • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  1013d698-8dbd-4596-be4f-d39222609a3f.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\1013d698-8dbd-4596-be4f-d39222609a3f.tmp
                                                  • Size 2B
                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                  • Size 15KB
                                                  • SHA256 871cdebb1417879a5d63dcbf5f5f9fc79d68b76b5e355c46b9ce79c95d6298bc
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                  • Size 15KB
                                                  • SHA256 138c8012d79343bc4d8379cc292cfd38c9c37a5fb63f6e194d546e01f97ba2b2
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Secure Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                  • Size 112KB
                                                  • SHA256 7f42889f415a4dd09b57c0043bd7694e39500fa5696a9120013698a7649488e4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  Secure Preferences
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                  • Size 87KB
                                                  • SHA256 59d51f642bb5210c1f11654fdf9a7a29d7278a78bf2e140a489f9a35189e2d09
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  70cb36ee-eab1-49a2-abf2-5ba502f07b7e.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\70cb36ee-eab1-49a2-abf2-5ba502f07b7e.tmp
                                                  • Size 72B
                                                  • SHA256 3f2e970ecfe1c8e382cd6ed5c2cba1e7ed2513adc7c3430f30fff5b82775ca9c
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                  • Size 48B
                                                  • SHA256 e6876d59f8111b681e4a445d904a3221c1720553dd62bdec700952ec89b238c5
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  the-real-index
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                  • Size 288B
                                                  • SHA256 29a806b461acd02820bd2daafd45dbf0c49367dce475ffaa73abb6330f67c0fc
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  2c7482df-62c6-4d4b-8524-e253c0c833c0.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\2c7482df-62c6-4d4b-8524-e253c0c833c0.tmp
                                                  • Size 445B
                                                  • SHA256 781096e65a5ce15706c6803f1880a85726101f7041ba1c49db261fd040ebcca6
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  37246728-10eb-4172-87aa-bb82cd1f14f7.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\37246728-10eb-4172-87aa-bb82cd1f14f7.tmp
                                                  • Size 445B
                                                  • SHA256 fecb841c97593fb623f4efc61150c409167b62420bc0cc9437b4279d75e7584d
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  b3a35fec-98a1-4215-88ea-63072d747438.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\b3a35fec-98a1-4215-88ea-63072d747438.tmp
                                                  • Size 557B
                                                  • SHA256 d59ca89e60f740421e90921d4204b8e710901aceb750af23d2fe68e7501cb4e1
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Size 861B
                                                  • SHA256 88d0b1e53420b5e7c514520e8a45d272396e296a37ac770048dd23204bb3f34f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Size 1KB
                                                  • SHA256 ccf9870450cc8269a984ec24adc1250a5c191f94aea060361563cec7f68619e4
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Size 1KB
                                                  • SHA256 c4bb75c79ee6fc3121449bdc43068c6fd8e22aede16d7e38908a541aa8a9b58b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Size 829B
                                                  • SHA256 fc038c5b7d1d5c13db0ec47232a5d1e5c1edc7a816b8a873229772c09ddff897
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Size 861B
                                                  • SHA256 a2b18a7c2a2c724537cab357403d4748785f186b620c2ed0d2f86763f0196f11
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Size 1KB
                                                  • SHA256 7ea20b9c80572fc855b65caea81ce9b487d47ffb841e3c2ea223cb33680202f9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Size 669B
                                                  • SHA256 d7d3f5bb77e2d9b7f7c1f8e950a3390a97275b3511bb795bd7c75339f5a5eded
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Size 1021B
                                                  • SHA256 aaeced6ecb58f84c1287e1f9379e8e186f828bda33d6812bc8a70045d1930a12
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_134c6dbc-20ea-4d9d-8007-3584d3131b96.raw
