Overview

overview

8

Static

static

3

Tetrisweeper.exe

windows10-2004-x64

8

Tetrisweeper.exe

windows11-ltsc_2024-x64

1

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/06/2026, 01:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Tetrisweeper.exe
  • Size 638KB
  • Sample260630-cel6ract7v
  • SHA256 afca577ed126c0e6c0a677d9904f5a8cfd15013bbeed0916203d68e1287c1c0e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 19 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 8 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 45 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 52 IoCs
  • Suspicious use of SendNotifyMessage 50 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\Tetrisweeper.exe
    "C:\Users\Admin\AppData\Local\Temp\Tetrisweeper.exe"
    1⤵
      PID:972
    • C:\Program Files\VideoLAN\VLC\vlc.exe
      "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\Desktop\SendMove.wmv"
      1⤵
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      PID:5060
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4940
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffe7fddc728,0x7ffe7fddc734,0x7ffe7fddc740
        2⤵
          PID:2860
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,17961558329490239611,18438342114717340196,524288 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2196 /prefetch:3
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:4312
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,16151754801341733509,14233079882319064495,262144 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1972 /prefetch:2
          2⤵
            PID:3920
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,14826855975002448185,12976987855420841149,524288 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2432 /prefetch:8
            2⤵
              PID:5004
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,6406562839719913315,8559683101623032304,2097152 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3232 /prefetch:1
              2⤵
                PID:4340
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,91018670869528310,15839154539362261243,2097152 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3280 /prefetch:1
                2⤵
                  PID:2776
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4456,i,5100279573560023445,14253990038293034806,2097152 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4472 /prefetch:2
                  2⤵
                    PID:2408
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4720,i,11693823837649397701,2433262033509379393,2097152 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4728 /prefetch:1
                    2⤵
                      PID:1820
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4888,i,13793732401615991411,10046418039156193071,524288 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4920 /prefetch:8
                      2⤵
                        PID:3864
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5032,i,13939880440474987650,14412617401210227189,524288 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5040 /prefetch:8
                        2⤵
                          PID:4972
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=4888,i,12148522998649554137,12683204732770604324,524288 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:8
                          2⤵
                            PID:3220
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5760,i,2978978371899071593,9252605248608884358,2097152 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:1
                            2⤵
                              PID:3816
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3264,i,7498693631286750107,482961173267790403,2097152 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3284 /prefetch:1
                              2⤵
                                PID:1852
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3452,i,15669608472413672243,14753318149143698369,2097152 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3224 /prefetch:1
                                2⤵
                                  PID:2828
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3392,i,5512210406717921746,4854360067621855827,524288 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3408 /prefetch:8
                                  2⤵
                                    PID:1536
                                  • C:\Users\Admin\Downloads\OperaSetup.exe
                                    "C:\Users\Admin\Downloads\OperaSetup.exe"
                                    2⤵
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious use of WriteProcessMemory
                                    PID:4212
                                    • C:\Users\Admin\AppData\Local\Temp\7zS470EDC09\installer.exe
                                      C:\Users\Admin\AppData\Local\Temp\7zS470EDC09\installer.exe --server-tracking-blob=MjVlMDFlNmRiOTQ4YjM3ZGFhNDMyYWU3ZDdkZmQxOGRkMTc4NTJkYjMwNzVjM2ZmNTEzOTRlN2NjZTY5ZWYxODp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYVNldHVwLmV4ZSIsInByb2R1Y3QiOiJvcGVyYSIsInF1ZXJ5IjoiL29wZXJhL3N0YWJsZS93aW5kb3dzP3V0bV9zb3VyY2U9Z29vZ2xlLWFkcyZ1dG1fbWVkaXVtPWJhX29zZSZ1dG1fY2FtcGFpZ249JTI1MjMwMiUyNTIwLSUyNTIwVUslMjUyMC0lMjUyMFNlYXJjaCUyNTIwLSUyNTIwRU4lMjUyMC0lMjUyMEJyYW5kZWQmdXRtX2NvbnRlbnQ9MTUzMjE5Njg2MzE0JnV0bV9pZD1nY2xpZEVBSWFJUW9iQ2hNSWhlbTJqdS10bFFNVnJhSlFCaDAwc2gyb0VBQVlBU0FBRWdMWWRQRF9Cd0UmaHR0cF9yZWZlcnJlcj1odHRwcyUzQSUyRiUyRnd3dy5nb29nbGUuY29tJTJGJnV0bV9zaXRlPW9wZXJhX2NvbSZ1dG1fbGFzdHBhZ2U9b3BlcmEuY29tJTJGJmRsX3Rva2VuPTYzNTE1MTA1IiwidGltZXN0YW1wIjoiMTc4Mjc4NDg1Ny45ODg0IiwidXNlcmFnZW50IjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzE0MC4wLjAuMCBTYWZhcmkvNTM3LjM2IiwidXRtIjp7ImNhbXBhaWduIjoiJTIzMDIlMjAtJTIwVUslMjAtJTIwU2VhcmNoJTIwLSUyMEVOJTIwLSUyMEJyYW5kZWQiLCJjb250ZW50IjoiMTUzMjE5Njg2MzE0IiwiaWQiOiJnY2xpZEVBSWFJUW9iQ2hNSWhlbTJqdS10bFFNVnJhSlFCaDAwc2gyb0VBQVlBU0FBRWdMWWRQRF9Cd0UiLCJsYXN0cGFnZSI6Im9wZXJhLmNvbS8iLCJtZWRpdW0iOiJiYV9vc2UiLCJzaXRlIjoib3BlcmFfY29tIiwic291cmNlIjoiZ29vZ2xlLWFkcyJ9LCJ1dWlkIjoiZDU2ODMxNjEtNWMyOC00MzNmLThiOWQtMmQ2OGExZjQ3OGE5In0=
                                      3⤵
                                      • Downloads MZ/PE file
                                      • Executes dropped EXE
                                      • Enumerates connected drives
                                      • Modifies system certificate store
                                      • Suspicious use of SetWindowsHookEx
                                      • Suspicious use of WriteProcessMemory
                                      PID:4992
                                      • C:\Users\Admin\AppData\Local\Temp\7zS470EDC09\installer.exe
                                        C:\Users\Admin\AppData\Local\Temp\7zS470EDC09\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff7ef00ad88,0x7ff7ef00ad94,0x7ff7ef00ada0
                                        4⤵
                                        • Executes dropped EXE
                                        PID:1640
                                      • C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\installer.exe
                                        "C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\installer.exe" --version
                                        4⤵
                                        • Executes dropped EXE
                                        PID:3596
                                      • C:\Users\Admin\AppData\Local\Temp\7zS470EDC09\installer.exe
                                        "C:\Users\Admin\AppData\Local\Temp\7zS470EDC09\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4992 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_20260630030108" --session-guid=846fd491-4bfc-4404-83b8-df277ced871c --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=BC08000000000000
                                        4⤵
                                        • Executes dropped EXE
                                        • Enumerates connected drives
                                        • Enumerates system info in registry
                                        • Suspicious use of WriteProcessMemory
                                        PID:4996
                                        • C:\Users\Admin\AppData\Local\Temp\7zS470EDC09\installer.exe
                                          C:\Users\Admin\AppData\Local\Temp\7zS470EDC09\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x288,0x28c,0x29c,0x264,0x2a0,0x7ff7ef00ad88,0x7ff7ef00ad94,0x7ff7ef00ada0
                                          5⤵
                                          • Executes dropped EXE
                                          PID:468
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe" --backend --initial-pid=4992 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081" --session-guid=846fd491-4bfc-4404-83b8-df277ced871c --server-tracking-blob="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 " --desktopshortcut=1 --install-subfolder=133.0.5932.10
                                          5⤵
                                          • Executes dropped EXE
                                          • Enumerates connected drives
                                          • Enumerates system info in registry
                                          • Modifies registry class
                                          • Suspicious use of FindShellTrayWindow
                                          • Suspicious use of SendNotifyMessage
                                          • Suspicious use of SetWindowsHookEx
                                          • Suspicious use of WriteProcessMemory
                                          PID:4708
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x28c,0x290,0x294,0x268,0x298,0x7ff6d64ead88,0x7ff6d64ead94,0x7ff6d64eada0
                                            6⤵
                                            • Executes dropped EXE
                                            PID:1140
                                          • C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\assistant_installer.exe
                                            "C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                                            6⤵
                                            • Executes dropped EXE
                                            • Loads dropped DLL
                                            • Adds Run key to start application
                                            • System Location Discovery: System Language Discovery
                                            • Modifies Internet Explorer settings
                                            • Suspicious use of WriteProcessMemory
                                            PID:368
                                            • C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\assistant_installer.exe
                                              "C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7e4040,0x7e404c,0x7e4058
                                              7⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • System Location Discovery: System Language Discovery
                                              PID:4740
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                                              7⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • System Location Discovery: System Language Discovery
                                              • Enumerates system info in registry
                                              • Suspicious use of WriteProcessMemory
                                              PID:1384
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                                C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0xd24040,0xd2404c,0xd24058
                                                8⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                PID:3296
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                                                8⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                • Enumerates system info in registry
                                                • Suspicious use of WriteProcessMemory
                                                PID:3800
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                  9⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:3972
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                    C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                    10⤵
                                                    • Executes dropped EXE
                                                    PID:4136
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                  9⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Enumerates system info in registry
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:5220
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                    C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                    10⤵
                                                    • Executes dropped EXE
                                                    PID:5240
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x27c,0x280,0x284,0x250,0x288,0xdcc830,0xdcc83c,0xdcc848
                                                  9⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:5304
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                    10⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Enumerates system info in registry
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:5320
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                      11⤵
                                                      • Executes dropped EXE
                                                      PID:5340
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                    10⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:5444
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x258,0x260,0x264,0x254,0x268,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                      11⤵
                                                      • Executes dropped EXE
                                                      PID:5460
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                    10⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • Enumerates system info in registry
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:5600
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x260,0x264,0x268,0x25c,0x254,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                      11⤵
                                                      • Executes dropped EXE
                                                      PID:5656
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\de932af914ba00303d4a2778a383ac9c831101e2.crx"
                                            6⤵
                                            • Checks computer location settings
                                            • Executes dropped EXE
                                            • Loads dropped DLL
                                            • Adds Run key to start application
                                            • Drops file in Program Files directory
                                            • Checks processor information in registry
                                            • Enumerates system info in registry
                                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                            • Suspicious use of WriteProcessMemory
                                            PID:3968
