Overview

overview

6

Static

static

1

tmpx310lymx.exe

windows10-ltsc_2021-x64

4

tmpx310lymx.exe

windows10-2004-x64

6

tmpx310lymx.exe

windows11-21h2-x64

6

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/07/2026, 14:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    tmpx310lymx.exe
  • Size 178KB
  • Sample260702-rf4vhscy7l
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Downloads MZ/PE file 2 IoCs
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 22 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 12 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 44 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 14 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\tmpx310lymx.exe
    "C:\Users\Admin\AppData\Local\Temp\tmpx310lymx.exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:6004
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1540
      • C:\Users\Admin\AppData\Local\Temp\7zS406B4708\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS406B4708\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Enumerates connected drives
        • Executes dropped EXE
        • Enumerates system info in registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:3112
        • C:\Users\Admin\AppData\Local\Temp\7zS406B4708\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS406B4708\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x294,0x298,0x29c,0x26c,0x2a0,0x7ff69db2ad88,0x7ff69db2ad94,0x7ff69db2ada0
          4⤵
          • Executes dropped EXE
          PID:5592
        • C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:1748
        • C:\Users\Admin\AppData\Local\Temp\7zS406B4708\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS406B4708\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=3112 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_20260702150910" --session-guid=56fe9daa-62b3-4332-9fe2-c2203e7b2f84 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=7007000000000000
          4⤵
          • Enumerates connected drives
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:3824
          • C:\Users\Admin\AppData\Local\Temp\7zS406B4708\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS406B4708\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x288,0x28c,0x290,0x264,0x2a0,0x7ff69db2ad88,0x7ff69db2ad94,0x7ff69db2ada0
            5⤵
            • Executes dropped EXE
            PID:3816
          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe" --backend --initial-pid=3112 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101" --session-guid=56fe9daa-62b3-4332-9fe2-c2203e7b2f84 --server-tracking-blob=ZWNlNjdhZTBmNTdkMDdjMGIwN2Q2OGEzNjZhZDk3MzYxNTIyNzM1N2MwM2U3NjYzMzVjOTc3Mjk0MzI2M2VjMzp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzgzMDAxMzQ5LjM2MTEiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiJkMzZhYmQxNS01ZWRjLTQzMjktYjAwZS03N2U2ZWFiYWRjOTQifQ== --silent --desktopshortcut=1 --install-subfolder=133.0.5932.20
            5⤵
            • Enumerates connected drives
            • Executes dropped EXE
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:5256
            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff7eff0ad88,0x7ff7eff0ad94,0x7ff7eff0ada0
              6⤵
              • Executes dropped EXE
              PID:5528
            • C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:5492
              • C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x5d4040,0x5d404c,0x5d4058
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:2940
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:6116
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x594040,0x59404c,0x594058
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4404
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:5792
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:2888
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                      10⤵
                      • Executes dropped EXE
                      PID:5292
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:5932
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                      10⤵
                      • Executes dropped EXE
                      PID:3148
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x27c,0x280,0x284,0x250,0x288,0x13bc830,0x13bc83c,0x13bc848
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:1356
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:1752
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                        11⤵
                        • Executes dropped EXE
                        PID:4356
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:700
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x254,0x258,0x260,0x250,0x264,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                        11⤵
                        • Executes dropped EXE
                        PID:1108
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:3344
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                        11⤵
                        • Executes dropped EXE
                        PID:4244
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Program Files directory
              • Executes dropped EXE
              • Loads dropped DLL
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:4132
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x26c,0x270,0x274,0x268,0x70,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                7⤵
                • Executes dropped EXE
                PID:2108
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,12739168929348792062,14554971799263918654,262144 --field-trial-handle=1908,i,14154218371725640653,9437086601973423226,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,1786252368476872141,12723743324442334606,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1900 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4608
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2180,i,3347425796041293792,5195902202830376056,524288 --field-trial-handle=1908,i,14154218371725640653,9437086601973423226,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,1786252368476872141,12723743324442334606,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2128 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                PID:1012
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2464,i,1997787746506695675,4711671649372708506,524288 --field-trial-handle=1908,i,14154218371725640653,9437086601973423226,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,1786252368476872141,12723743324442334606,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2476 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3216
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3832,i,9802693246062498649,824603454176173419,2097152 --field-trial-handle=1908,i,14154218371725640653,9437086601973423226,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,1786252368476872141,12723743324442334606,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3892 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                PID:736
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3424,i,2439155342994599567,7129317541776635536,524288 --field-trial-handle=1908,i,14154218371725640653,9437086601973423226,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,1786252368476872141,12723743324442334606,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4064 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5804
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4116,i,6843193540656315139,4614102794832748686,2097152 --field-trial-handle=1908,i,14154218371725640653,9437086601973423226,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,1786252368476872141,12723743324442334606,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4192 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                PID:3780
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4176,i,1371126618930935579,15531216276517778687,524288 --field-trial-handle=1908,i,14154218371725640653,9437086601973423226,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,1786252368476872141,12723743324442334606,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3828 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4544
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4736,i,9430687444472561033,1213945567660664706,2097152 --field-trial-handle=1908,i,14154218371725640653,9437086601973423226,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,1786252368476872141,12723743324442334606,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4784 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6072
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4940,i,7465153004040705079,4117437919052094097,524288 --field-trial-handle=1908,i,14154218371725640653,9437086601973423226,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,1786252368476872141,12723743324442334606,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4944 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4480
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5080,i,17520089071777549412,14254504828850622214,524288 --field-trial-handle=1908,i,14154218371725640653,9437086601973423226,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1928,i,1786252368476872141,12723743324442334606,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=3420 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:2052
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\additional_file2.tmp"
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Program Files directory
              • Executes dropped EXE
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of WriteProcessMemory
              PID:6444
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                7⤵
                • Executes dropped EXE
                PID:6372
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1800,i,14621013664642514487,11120281072974565986,524288 --field-trial-handle=2124,i,18082706473081607399,13135008744793783557,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,14680207171264943810,6643426292845990983,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:3
                7⤵
                • Executes dropped EXE
                • System Time Discovery
                PID:2456
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1664,i,17494851065957579189,4962967038096172031,262144 --field-trial-handle=2124,i,18082706473081607399,13135008744793783557,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,14680207171264943810,6643426292845990983,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2120 /prefetch:2