                                                  • Size 1KB
                                                  • SHA256 a87a9e02b9ff4fe89e60ec2e2b7bd76d2107e8350cc7bc21e5666b0c2d5389d2
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 1KB
                                                  • SHA256 e97c6024bd840faa41609908bb2e14fdd2b25764ec707133dcbbae672aff984b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 8KB
                                                  • SHA256 23c9db3e21a89d9207db9582cd4796df4096f5be65ad11c14d1a5c79307ff257
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 8KB
                                                  • SHA256 e6e1753e539a6562155217a57c8b8cf697f52e2959833e7deddbc9b0f6e8a1c4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 eec8f6b0ba0faef2adacab8e5789e5e4d68419b8ec0b1024cdfb0812dbf749ab
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 11KB
                                                  • SHA256 7957c503763cdd298dfb54dddb733f5b8dfbc10cc6caae2d6b0e0662e674e70d
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 1KB
                                                  • SHA256 71731b522d973c53e5534a1698e1feb24409639c315f11748888d1deba8d68f5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 1KB
                                                  • SHA256 fae47e2ef5efbe98b644cc9588d1ce50b150e9ba7fcd6747f9e560d069dc5229
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 1KB
                                                  • SHA256 59817bdb9be085f2cc2c0d3f1597b41cfc30afdd06082f45de3552fc409cd5f8
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 1KB
                                                  • SHA256 394b496e2788025acc03567ac240a4e7f97c16cdb60f211e00ad5addcc798e45
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 1KB
                                                  • SHA256 4f138745d4ea1d62a98e4b02a7b964edc3649e4d738280e2ada2e43cf7db2e64
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 6KB
                                                  • SHA256 9088870f07dc2c636c686457e9475c1bad09ac9978a3444f492d2a7373f55e82
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 7KB
                                                  • SHA256 465efbc7734d105d9cfc361dfbd49b3191e92941af45f54f406779a002a1b59c
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 7KB
                                                  • SHA256 181261309ea58f3756fb8b209e49c78007472fc197bdad4959514b6e95f292ab
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 8KB
                                                  • SHA256 bc2bb198afcf4091a51357cc084ba6a784809a4ffb7fe3c8f4a22a3afa378b95
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 8KB
                                                  • SHA256 0cef9498d1e4ea7817a3f97c976a4e7b45dbd7acb9bcb273ef026181dce4c6ff
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 8KB
                                                  • SHA256 c00ef1bc373622eb206cca6e57ab3fa405bf38dc40a12070e6f20a16189aca99
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 8KB
                                                  • SHA256 47b4be0c14229961ec98f028a52e332c5d639aa71a8fc485ae601887d4f9aa58
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 1b2d8777c2293c2bd90cd823357d92bc9f9ec0649fa50522b24c78a285cf9651
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 f8c4c13be40a0c6a44be248bcbcf5d36f308ffc07b8393a656467f3b6354490b
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 bf818e0d50b53d860f9c0c1f91e0236b0dfc1cf296c1872130140db3352d5718
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 308b2ba6cd816849a71a580f7398f0a44560ccd4277a059f91826d5fd618f8e7
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 bb55236e83957b182a68a8abfdf7e40054ee12c10f3f8b3dccb22fea96dd4f78
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 26c26868087e00b76de8da4505473077422c4ef0f8a9d8bb1c637534e82199f5
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 e827a0ed0f084115a5024cc1f6acdcd0990be33f355025ce5978d2923819fca0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 d792eb092db01017df732a143f1d0b8f0a00f86149e8c4fbf056983bee38a445
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 8ee978df6b731489dd1392981d1cdfef4b0730dc97261e523490ba6eb43d20b0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 37d2aebc13b949d74c4b98ce436f00c918273a598ebc28bca21cb5c7bc7b1ce2
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 b42946be684085b29c503741d87a3c5b0cce79836497347b6ba07892a7aecaee
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 d04932a54a1aafe7a189d4027e19831b58f44506be1f5408bd5fe08f0be4628b
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 e3d8115706584630e398f41e6cfd6577f4b265ab6b5b20a0b0a13f3b162e2270