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x258,0x234,0x25c,0x254,0x260,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                              7⤵
                                              • Executes dropped EXE
                                              PID:2412
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1740,i,16374462689984971265,8159550402038452077,262144 --field-trial-handle=1916,i,14008953476744445721,13637181266508358595,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,8112158130199618077,14659597678296984554,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1908 /prefetch:2
                                              7⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5848
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2168,i,2573863563181826838,7075102325069892657,524288 --field-trial-handle=1916,i,14008953476744445721,13637181266508358595,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,8112158130199618077,14659597678296984554,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2172 /prefetch:3
                                              7⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • System Time Discovery
                                              PID:5880
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2444,i,13789889234584691005,17733228158320093229,524288 --field-trial-handle=1916,i,14008953476744445721,13637181266508358595,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,8112158130199618077,14659597678296984554,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2456 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:6036
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3424,i,7213406315563841562,12394858548636083944,2097152 --field-trial-handle=1916,i,14008953476744445721,13637181266508358595,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,8112158130199618077,14659597678296984554,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3784 /prefetch:2
                                              7⤵
                                              • Checks computer location settings
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5812
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3972,i,15517907161688259203,16591502088940144321,524288 --field-trial-handle=1916,i,14008953476744445721,13637181266508358595,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,8112158130199618077,14659597678296984554,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3292 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:6072
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3984,i,18065958916888258197,15937306085229457742,2097152 --field-trial-handle=1916,i,14008953476744445721,13637181266508358595,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,8112158130199618077,14659597678296984554,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4056 /prefetch:2
                                              7⤵
                                              • Checks computer location settings
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • Enumerates system info in registry
                                              PID:6108
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3376,i,1198797766476886068,15761073214967340290,2097152 --field-trial-handle=1916,i,14008953476744445721,13637181266508358595,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,8112158130199618077,14659597678296984554,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4564 /prefetch:2
                                              7⤵
                                              • Checks computer location settings
                                              • Executes dropped EXE
                                              • Enumerates system info in registry
                                              PID:6460
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3808,i,7861967206753264974,13932564610019380326,524288 --field-trial-handle=1916,i,14008953476744445721,13637181266508358595,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,8112158130199618077,14659597678296984554,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4708 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:6536
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4840,i,1173919059545797139,7412151185063134040,524288 --field-trial-handle=1916,i,14008953476744445721,13637181266508358595,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,8112158130199618077,14659597678296984554,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4856 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • Enumerates system info in registry
                                              PID:6600
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5072,i,333046887029650744,4541774920618351245,524288 --field-trial-handle=1916,i,14008953476744445721,13637181266508358595,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,8112158130199618077,14659597678296984554,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5052 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              PID:6448
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                                            6⤵
                                            • Checks computer location settings
                                            • Executes dropped EXE
                                            • Adds Run key to start application
                                            • Drops file in Program Files directory
                                            • Checks processor information in registry
                                            • Suspicious behavior: EnumeratesProcesses
                                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                            PID:7112
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                              7⤵
                                              • Executes dropped EXE
                                              PID:6944
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1832,i,18006840243704979412,3830953432608974079,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2284 /prefetch:3
                                              7⤵
                                              • Executes dropped EXE
                                              • System Time Discovery
                                              PID:1200
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,10860112461827637038,691799331506226557,262144 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2172 /prefetch:2
                                              7⤵
                                              • Executes dropped EXE
                                              • Enumerates system info in registry
                                              PID:6504
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2528,i,6873930856117973293,11868277697945898500,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2696 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              • Enumerates system info in registry
                                              PID:5192
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3272,i,18188226249436705754,2901429284469593097,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3376 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              • Enumerates system info in registry
                                              PID:6136
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3284,i,14432363801010471936,5208059779995804122,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3396 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              PID:5428
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3296,i,9014272654129836274,15810385723623918103,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3416 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              PID:5880
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3308,i,9613537247486882398,9924965466526980545,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3436 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              • Enumerates system info in registry
                                              PID:6536
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3248,i,16784481282778386805,7001543859300097457,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3336 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              • Enumerates system info in registry
                                              PID:5836
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3320,i,7367520472624632992,8748572149207409659,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3456 /prefetch:8
                                              7⤵
                                              • Executes dropped EXE
                                              PID:5392
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3260,i,4032440437887026765,12195686598744301719,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3356 /prefetch:8
                                              7⤵
                                                PID:6172
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4112,i,16677658556522098865,265266041172011902,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4132 /prefetch:1
                                                7⤵
                                                • Checks computer location settings
                                                • Enumerates system info in registry
                                                PID:6500
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_gx_splash.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                                                7⤵
                                                • Modifies registry class
                                                PID:6004
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4688,i,18322563995172311918,10231100579748534478,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4700 /prefetch:2
                                                7⤵
                                                • Checks computer location settings
                                                PID:5212
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4860,i,10778629124159055061,3573676775260932156,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4876 /prefetch:1
                                                7⤵
                                                • Checks computer location settings
                                                PID:5372
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5156,i,13990915377674694525,5436655238510033984,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5160 /prefetch:1
                                                7⤵
                                                • Checks computer location settings
                                                PID:5972
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5288,i,9363047195322534542,7566523675727134611,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5312 /prefetch:1
                                                7⤵
                                                • Checks computer location settings
                                                • Enumerates system info in registry
                                                PID:6028
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6376,i,14516008143493387017,590088558976133751,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6300 /prefetch:2
                                                7⤵
                                                • Checks computer location settings
                                                • Enumerates system info in registry
                                                PID:6476
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6472,i,15124997746895470101,17017858519765580676,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=2132 /prefetch:2
                                                7⤵
                                                • Checks computer location settings
                                                • Enumerates system info in registry
                                                PID:7216
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6844,i,11654839155472085020,2861126849790825979,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6848 /prefetch:2
                                                7⤵
                                                • Checks computer location settings
                                                PID:7232
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5148,i,13336289928504067108,15303019248686164540,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6436 /prefetch:8
                                                7⤵
                                                  PID:7892
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5180,i,1233463717238953422,14394600182921704613,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7136 /prefetch:8
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:7904
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6240,i,13711623314569767587,17804826989101248989,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7252 /prefetch:8
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:7916
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7040,i,4061647000289431970,632205249859092457,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7300 /prefetch:8
                                                  7⤵
                                                  • Enumerates system info in registry
                                                  PID:7924
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7272,i,8011911268592980204,12664422493137604230,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7320 /prefetch:8
                                                  7⤵
                                                    PID:7932
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7288,i,18210684186326992424,16485345924066983653,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7340 /prefetch:8
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:7940
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7580,i,13688365505905342343,4819033279833592916,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7800 /prefetch:8
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:7964
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7928,i,12845107784675668023,8504813657009946845,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7956 /prefetch:8
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:8108
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7964,i,14432910975235398682,3754158568271095348,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7984 /prefetch:8
                                                    7⤵
                                                    • Enumerates system info in registry
                                                    PID:8116
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8016,i,9151424360557581070,15287158328447458603,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8232 /prefetch:8
                                                    7⤵
                                                      PID:6120
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8356,i,9872252705634714984,8182756477305934522,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8368 /prefetch:8
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:7060
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8376,i,1798924263828904437,11079417953791288480,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8524 /prefetch:8
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:6040
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8612,i,18126157386721874409,10992057271438565713,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8636 /prefetch:8
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:5360
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8648,i,10280968224528732602,7494331409772874297,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8780 /prefetch:8
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:5956
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8968,i,10089469496006738997,10214600396374771397,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8980 /prefetch:8
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:564
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8964,i,4862244619308424355,5408480736414091553,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9132 /prefetch:8
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:6488
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9292,i,12446557874387009891,11157721414927769859,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9260 /prefetch:2
                                                      7⤵
                                                      • Checks computer location settings
                                                      • Enumerates system info in registry
                                                      PID:7320
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9452,i,6571642239376049922,18428001035459727378,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9476 /prefetch:8
                                                      7⤵
                                                        PID:5924
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9480,i,8984535008173018417,17912227545297570718,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9632 /prefetch:1
                                                        7⤵
                                                        • Checks computer location settings
                                                        • Enumerates system info in registry
                                                        PID:2776
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4076,i,18366483726674870138,930172735566400663,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=4540 /prefetch:8
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:8448
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9768,i,18316677137830690838,2283361419409641740,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9772 /prefetch:8
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:8548
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10328,i,11898085410325566599,12179935866367128601,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10336 /prefetch:8
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:8876
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10472,i,8744007925871978873,2609367136059874362,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10484 /prefetch:8
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:8972
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:7828
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff6d0908860,0x7ff6d090886c,0x7ff6d0908878
                                                          8⤵
                                                            PID:7772
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9060,i,14209530082179920144,14234002004457340673,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8968 /prefetch:1
                                                          7⤵
                                                          • Checks computer location settings
                                                          • Enumerates system info in registry
                                                          PID:8036
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe" --fix-taskbar-pins
                                                          7⤵
                                                            PID:8144
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe
                                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff6d64ead88,0x7ff6d64ead94,0x7ff6d64eada0
                                                              8⤵
                                                                PID:5560
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9184,i,10109715100003155159,2730649437607790316,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=9120 /prefetch:8
                                                              7⤵
                                                                PID:6208
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8452,i,10422004890344725116,11104589250834171884,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=9228 /prefetch:8
                                                                7⤵
                                                                  PID:6524
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9532,i,12097948699431231281,11824585465950424377,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=9540 /prefetch:8
                                                                  7⤵
                                                                    PID:8572
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9472,i,11526089928446971598,10920377013223929274,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10400 /prefetch:8
                                                                    7⤵
                                                                      PID:8684
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8860,i,1024502348213876201,8274275151774950830,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=9556 /prefetch:8
                                                                      7⤵
                                                                      • Enumerates system info in registry
                                                                      PID:5876
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=3336,i,12656325092037322306,13188779896426532430,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=8184 /prefetch:2
                                                                      7⤵
                                                                      • Checks computer location settings
                                                                      PID:7932
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6292,i,2641486647492004995,4726650501319480391,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9564 /prefetch:8
                                                                      7⤵
                                                                        PID:2196
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8488,i,14731038255825368150,2289512522841798114,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=6352 /prefetch:8
                                                                        7⤵
                                                                          PID:6912
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8688,i,9361955231602216420,5373241949387795771,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9800 /prefetch:8
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:4620
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8296,i,16092791298481736715,4927269629025386987,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8732 /prefetch:8
                                                                          7⤵
                                                                          • Enumerates system info in registry
                                                                          PID:9112
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=8600,i,17465111665618891955,4385799790074650955,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=4012 /prefetch:2
                                                                          7⤵
                                                                          • Checks computer location settings
                                                                          • Enumerates system info in registry
                                                                          PID:7696
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3984,i,14826695314872756837,13313152526598509478,524288 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8976 /prefetch:8
                                                                          7⤵
                                                                            PID:7868
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10484,i,10502677249255956991,15012288120349132446,2097152 --field-trial-handle=2176,i,1736936757893495793,1217972335667342493,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,9529532506896085734,6806094232050769636,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=9120 /prefetch:2
                                                                            7⤵
                                                                            • Checks computer location settings
                                                                            PID:7936
                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:3244
                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\assistant_installer.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\assistant_installer.exe" --version
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • System Location Discovery: System Language Discovery
                                                                      • Suspicious use of WriteProcessMemory
                                                                      PID:4604
                                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\assistant_installer.exe
                                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7e4040,0x7e404c,0x7e4058
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • System Location Discovery: System Language Discovery
                                                                        PID:1328
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3260,i,365815043439015545,6648740311696080958,524288 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3336 /prefetch:8
                                                                  2⤵
                                                                    PID:4872
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3396,i,15138188598760471046,15005666959186264979,524288 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4880 /prefetch:8
                                                                    2⤵
                                                                      PID:3524
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6236,i,9874431615059921511,4335011593348458647,524288 --field-trial-handle=2100,i,17404371409227676653,9794784402972780926,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6148 /prefetch:8
                                                                      2⤵
                                                                        PID:4148
                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                      1⤵
                                                                        PID:3704
                                                                      • C:\Windows\system32\svchost.exe
                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                        1⤵
                                                                          PID:2088
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                          1⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • System Location Discovery: System Language Discovery
                                                                          • Enumerates system info in registry
                                                                          • Suspicious use of WriteProcessMemory
                                                                          PID:5572
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:5648
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x74,0x70,0x78,0x214,0x80,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              PID:5860
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • Enumerates system info in registry
                                                                            PID:6420
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              PID:6568
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0xdcc830,0xdcc83c,0xdcc848
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            • Loads dropped DLL
                                                                            • System Location Discovery: System Language Discovery
                                                                            PID:7064
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              PID:5636
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                                                4⤵
                                                                                • Executes dropped EXE
                                                                                PID:5912
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • Enumerates system info in registry
                                                                              PID:6620
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                                                4⤵
                                                                                • Executes dropped EXE
                                                                                PID:6424
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                              3⤵
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              PID:6940
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                                                4⤵
                                                                                • Executes dropped EXE
                                                                                PID:5868
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                          1⤵
                                                                          • Executes dropped EXE
                                                                          • Loads dropped DLL
                                                                          • Enumerates system info in registry
                                                                          PID:6148
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffe4cc86f20,0x7ffe4cc86f30,0x7ffe4cc86f40
                                                                            2⤵
                                                                            • Executes dropped EXE
                                                                            PID:6664
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                          1⤵
                                                                          • Enumerates system info in registry
                                                                          PID:8840
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.10 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff6d0908860,0x7ff6d090886c,0x7ff6d0908878
                                                                            2⤵
                                                                              PID:8860