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 797B
                                                  • SHA256 1299b05bdcd0f666d1f23da0df17170ad53699da08003b02a715e3c302890d76
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 1KB
                                                  • SHA256 9579494e169d8d3d7cf64b08851a4777e09830c040dd0818ef5c94b98d79ab3e
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 1KB
                                                  • SHA256 7e977ccf9923aa959b1b43ad3ee84a520e68fd7052af5da991e0f399c766c727
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 8KB
                                                  • SHA256 9e8e08ad4a7f4fe57eeea9fd1096a3f82049cf1121388c78383f84e0e0228b81
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 1KB
                                                  • SHA256 b03892144a11ebd6749d3c11c7b59cfb19361ef5bce350df84d7bb590be6dada
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 a10e3a4843227a9dc11c6516a084ec384fe548391eba16422245411d9d71cee7
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 17c4cd7eaea8266fb7d783cfdce5d5822213b953756204404d641a71ebe1dcb6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 b1627d6030a0555a71b7fbdd668b6c405cf56ea0e717b43d559671cd2fcc0ec5
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 68d81daa43bfa9139ecc6bbd9598a61775d0406a14fa95377f730e60105d92e0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 e277bd93fd88eaabfedb84e1cc86ae29cfc947578d20484f3109316ecf399fa6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 680b0d33d9d98817e7ae42ff561f2d23eda7d5eae306ccf9b1184e4db5e4fce6
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 5bd2bd295851e2adb207247272dab2a9248952e8beef361178b83e8f9777a1f8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 685B
                                                  • SHA256 975956a2c09856d977b805d89c18f34af1f8db45c67d7639eda7f339e194b92e
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 1021B
                                                  • SHA256 edac0ef322a8d9b8b7d0dd29ecf5ff91f4d3f6950f37b85429a46d41185bce7e
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 8KB
                                                  • SHA256 6531a07772f99a4848b4c78de37ea924b335607b1f7994faab8b61acf9434aab
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 8KB
                                                  • SHA256 31405640ccbd5d88992a92bf903a555d247b5d45613b6a1bfdef0b0e4543bda8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 4ab4e89ed74ca6098b28955248b3c48e5c3c81a0f5509298b537823a5f0819cd
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 1857d2cd0db8be73e7b89e899d5b1ea0998bc62fbc7fa21b302b68f31371ba6b
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 40ed2ca7d64ec6073c38afa61e56861d95729e0d369628da41b9f5bd459d3ca2
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 9595525f436a433f7b268f00ba48544be9aea224926b444570fe6aa88bd4a7e1
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 11KB
                                                  • SHA256 f26471d3f89211c077281e142f60dce51faeed7abd6850bd5206e7836cdf00b0
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 973B
                                                  • SHA256 cda69f4a318f6673ba1f17aa63a503b2cb2aaeb1529d09cf63b4089363dd45e5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 1bc2a2fb6ff2da22e11d4bed93969d73c050d2555a6744b60a2194a64cb6c056
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 56001b71c9637c01e5bef969da6e827b4c72970b82d5f214eacad89c47b8d6c8
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 fcff42641481d5df28334886c6d201d1dada937fec544df69fbfe689338ab863
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 557B
                                                  • SHA256 d7540a245e7200d7b05c27293017f1c8842c0c6b0653b6591ba8e5b531cdcc8d
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 11KB
                                                  • SHA256 d99b0eaf5f3213b116fbff0a14daaa199d92ca6b9c59f65f22b38dda7ff26e44
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 9KB
                                                  • SHA256 c00eacc9bae237766d3254bf0e8d7abd2f54653b08f565c8f8d6176e39a14ef4
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ad3e8d51-baaa-436e-98cf-62a5cf7ec045.raw
                                                  • Size 10KB
                                                  • SHA256 3a7ea6e19bfae9f1a19bf736943c3f38a1063b1e18bed9d591434fe6ac91c51d
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  CURRENT
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                  • Size 16B
                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                  • MD5 SHA1 SHA512
                                                  Submit Download