                                                                          Network

                                                                                MITRE ATT&CK Enterprise v16

                                                                                Reconnaissance

                                                                                Resource Development

                                                                                Initial Access

                                                                                Execution

                                                                                Persistence

                                                                                Boot or Logon Autostart Execution

                                                                                1
                                                                                T1547

                                                                                Registry Run Keys / Startup Folder

                                                                                1
                                                                                T1547.001

                                                                                Event Triggered Execution

                                                                                1
                                                                                T1546

                                                                                Component Object Model Hijacking

                                                                                1
                                                                                T1546.015

                                                                                Privilege Escalation

                                                                                Boot or Logon Autostart Execution

                                                                                1
                                                                                T1547

                                                                                Registry Run Keys / Startup Folder

                                                                                1
                                                                                T1547.001

                                                                                Event Triggered Execution

                                                                                1
                                                                                T1546

                                                                                Component Object Model Hijacking

                                                                                1
                                                                                T1546.015

                                                                                Defense Evasion

                                                                                Modify Registry

                                                                                3
                                                                                T1112

                                                                                Subvert Trust Controls

                                                                                1
                                                                                T1553

                                                                                Install Root Certificate

                                                                                1
                                                                                T1553.004

                                                                                Credential Access

                                                                                Credentials from Password Stores

                                                                                1
                                                                                T1555

                                                                                Credentials from Web Browsers

                                                                                1
                                                                                T1555.003

                                                                                Unsecured Credentials

                                                                                1
                                                                                T1552

                                                                                Credentials In Files

                                                                                1
                                                                                T1552.001

                                                                                Discovery

                                                                                Browser Information Discovery

                                                                                1
                                                                                T1217

                                                                                Peripheral Device Discovery

                                                                                1
                                                                                T1120

                                                                                Query Registry

                                                                                6
                                                                                T1012

                                                                                System Information Discovery

                                                                                5
                                                                                T1082

                                                                                System Location Discovery

                                                                                1
                                                                                T1614

                                                                                System Language Discovery

                                                                                1
                                                                                T1614.001

                                                                                System Time Discovery

                                                                                1
                                                                                T1124

                                                                                Lateral Movement

                                                                                Collection

                                                                                Data from Local System

                                                                                1
                                                                                T1005

                                                                                Command and Control

                                                                                Exfiltration

                                                                                Impact

                                                                                Replay Monitor

                                                                                Loading Replay Monitor...

                                                                                Downloads

                                                                                BookmarkMergedSurfaceOrdering
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                • Size 6B
                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                • MD5 SHA1 SHA512
                                                                                Submit Download

                                                                                BrowsingTopicsState
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                • Size 414B
                                                                                • SHA256 4005c1e1a8a038409063802d7094ccd1f46ce5a743d95920be38219c0345f488
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                the-real-index
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                • Size 1KB
                                                                                • SHA256 6b7e2417aa8aeeee0891f19b768b2d85827a7783971090ee4382ac147afba7d6
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                Network Persistent State
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                • Size 11KB
                                                                                • SHA256 33d7bba147f6721120e1273b52d373e39d118c67b27b1e501814aafba7ad4f21
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                SCT Auditing Pending Reports
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                • Size 2B
                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                • MD5 SHA1 SHA512
                                                                                Submit Download

                                                                                Preferences
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                • Size 13KB
                                                                                • SHA256 a33b0fb58752fde7cad542297ca96ec4bac0fb442bcf4b268665858eae29ebbc
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Preferences
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                • Size 13KB
                                                                                • SHA256 cf2a8bdfbdabc441c7eeee3645ed79ae665080f9b256798d51f6e0e57a58fbcb
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Preferences
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                • Size 13KB
                                                                                • SHA256 fa182f09123a3c7435117e28c4794ba248f4a4b5ae55704ea9b9e940c15c150c
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Secure Preferences
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                • Size 17KB
                                                                                • SHA256 379d96542283773f422c052abe7293924621df1604b63c9a59676e1514d2db6c
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                the-real-index
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                • Size 120B
                                                                                • SHA256 32ab6487a9f7718b7e3b42aad90ce82c3872eda2547c909d5b58991d6ba409db
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                the-real-index~RFe593195.TMP
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe593195.TMP
                                                                                • Size 96B
                                                                                • SHA256 d4f38f104974958728be57066efb0c7fc4a330c247a6c30f0145215f3a80d49f
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                the-real-index
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                • Size 72B
                                                                                • SHA256 df2977e09d0028c308a3bc7ddde66423b7d9dff5e361c9e86c14ccbc28166fbd
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                Local State
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                • Size 115KB
                                                                                • SHA256 e0b42495eae0a365d620055be13a973b0fb386bc3d0f12804ec46b76db806966
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Local State
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                • Size 233KB
                                                                                • SHA256 6083da5c209f9acdc2b008324efa7bc850825f17c88945f6f98d5b339b5eecb5
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Local State
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                • Size 233KB
                                                                                • SHA256 8ab65459103f10299385bd2c5445d9a5e0e5613da4554197fb5aa361a6df9f8e
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Local State
                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                • Size 234KB
                                                                                • SHA256 69f684d0dca051f54b0fc67a6a11154589f233e9330ff2baa629e8722cdf0214
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                data_2
                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                                • Size 8KB
                                                                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                Submit Download

                                                                                data_3
                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                                • Size 8KB
                                                                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                Submit Download

                                                                                133.0.5932.10.manifest
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\133.0.5932.10.manifest
                                                                                • Size 225B
                                                                                • SHA256 2cee31085c0897643946e22e1b2d600bdf5b32a597d87dad9a2e93815bc15102
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                150x150Logo.scale-100.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-100.png
                                                                                • Size 1KB
                                                                                • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                150x150Logo.scale-100_contrast-white.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                • Size 1KB
                                                                                • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                150x150Logo.scale-140.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-140.png
                                                                                • Size 1KB
                                                                                • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                150x150Logo.scale-140_contrast-white.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                • Size 1KB
                                                                                • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                150x150Logo.scale-180.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-180.png
                                                                                • Size 1KB
                                                                                • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                150x150Logo.scale-180_contrast-white.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                • Size 1KB
                                                                                • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                150x150Logo.scale-80.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-80.png
                                                                                • Size 827B
                                                                                • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                150x150Logo.scale-80_contrast-white.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                • Size 799B
                                                                                • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                70x70Logo.scale-100.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-100.png
                                                                                • Size 781B
                                                                                • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                70x70Logo.scale-100_contrast-white.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                • Size 752B
                                                                                • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                70x70Logo.scale-140.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-140.png
                                                                                • Size 991B
                                                                                • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                70x70Logo.scale-140_contrast-white.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                • Size 865B
                                                                                • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                70x70Logo.scale-180.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-180.png
                                                                                • Size 1KB
                                                                                • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                70x70Logo.scale-180_contrast-white.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                • Size 1KB
                                                                                • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                70x70Logo.scale-80.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-80.png
                                                                                • Size 590B
                                                                                • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                70x70Logo.scale-80_contrast-white.png
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                • Size 519B
                                                                                • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                assistant_package
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\assistant_package
                                                                                • Size 3.6MB
                                                                                • SHA256 5df784a6e14387c0997175a5c4e7a12afabe36113ba87eeba7aebf3338d300ae
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                d3dcompiler_47.dll
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\d3dcompiler_47.dll
                                                                                • Size 4.5MB
                                                                                • SHA256 18dc434e0dc6527d7193b56bdb14fab6b348a4cb77d60f21aca18bdc1a9903d6
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                dxcompiler.dll
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\dxcompiler.dll
                                                                                • Size 24.4MB
                                                                                • SHA256 a954dbb5cc2ce1a7bb2084c08ada1ed6f60dd3c710ddcb5a242abbf1713d7c2e
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                dxil.dll
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\dxil.dll
                                                                                • Size 1.5MB
                                                                                • SHA256 e4ec8e1e7f5ca726f1976b17cf0f294a357086edd06b70404076364215a21e20
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                installer.exe
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.10\installer.exe
                                                                                • Size 8.3MB
                                                                                • SHA256 4a6f98e06a2335096914291ac2fb7026288e723d62f1ec03bcbd28821b165a12
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                opera.exe
                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                • Size 2.9MB
                                                                                • SHA256 0d1dfa8f6f962486e98aa081c0799e9f58ab79e0acd035300de86fcc857cf014
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Opera Browser.lnk
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\Opera Browser.lnk
                                                                                • Size 1KB
                                                                                • SHA256 337904bb1dd10815b00a5d4cdc72485ed7a265999c9b38326e410ded48a3b892
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                additional_file0.tmp
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\additional_file0.tmp
                                                                                • Size 2.8MB
                                                                                • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                assistant_installer.exe
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\assistant_installer.exe
                                                                                • Size 2.4MB
                                                                                • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                dbgcore.DLL
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\dbgcore.DLL
                                                                                • Size 222KB
                                                                                • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                dbghelp.dll
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\assistant\dbghelp.dll
                                                                                • Size 1.8MB
                                                                                • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                installer_prefs_include.json
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\installer_prefs_include.json
                                                                                • Size 771B
                                                                                • SHA256 a753ce85a901aa6c0eb198fe55f84a9391f977f6d9650cc7a347549b348dec57
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                installer_prefs_include.json
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\installer_prefs_include.json
                                                                                • Size 1KB
                                                                                • SHA256 22d31dd4ab519d79e883310f3f908aa8a0797fa583e6e426162f24ab68651508
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                installer_prefs_include.json.backup
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\269c8a5d-948a-42b9-8d02-5f3479e15a17 Opera Installer Temp\opera_package_202606300301081\installer_prefs_include.json.backup
                                                                                • Size 756B
                                                                                • SHA256 5a181d185482ac5654a4c3340a8f771cecf28f550555c9bb0137cea6de5ddce0
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                installer.exe
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\7zS470EDC09\installer.exe
                                                                                • Size 8.3MB
                                                                                • SHA256 d0849794c12edb3ecee59a4cf621f82cd009efc926615bd4c1211f04976a7562
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                c492d48a-4956-4db0-ace5-cc3072e697cf.tmp
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\c492d48a-4956-4db0-ace5-cc3072e697cf.tmp
                                                                                • Size 2.6MB
                                                                                • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                e6633a8d-2c60-402e-8203-2b338291faad.tmp
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\e6633a8d-2c60-402e-8203-2b338291faad.tmp
                                                                                • Size 14KB
                                                                                • SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                ed7478ec-dc3f-4650-97fb-8eb0dab3f116.tmp
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\ed7478ec-dc3f-4650-97fb-8eb0dab3f116.tmp
                                                                                • Size 45KB
                                                                                • SHA256 c943858b3c313af47b70a38e46a36e5f2ac9f177334384702359c186ccfd9c52
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                favicon_opera_one.png
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3968_1546473061\CRX_INSTALL\favicon_opera_one.png
                                                                                • Size 2KB
                                                                                • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3968_1546473061\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                • Size 4.2MB
                                                                                • SHA256 9527f8a88118af8921b40c59fee22654dbf169a96d6a8febd2d0bb83363b1b4a
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Icon_Light_Neutral.png
                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7112_1420374583\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                • Size 2KB
                                                                                • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                settings.dat
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                • Size 40B
                                                                                • SHA256 7125977fc95f32c517c34a47aba248dafa8d4771bcbf783de695ff47910f7ee5
                                                                                • MD5 SHA1 SHA512
                                                                                Submit Download

                                                                                027600c2-7c28-4536-91db-27905b2a5712.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\027600c2-7c28-4536-91db-27905b2a5712.tmp
                                                                                • Size 203B
                                                                                • SHA256 58b560ef07d49f3dcfe1abaf132d702612b90dda7974f2525a7e83d1dee2cdd9
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                Bookmarks
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                • Size 30KB
                                                                                • SHA256 78b138e1ab38e954a2b98bcdcbb3e6985f450887e8503864ae8929e6e42f5268
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                BookmarksExtras
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                • Size 257KB
                                                                                • SHA256 50462b6cc25b7c6f066a9a89a162b618f2eed8c622c3613ad2d3a4a2b1b8101b
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                the-real-index
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                • Size 48B
                                                                                • SHA256 35316561af5a575b6b061d913962ffa9f13046f7358bacbb7b69f154bcdb8846
                                                                                • MD5 SHA1 SHA512
                                                                                Submit Download

                                                                                the-real-index
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                • Size 264B
                                                                                • SHA256 b6c8c57b5574136250e8d16cbe0aaaa78e88643ae491bd70dd1c779157d99ee8
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                data_0
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                                                                • Size 8KB
                                                                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                Submit Download

                                                                                data_1
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
                                                                                • Size 264KB
                                                                                • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                Submit Download