                                                  e6dedc7b-d6a6-4847-a5c7-843e382c0a8a.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\e6dedc7b-d6a6-4847-a5c7-843e382c0a8a.tmp
                                                  • Size 609KB
                                                  • SHA256 97e51e7666dd8ff01d64d71f925089c1d9d806eef64612e2e06bc6831c706991
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  fa392b95-2dc3-481d-b6c9-6b22fe3b0c91.tmp
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\fa392b95-2dc3-481d-b6c9-6b22fe3b0c91.tmp
                                                  • Size 10KB
                                                  • SHA256 ee46187e9f9f15d77f9c5616b8b752afe925474d81b52087e7cbdb08a6fc28e2
                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                  Submit Download

                                                  ssdfp3936.0.158225525
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3936.0.158225525
                                                  • Size 1KB
                                                  • SHA256 a217eae0182abfa5877791adf8690835e83b5235cdaddf77722675bafea891a5
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp3936.0.158225525
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3936.0.158225525
                                                  • Size 2KB
                                                  • SHA256 fadbd5540cfad61b74f703da227fa7d198b81977c28e04b504ee02b8d17aa203
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp3936.0.158225525
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3936.0.158225525
                                                  • Size 265B
                                                  • SHA256 9b90d99775cbec0f500f9d50885142d8d3d7c7f6f9123de9684f5268585013f8
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 455B
                                                  • SHA256 db669f6a21f3033d178579e52a9e9364a4eb0d99345319910019d47c00daf9c0
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 1KB
                                                  • SHA256 753ca5c55f8ddd082c17d0d2209652702ad140bf1b73d2a257271668f9f8cc53
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 2KB
                                                  • SHA256 be5d6dcde56594eed9f2955112353bfb0a9edc4185812d3369b6eb7223eada2c
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 2KB
                                                  • SHA256 b36da9fcb69a823fe66b8e88674d1fa75134cb276fde34a74b50d2ba4595ee13
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 2KB
                                                  • SHA256 83da7658230f912652f2da029d6d4ad44d66c189fbc1dc81f68e21603964037d
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 2KB
                                                  • SHA256 9f66cac24c1406505462fd642c17ac1f19aa7fbd139cac2e118bcf1531ff8548
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 3KB
                                                  • SHA256 1349d2dc5a3356fcfce44c509d760fbab44d1135839003afa7460e619efe4e8f
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 3KB
                                                  • SHA256 b562491ea3c8b0fbb33c629abfe753ac2ad04f61eb69107a22b90f2340321e7c
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 3KB
                                                  • SHA256 f1baff7bb13be8180e418a100ebbf1972b31fa710b3b115d659889aa6d8b5106
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 2KB
                                                  • SHA256 50350e002a399d2c18a9f07a3ea5f4cc67814f3fdbb2eaf6876d2318be6ff3de
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.0.389245200
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.0.389245200
                                                  • Size 517B
                                                  • SHA256 f15d4e3df4d1338bc68e5f80b647f616a21a570ddebc7816064dcd03284bdd9e
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 1KB
                                                  • SHA256 4d0d59e6f79b3b67ae8efd70b2da183714b9c775a2ffa743c1389850fc0af197
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 325B
                                                  • SHA256 754d33718c7fa0bca9a9023f19c6afbb90f6792d35b093032950fbab0f0bfa60
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 418B
                                                  • SHA256 f5ac2df8a0bd7a46e8b36c67c79724a4f138812f6bf99569eb5f6f5c93d98c9e
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 787B
                                                  • SHA256 bb1b63f26ac541835a46d9662c95d2498c154398403f6a818becedfe62b15e0b
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 606B
                                                  • SHA256 ea6109da28864cbe7016775977d18c8cbfcdb340b6ec12f9b75d187d9a231505
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 883B
                                                  • SHA256 69b3b388a550703823fb5c3ad26efe67743f1045a8788d3f9e9371e63126dbf7
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 1KB
                                                  • SHA256 01526a3f9c52248f22c5b8f18b35356159e385b59bacd7f12de1faca7f4412a1
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 200B
                                                  • SHA256 e71dec07e36e12d59ea98ad7fdcb7e94f76a2881a0810ab0f1eae0df673171b8
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 693B
                                                  • SHA256 44390f2c7e35aca449cc925439918d4e284993be7671e769f1fa3b77ed80d68c
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 973B
                                                  • SHA256 af1d95aa91b4c450e36ec8e5297121a1f9647748c2c8fe3ff4f77c5ae857e016
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 1KB
                                                  • SHA256 12c44cae1d76ed64876e7f110e67d2a7aadb0157302cd0a7bc2c1ebe902499f2
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  ssdfp8184.1.1677680947
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8184.1.1677680947
                                                  • Size 516B
                                                  • SHA256 9f94657a1aed82c6f6c50e4ff88d2e490b3440302cb690b8047cc8c63aa80850
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  data_1
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                  • Size 264KB
                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                  • MD5 SHA1 SHA512 SSDEEP
                                                  Submit Download

                                                  Local State
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                  • Size 3KB
                                                  • SHA256 55308a171c5d60b45387df95ca52d0fad62df02cdd1c1e8a1cd3f96dde67dea9
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  assistant_prefs.json
                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                  • Size 151B
                                                  • SHA256 134d57a74bf98c5064e300d32e4c4ba2880f7435525389cbc84d0ba29d7f57f7
                                                  • MD5 SHA1 SHA512 TLSH
                                                  Submit Download

                                                  memory/108-1935-0x0000024A3E890000-0x0000024A3EC0C000-memory.dmp
                                                  Download

                                                  memory/108-612-0x00007FFF182D0000-0x00007FFF182D1000-memory.dmp
                                                  Download

                                                  memory/108-617-0x00007FFF17A80000-0x00007FFF17A81000-memory.dmp
                                                  Download

                                                  memory/256-2849-0x000001B1B2780000-0x000001B1B2AFC000-memory.dmp
                                                  Download

                                                  memory/476-2792-0x000001B34BE80000-0x000001B34C1FC000-memory.dmp
                                                  Download

                                                  memory/800-2840-0x000002309E610000-0x000002309E98C000-memory.dmp
                                                  Download

                                                  memory/856-0-0x00000000007C0000-0x000000000089C000-memory.dmp
                                                  Download

                                                  memory/856-8-0x00000000007C0000-0x000000000089C000-memory.dmp
                                                  Download

                                                  memory/1124-2793-0x0000027305640000-0x00000273059BC000-memory.dmp
                                                  Download

                                                  memory/1728-2819-0x000001FE23F80000-0x000001FE242FC000-memory.dmp
                                                  Download

                                                  memory/2156-2818-0x000002AD22030000-0x000002AD223AC000-memory.dmp
                                                  Download

                                                  memory/2520-2853-0x0000027EB3890000-0x0000027EB3C0C000-memory.dmp
                                                  Download

                                                  memory/3268-2817-0x000002C861DF0000-0x000002C86216C000-memory.dmp
                                                  Download

                                                  memory/3568-2850-0x000001CDE6DC0000-0x000001CDE713C000-memory.dmp
                                                  Download

                                                  memory/3696-1933-0x0000024D2E6B0000-0x0000024D2EA2C000-memory.dmp
                                                  Download

                                                  memory/3784-2841-0x000002F4B3340000-0x000002F4B36BC000-memory.dmp
                                                  Download

                                                  memory/4040-2794-0x0000027EBEC10000-0x0000027EBEF8C000-memory.dmp
                                                  Download

                                                  memory/4064-3273-0x000002015CAB0000-0x000002015CE2C000-memory.dmp
                                                  Download

                                                  memory/4484-1876-0x0000019FDCCE0000-0x0000019FDD05C000-memory.dmp
                                                  Download

                                                  memory/4912-3250-0x000002D72F1A0000-0x000002D72F51C000-memory.dmp
                                                  Download

                                                  memory/4940-1932-0x0000029A9EFA0000-0x0000029A9F31C000-memory.dmp
                                                  Download

                                                  memory/5276-2820-0x000001EA7A4C0000-0x000001EA7A83C000-memory.dmp
                                                  Download

                                                  memory/5412-2847-0x00000241BAA30000-0x00000241BADAC000-memory.dmp
                                                  Download

                                                  memory/5604-21-0x0000000000020000-0x0000000000456000-memory.dmp
                                                  Download

                                                  memory/5604-29-0x0000000005C90000-0x0000000005DD0000-memory.dmp
                                                  Download

                                                  memory/5604-6-0x0000000000FF0000-0x0000000000FF1000-memory.dmp
                                                  Download