                                                                                MANIFEST-000001
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                                • Size 41B
                                                                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                • MD5 SHA1 SHA512
                                                                                Submit Download

                                                                                cos-bridge.js
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                                                                • Size 173B
                                                                                • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                cos-content.js
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                                                                • Size 502B
                                                                                • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                main.js
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                                                                • Size 47KB
                                                                                • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                logo_128.png
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_128.png
                                                                                • Size 7KB
                                                                                • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                logo_16.png
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_16.png
                                                                                • Size 653B
                                                                                • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                logo_32.png
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_32.png
                                                                                • Size 1KB
                                                                                • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                logo_48.png
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_48.png
                                                                                • Size 2KB
                                                                                • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                logo_64.png
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_64.png
                                                                                • Size 2KB
                                                                                • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                service-worker-loader.js
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\service-worker-loader.js
                                                                                • Size 49B
                                                                                • SHA256 4409861989b435ae91707e5c01965f2a6b00d0822da0bcbf6e8a6d1a8df6fc2d
                                                                                • MD5 SHA1 SHA512
                                                                                Submit Download

                                                                                favicon_opera_one.png
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\favicon_opera_one.png
                                                                                • Size 2KB
                                                                                • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                reader_mode.js
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\reader_mode.js
                                                                                • Size 112KB
                                                                                • SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                spotify_frame_interceptor.js
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\spotify_frame_interceptor.js
                                                                                • Size 5KB
                                                                                • SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                background.js
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                • Size 86KB
                                                                                • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Icon_Light_Neutral.png
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                • Size 2KB
                                                                                • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                popup.js.LICENSE.txt
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                                • Size 1KB
                                                                                • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                rules.json
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                                • Size 839B
                                                                                • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                40c2f40d-74df-4151-acac-f8dac5fd39d0.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\40c2f40d-74df-4151-acac-f8dac5fd39d0.tmp
                                                                                • Size 27KB
                                                                                • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                4627e62b-2e07-46ee-9bf3-237a676602cc.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4627e62b-2e07-46ee-9bf3-237a676602cc.tmp
                                                                                • Size 27KB
                                                                                • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                b5c15676-7f47-4eab-af2e-0de559025e02.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\b5c15676-7f47-4eab-af2e-0de559025e02.tmp
                                                                                • Size 27KB
                                                                                • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                c2e0b1c9-ed73-46ed-90bf-d5682992003b.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\c2e0b1c9-ed73-46ed-90bf-d5682992003b.tmp
                                                                                • Size 27KB
                                                                                • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                c5447bbf-2b92-444a-9286-b32d5b874e4e.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\c5447bbf-2b92-444a-9286-b32d5b874e4e.tmp
                                                                                • Size 27KB
                                                                                • SHA256 39bd99139f46534251ca30ee1eafe846edde8f96356642e04b68a9f2af9799b7
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Preferences
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                • Size 15KB
                                                                                • SHA256 a4e897acefbddea6f31dd8a6dd1bc8d32879b4b4ccc389ece8609e54632662ef
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                Secure Preferences
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                • Size 88KB
                                                                                • SHA256 952ce4171d087737e499167ea63d94f452b8672ea22e5cbae74f065cb8a24e30
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                7bfcb8af-b024-47a8-be10-5f38e17f1cea.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\7bfcb8af-b024-47a8-be10-5f38e17f1cea.tmp
                                                                                • Size 72B
                                                                                • SHA256 e65d4f8c516d8d1b4cd7a0a58b0570570c726539ebcff59faca858e8de18a569
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                the-real-index
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                • Size 48B
                                                                                • SHA256 aee927b02fad482d24b0beb46a2c357638364f88de0b8d409a043aa0b1821e92
                                                                                • MD5 SHA1 SHA512
                                                                                Submit Download