                                                  memory/5604-1975-0x0000000000020000-0x0000000000456000-memory.dmp
                                                  Download

                                                  memory/5604-215-0x0000000000020000-0x0000000000456000-memory.dmp
                                                  Download

                                                  memory/5604-130-0x0000000000020000-0x0000000000456000-memory.dmp
                                                  Download

                                                  memory/5604-72-0x0000000005C90000-0x0000000005DD0000-memory.dmp
                                                  Download

                                                  memory/5604-42-0x0000000000020000-0x0000000000456000-memory.dmp
                                                  Download

                                                  memory/5604-38-0x0000000005C90000-0x0000000005DD0000-memory.dmp
                                                  Download

                                                  memory/5604-20-0x0000000005C90000-0x0000000005DD0000-memory.dmp
                                                  Download

                                                  memory/5604-37-0x0000000005C90000-0x0000000005DD0000-memory.dmp
                                                  Download

                                                  memory/5604-22-0x0000000000FF0000-0x0000000000FF1000-memory.dmp
                                                  Download

                                                  memory/5604-23-0x0000000005C90000-0x0000000005DD0000-memory.dmp
                                                  Download

                                                  memory/5604-2791-0x0000000000020000-0x0000000000456000-memory.dmp
                                                  Download

                                                  memory/5604-36-0x0000000005C90000-0x0000000005DD0000-memory.dmp
                                                  Download

                                                  memory/5604-28-0x0000000005C90000-0x0000000005DD0000-memory.dmp
                                                  Download

                                                  memory/5604-31-0x0000000000020000-0x0000000000456000-memory.dmp
                                                  Download

                                                  memory/5604-32-0x0000000005C90000-0x0000000005DD0000-memory.dmp
                                                  Download

                                                  memory/5952-2845-0x00000230C1020000-0x00000230C139C000-memory.dmp
                                                  Download

                                                  memory/6220-2842-0x000001EA3CFE0000-0x000001EA3D35C000-memory.dmp
                                                  Download

                                                  memory/6276-2843-0x000001918C460000-0x000001918C7DC000-memory.dmp
                                                  Download

                                                  memory/6548-2839-0x0000012B69920000-0x0000012B69C9C000-memory.dmp
                                                  Download

                                                  memory/6752-2848-0x0000019BF8830000-0x0000019BF8BAC000-memory.dmp
                                                  Download

                                                  memory/6756-2823-0x000002AAAE780000-0x000002AAAEAFC000-memory.dmp
                                                  Download

                                                  memory/7080-2821-0x00000250A60F0000-0x00000250A646C000-memory.dmp
                                                  Download

                                                  memory/7176-2844-0x0000022EDBFA0000-0x0000022EDC31C000-memory.dmp
                                                  Download

                                                  memory/7268-2846-0x00000251A0670000-0x00000251A09EC000-memory.dmp
                                                  Download

                                                  memory/7280-2816-0x0000021FFF730000-0x0000021FFFAAC000-memory.dmp
                                                  Download

                                                  memory/7392-2822-0x0000023DFAE00000-0x0000023DFB17C000-memory.dmp
                                                  Download

                                                  memory/7620-3328-0x000001CCBDBC0000-0x000001CCBDF3C000-memory.dmp
                                                  Download

                                                  memory/8264-3462-0x000002547A750000-0x000002547AACC000-memory.dmp
                                                  Download

                                                  memory/8448-2854-0x000002411EF10000-0x000002411F28C000-memory.dmp
                                                  Download

                                                  memory/8504-2855-0x00000253F69D0000-0x00000253F6D4C000-memory.dmp
                                                  Download

                                                  memory/8896-3379-0x00000147219A0000-0x0000014721D1C000-memory.dmp
                                                  Download

                                                  memory/8968-3232-0x0000026E24F10000-0x0000026E2528C000-memory.dmp
                                                  Download

                                                  memory/9048-3233-0x000001FFB3200000-0x000001FFB357C000-memory.dmp
                                                  Download

                                                  memory/9064-3234-0x000002199F3B0000-0x000002199F72C000-memory.dmp
                                                  Download