                                                                                804409df-5dd6-40a3-8d50-a98836352012.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\804409df-5dd6-40a3-8d50-a98836352012.tmp
                                                                                • Size 477B
                                                                                • SHA256 673a2f39634a9c454d4bd8af2051528b13eefd12c3f36b8c285af5843224648d
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                83a53c5d-d52a-411b-83c4-a7fefe9df218.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\83a53c5d-d52a-411b-83c4-a7fefe9df218.tmp
                                                                                • Size 477B
                                                                                • SHA256 455dbebbe6448bd0ca1ff912aa636bdcfd785fb6cab2ebea4bc49106b53d8167
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 1KB
                                                                                • SHA256 4003f00f047a50a219557fb27d6c1740cf0c32fe0f6acc46710fb5290a65dc09
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 5e21cb9fa62044cf69803e5997e4baa6760dd1909ec3959e42561d1808c5ebc4
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 12KB
                                                                                • SHA256 47891b84bdd7de6a0f3c2e6e575d7f2c90be077b6b1972381811311f86ef6af2
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 12KB
                                                                                • SHA256 b730e20ea14b958f87a4ae906178a13a185e900271d8c13d6aa197e45c77268e
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 12KB
                                                                                • SHA256 1870d037bac8319d18d8faa286f24a2f41c57bf5ceb23169844c6c49ed4741e3
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 589B
                                                                                • SHA256 b6475df676bbf7348f183bcb3e1ce155c988c88ae850cdc4769bfb28a9e46b93
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 717B
                                                                                • SHA256 b9028c790e29743d917a7c7abf55eaddce821b74e35b8a3cafcca1fe2beeafe0
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 829B
                                                                                • SHA256 ba0b8da8d8b90e070b06a2731deb9e5a64e7b63cf6d2eb1e08b5b6d545afab03
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 1005B
                                                                                • SHA256 4f83500e484985cb9d069fbb13ffb3589425ceaf6605ee6dcb3a885bb68796b9
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 1KB
                                                                                • SHA256 292c1fec49fc5920fe1cbe8907235915571c3256d388bb897953647eea218356
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 1KB
                                                                                • SHA256 a9edae240cf55cd1787ad98193a99815c8ed4737c41113622fd6169153570383
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 1KB
                                                                                • SHA256 6b6de6cb59d2f27c4dc251613240c389f58f948411ee55816628ae7208d0074b
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 1KB
                                                                                • SHA256 7526205061bcf4efc8621b7c8116d07c3761c34d398a1dadb0074b5d60177c2a
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 1KB
                                                                                • SHA256 b654da2a14ff516b85a128e820d9dfeee26f1c8b0b61ce82c671d9409b2c5ac4
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 1KB
                                                                                • SHA256 27e1600fadbd8831927da375c6d100b9e37463d84c9ab3707aec0b47562386d0
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 2KB
                                                                                • SHA256 0accf5082ecd98808fdf3895cd34a5a1809d86b1020756411f30883054a161c9
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 2KB
                                                                                • SHA256 37f7027b43ed2b2ee59aff3c12cd5fdfc0a534662b2eb498ead4c16be8932436
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 2KB
                                                                                • SHA256 a952dfde76ffd20dcebd062255a51bb493258a6ce6d6320f006874f951bed75b
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 2KB
                                                                                • SHA256 5053eb30e79544d0a730eb8f0c80f2e1e5446acd0fc245f562f5a243a00f3095
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 2KB
                                                                                • SHA256 d7ee0f3ba6ba65912a2eaf3cb95ee58bb0f992e9bddb1554b7c11fc978041e41
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 2KB
                                                                                • SHA256 0d95750de1555390d088cd3206337f28e0ccde1fb1f88936b950e45b49ca2402
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 2KB
                                                                                • SHA256 ddcfe7551aebec11e8d9a65237c47f355de95b6c607822c48b7234c256dd96e3
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 2KB
                                                                                • SHA256 a0dfc4277f640fad372eec3998c8501445a65847873c5ac7531709b6166af5d7
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 3a1912cc971692ef97054545fdc00718836d7bb71ebd95a8f8b3e47b8215cc7d
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 8e3b5ca117ddd35d6ff5a3cf05212d2fb44fa59c5de7cd3c0d52392027ca2acc
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 9c17cd29de5427535a6c52fc1661ea54a40436ccc1ee5a2aeec24bf20322c4c2
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 7ed0822f83376a84004c3150bee9b524dcd1a86b4dd763e68e81225bc72bbabf
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 31216e47cbddf6babb22a776afa3362b23709b04cce561057063fe858b420e25
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 35c70b01fd96d152a12abc70365e6a3f3491f7757d5097071af99abd0dc2f394
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 76ed47dd693db22e362ff78b7ecdddeebc6c8e8a26a81e8bec8b14c31e01702d
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 ab1311c6e79a29025366c3f9721c63bd14772b24cdded0db216d9f3507fe0933
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 6caa4c9b89288aedcac186019956c13260b6769d09d3c5c2f7d34b969d1ed2dc
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 58bfac6281bf46a3b9fce20a2076d108a7e0fedbb2b8ae49403a2208d78fe37f
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 ef1f2b0694daaa748d97dffdc0f4f7e4438881381ea096734cebfdb7f37dcb2b
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 ef57dd756b7fb918c76521a81d6e7b5d7cbd8255dfdfa4361d15243bfa4062d8
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 f2d4aed6d7cb140abbe4dcec94ce3926fb2e594e1152122098c703fb26ff7cb0
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 ec0add708ef5bb8d32f03560a2c5c1eb27ebf6a9d99fa9b6ba4f56d462295871
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 aeb3c72670cb6ed658552b39c94d6de4f588bc794c6b6f69169b5887af5d8e96
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 98f076556b6cb1faa7431fb401309d21b6877d5bb35a1ad0f5b07b72c97d6d4a
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 12KB
                                                                                • SHA256 8b11ea193f2bef81cb37d69d793d9fd1160264cd01897be0c6dc11b3215c5560
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 12KB
                                                                                • SHA256 78838f6216606d2bfac8c42c1de497173138dcab4e83ea848ccb9b625e30943f
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 5a9fa3341070146216fc454532a7e16f12f73ab04d10b60e1680daf43dfca13f
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 3KB
                                                                                • SHA256 b643d12a7361f5a5f7a17c7940586af7b1372cb1c0f0b93db9254c9fb2402ea3
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 9KB
                                                                                • SHA256 6b3ed46a0d044f5fcb550d664399c8244172d5d15943c3583221c4db6fc3e807
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 1KB
                                                                                • SHA256 a787d1771c1c43a4c15efab2e3a5728f37b20cf310d0e85724c0f38bd04920fa
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 9KB
                                                                                • SHA256 6bdd06e7b3fbd3d778ca480d504e8cb655032b8b24326398e34e36cfe3dc9b2b
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 00f45e922c5e38ef53fe6b6e3beb16d57a7af4acb90793e33b49a63ce32170fd
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 7a57648654abd57a6e74fa44b1f872a629802782aeb5864ba3986f3b43d34649
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 ccd1ff2b79bbb092c058119d03d991fe4a56589445a0ce5eb65801774d306e95
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 2f97a3e8c2393b979612fad797de3a0584ec2cb6fb4251f1fbd4204547045e68
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 11KB
                                                                                • SHA256 3e892852d062ba78595de01ad8f339589c80f573d9ae42470f1e646859e6d8f6
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 12KB
                                                                                • SHA256 8c4ed0e1c92e33488af13e501ddb05dac2b3f0a56cd3aaeba6b82aa3d040d3b0
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 2KB
                                                                                • SHA256 e980d6d5e7237f02311635e43dbd5a4baa19827011f1c7563a9b7cd94adf72b9
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 9KB
                                                                                • SHA256 4b0dd066b92546b0ea520d0f8a60d854421a7b6531ecd7664e6aed5cbcefc57a
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 79613e18e654522f61e06b579abf704b0ffb2c4b1e4fd0e352e02918f0e6f698
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 1e26b336b1ea68cde0f8deacff6be6667645d0c9c6e739d771edef7e656c97aa
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 12KB
                                                                                • SHA256 77df33641465a7348429a6ad70cc755a7b985f6f068abfe975f281313eb0e929
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 9KB
                                                                                • SHA256 0287002a2ad70a97e8b54a4f58cd19f3388b0ed3fc38a9876039520fec9eb922
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 28e6549f2ff8d1b71f61eb9537f9c39a5465902a0f20d87c3e0922f7682bed35
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 4KB
                                                                                • SHA256 396c1eb99710248000501e5cc41888def024365124728faae266714c4dfac26a
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 9KB
                                                                                • SHA256 3fada7cf020bff3ac9c5150c7ce8d66496b95a1ade13ec24dc1c9cbf42eed54e
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 6b59ace9db9878d58b1005be66db6237b8bb4858ff9eaeeb5b0b0052a83b669b
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 4KB
                                                                                • SHA256 526b922973146381ae3f07dfaaca15c4fd130b373a8ddad7e275956b55fc9a3a
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 6acfa59c5686d7f219215392566814fc0a6e6912b26d0b93654b85e62df8940f
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 d1460ccc0641ddf7c893a66b77c75ba13ca18ba542ca65341ecd2f2bd21f739c
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 2b226e84528eccb2307bf04bf00d26452cfd72dd3e47c0ec81dd7d8e90b2b585
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_1b5b1f72-2c3c-4f1a-8bdb-e74fab38e54a.raw
                                                                                • Size 10KB
                                                                                • SHA256 0bb07a0bad5d50d0b580694bf154a68eef5299425a268a5716a4a4957115d284
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Size 861B
                                                                                • SHA256 931ba051f25d1343a05b72710313069282740b16ac2971b618107ad465b7f5e1
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Size 893B
                                                                                • SHA256 3e632dea5ca9d576e93295d1ac64e426ca8e5b3ffd36f160fec8b130f2174a04
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Size 1KB
                                                                                • SHA256 46b5eb810ae09be3659af780ef93f5abd2f9c39d6efb2a05c08627be335aaa86
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Size 877B
                                                                                • SHA256 ed9413ff2dd71e38955aa2e68bfffae78d6671aceadc0528d0ea0d1ac3c0ed46
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Size 701B
                                                                                • SHA256 bb8c0fdea99a6f53f8cbe713fd518ad1114555539e9256cea17eaec1160a56f8
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Size 1KB
                                                                                • SHA256 aba4bdb61b5768c8376e2c9aa6e002758b7354b33b33f9469b8ca957f1211c41
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Size 1KB
                                                                                • SHA256 f3cdeff3c8dccbdc698d45f6c8a903f685c63460634dc5841ccde4c00627a060
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Size 1KB
                                                                                • SHA256 e2ba4f6f37ee080b0eb0c2f5ce4273907873550b70776e4ff7881f6793084066
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Size 589B
                                                                                • SHA256 8d9f488ce1f37d7369242b3744c6c78c36cfeaf7152e79d65516d957de94db70
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6c9d3924-3765-470b-8e71-6c936fc00c36.raw
                                                                                • Size 1KB
                                                                                • SHA256 3f673d350833c566aa64db07ad7b1c2825154685532ef58f2fb0546caf00e030
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                CURRENT
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                                • Size 16B
                                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                • MD5 SHA1 SHA512
                                                                                Submit Download

                                                                                a8a7f54f-1562-4671-9a84-9df963d524c1.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\a8a7f54f-1562-4671-9a84-9df963d524c1.tmp
                                                                                • Size 412B
                                                                                • SHA256 468adac23cabafa621dc4521b4f4e68b63b964ae1128192bce687db437b55150
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                af62fbc9-4ef1-44a5-af40-11442c8c2b77.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\af62fbc9-4ef1-44a5-af40-11442c8c2b77.tmp
                                                                                • Size 10KB
                                                                                • SHA256 1ba771a0403f358544766be539712f12d508922162e3e0a318ca940536d5d9c9
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                ea488368-21c5-43e6-874b-319f6dbb2fe9.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ea488368-21c5-43e6-874b-319f6dbb2fe9.tmp
                                                                                • Size 608KB
                                                                                • SHA256 8a70ccef33e8ed6ab6f4ab80ead71c5b76b626cac4b3310ae2dcce521c22210c
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                feb76608-04d9-4174-acec-05d6f7e5269d.tmp
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\feb76608-04d9-4174-acec-05d6f7e5269d.tmp
                                                                                • Size 171B
                                                                                • SHA256 5c036473268d265d9aa9009532455110d5dfd5dab0c22d97ede40b6021fc535c
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp3968.0.1579113818
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3968.0.1579113818
                                                                                • Size 1KB
                                                                                • SHA256 a1572db7699bfce25ff1b1176eba63b5f319be7fedb02060aa6c352047d9fffa
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp3968.0.1579113818
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3968.0.1579113818
                                                                                • Size 265B
                                                                                • SHA256 ff42b490f1681c5d50c574636d8e7c3aeb0311656048865525d2f27094e8c66d
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp3968.0.1579113818
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3968.0.1579113818
                                                                                • Size 2KB
                                                                                • SHA256 1ef98315a83cd25312439739e3e1d2b5abe70ae33ee32e3369d059e9f19834a4
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 780B
                                                                                • SHA256 1f2692975f2565567314b5767c48be627b90d0c6d2981d35fc4fc584663967e2
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 874B
                                                                                • SHA256 60d0bc98e82d5e428ec561d7bedd213302c2cca9b791fd367b21c6f5b891d77a
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 1KB
                                                                                • SHA256 591d3aa22c329db4deed559122f92ad0f180b2fdc786c4f43627aaf8838d60fe
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 1KB
                                                                                • SHA256 86a6fbfac9252a880a90020d870b0c5f46fbc076b400b955da9d697e8dcde0af
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 1KB
                                                                                • SHA256 40bd6ebe9335a87906c1d47353960738c71f9e8c5bd2de79cf683f9e793ce208
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 2KB
                                                                                • SHA256 a45f104c8f1e2d9f31fd335ecebc8cc1e0e6bcb8469afc57848c6ac8a8a5947d
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 1KB
                                                                                • SHA256 a48fb347644d7ea695e3a2586010d9339decd677b9daf4819884f18efac72cba
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 1KB
                                                                                • SHA256 02c519617f8bfc614e3c3e8df10dfa895ae6b1e8f7429202474255a8078092e5
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 505B
                                                                                • SHA256 d34f747c2769446ad9dae52f6df57a855fcd3c39a4c1c75ed6991aed7485cd80
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 693B
                                                                                • SHA256 3c02fa301b0b39f33d150ae12e14e39a0e37265340658663278eb42f9c94802a
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 4KB
                                                                                • SHA256 ea3a202594926852eae28ca4e3cde9b0f621e08efdf156963d1c4cf3796e1d2a
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 4KB
                                                                                • SHA256 359ced14e07e993ede7ea2a50ec7033d4533d387caf88594d4b2a3e76e3e643c
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 603B
                                                                                • SHA256 26f1fc32f577e65e63d078029d8a755258b861fac575ae9adc272ca7f0f4d5b5
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 3KB
                                                                                • SHA256 8632fa70af23f35e28f4eb79e6615fe021535922cf11a0d1744875e5028b0326
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 1KB
                                                                                • SHA256 a8500de57df6d7a2ac0ce7a08a060eb199850da13b0c283e8cc6e68e5646c1c0
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 1KB
                                                                                • SHA256 e2e461582dd593c7057f20f8a4cd05085e47a67fa8a10cdc579b21f44e5196e3
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 970B
                                                                                • SHA256 679ba7fbbacc5731ec11ac832e29f6251a17e9ae85f43f63da4f408c547cb7cc
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 4KB
                                                                                • SHA256 72b3cd65f1625782bad014601fe88ba973acc3fa96c9414283b88cb364bb5e56
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 4KB
                                                                                • SHA256 00bb9b2fa4960ce54eded9af7d28071510c4e6ee5ebc829ab09aded9b82c8fda
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 4KB
                                                                                • SHA256 4322aa3f79f38ebec2432516875e81060020208f51fbf7ebb08d9a525ca02adb
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 4KB
                                                                                • SHA256 50c34d558181cef72dafa31874d109949b6fd0df3167f1fb1bec0e4b7e3eb708
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                ssdfp7112.0.1639675667
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1639675667
                                                                                • Size 4KB
                                                                                • SHA256 2c0684467205ead3bca503765b4202e893ed8eb3327192fed6c27a72711da8e2
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                ssdfp7112.1.1900662359
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.1.1900662359
                                                                                • Size 200B
                                                                                • SHA256 60cd46d4fedcf6a90c694f9ba3b14954862cdafc84bc9b430f4b6024da04bc9d
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                Local State
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                • Size 3KB
                                                                                • SHA256 f5776658df0fbe856470df7855fa8631b9d73dc6819b5d91f3e49ad25d57c1cc
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                assistant_prefs.json
                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                                • Size 151B
                                                                                • SHA256 0c2382909f4f9b7b4308b6e9135daa25c533172e81878d0b2bec8b5fed012608
                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                Submit Download

                                                                                Unconfirmed 835598.crdownload
                                                                                • Path C:\Users\Admin\Downloads\Unconfirmed 835598.crdownload
                                                                                • Size 3.1MB
                                                                                • SHA256 ca6292cfc81a194731d48026f2937e0d44e38511d9a02f5d4d5c4415a6f41073
                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                Submit Download

                                                                                memory/5060-18-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-14-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-34-0x00007FFE8EB40000-0x00007FFE8EB74000-memory.dmp
                                                                                Download

                                                                                memory/5060-26-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-25-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-20-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-19-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-36-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-1-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-2-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-16-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-17-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-15-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-33-0x00007FF7ABF30000-0x00007FF7AC028000-memory.dmp
                                                                                Download

                                                                                memory/5060-13-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-12-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-11-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-10-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-9-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-8-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-7-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-5-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-0-0x00007FFE81FBD000-0x00007FFE81FBF000-memory.dmp
                                                                                Download

                                                                                memory/5060-6-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-4-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/5060-3-0x00007FFE81D10000-0x00007FFE81FC6000-memory.dmp
                                                                                Download

                                                                                memory/6036-834-0x00007FFE9D480000-0x00007FFE9D481000-memory.dmp
                                                                                Download

                                                                                memory/6036-835-0x00007FFE9DFA0000-0x00007FFE9DFA1000-memory.dmp
                                                                                Download