                7⤵
                • Executes dropped EXE
                PID:6764
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2500,i,11862522973943156215,3941210054788026101,524288 --field-trial-handle=2124,i,18082706473081607399,13135008744793783557,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,14680207171264943810,6643426292845990983,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2572 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6524
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3376,i,16407944112366912125,12766349164305841608,524288 --field-trial-handle=2124,i,18082706473081607399,13135008744793783557,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,14680207171264943810,6643426292845990983,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3788 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:6880
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3856,i,3159946251304415816,16247807150243412370,2097152 --field-trial-handle=2124,i,18082706473081607399,13135008744793783557,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,14680207171264943810,6643426292845990983,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3964 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6464
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3972,i,5762475753435746044,1893881182017757733,2097152 --field-trial-handle=2124,i,18082706473081607399,13135008744793783557,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,14680207171264943810,6643426292845990983,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4068 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6820
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4252,i,5028212806594950176,17551265262086325692,2097152 --field-trial-handle=2124,i,18082706473081607399,13135008744793783557,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,14680207171264943810,6643426292845990983,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4080 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6844
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3836,i,416136016277392449,5140724448946989651,524288 --field-trial-handle=2124,i,18082706473081607399,13135008744793783557,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,14680207171264943810,6643426292845990983,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3896 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:7024
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4852,i,1397784799940480866,6598665407734097743,524288 --field-trial-handle=2124,i,18082706473081607399,13135008744793783557,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,14680207171264943810,6643426292845990983,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5012 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:6956
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3860,i,15723735421540052729,9417660423555814643,524288 --field-trial-handle=2124,i,18082706473081607399,13135008744793783557,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2128,i,14680207171264943810,6643426292845990983,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5132 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:5812
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Program Files directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              PID:5048
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                7⤵
                  PID:2092
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1944,i,18417117190904335514,9327792976126727027,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2124 /prefetch:3
                  7⤵
                  • System Time Discovery
                  • Enumerates system info in registry
                  PID:6156
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1732,i,17624578199996629692,18227834530634694186,262144 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2040 /prefetch:2
                  7⤵
                    PID:6152
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2448,i,4712371395316413973,16774037302846266146,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2648 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:2308
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2988,i,13215567892824262174,617355723331343558,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3008 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:7120
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2996,i,1302792636676722494,14095218758583156029,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3052 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:6380
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3020,i,8109702765822475387,5302450860184116718,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3116 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:7152
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3044,i,15794853966835628004,8611028818078249950,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3136 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:1064
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3056,i,9212747590534713199,4391755413652745144,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3156 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:7164
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3076,i,2959430208415127045,10264138334254773432,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3176 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:5944
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3088,i,10775652537037085955,2528800650664086823,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3196 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:5636
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3972,i,17222635904193799955,13314760894590593116,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4000 /prefetch:1
                    7⤵
                    • Checks computer location settings
                    PID:4588
                  • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_gx_splash.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                    7⤵
                    • Modifies registry class
                    • Suspicious use of AdjustPrivilegeToken
                    PID:6712
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4660,i,11909780949950823883,4990909690754278882,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4676 /prefetch:2
                    7⤵
                    • Checks computer location settings
                    PID:3308
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4832,i,18135664796889381634,12985606524430576658,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4852 /prefetch:1
                    7⤵
                    • Checks computer location settings
                    PID:1188
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5128,i,5463936466400610721,264363885169807233,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5144 /prefetch:1
                    7⤵
                    • Checks computer location settings
                    • Enumerates system info in registry
                    PID:2756
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5280,i,11808207271411507015,7507352992051928060,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5284 /prefetch:1
                    7⤵
                    • Checks computer location settings
                    PID:2844
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6180,i,10155062077458827688,2320542185777992236,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6200 /prefetch:2
                    7⤵
                    • Checks computer location settings
                    PID:6220
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6492,i,9368642131536633757,12848410765978558734,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6704 /prefetch:2
                    7⤵
                    • Checks computer location settings
                    • Enumerates system info in registry
                    PID:6920
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6252,i,3261854166557285928,9586942947943400367,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6616 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:2588
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6916,i,15123626066570142946,9003853669769062332,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6932 /prefetch:1
                    7⤵
                    • Checks computer location settings
                    PID:3500
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6976,i,13706426149174907951,6487337704137181885,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6980 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:7008
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7228,i,7506171420104222880,2037379795627479488,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7240 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:6488
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7392,i,11165472219259077263,10834921248969182411,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7244 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:4228
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7268,i,16506298433810117353,397272673217532937,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7404 /prefetch:8
                    7⤵
                    • Enumerates system info in registry
                    PID:4784
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7640,i,3299611613253148054,563138626508657465,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7648 /prefetch:8
                    7⤵
                      PID:6744
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7148,i,2003220117287556372,7764056835153085608,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7776 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:2280
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7800,i,5188582187513961080,8783023098621013554,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7932 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:6188
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=8092,i,2377942733508308819,14767876795219252729,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8096 /prefetch:2
                      7⤵
                      • Checks computer location settings
                      • Enumerates system info in registry
                      PID:7596
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8076,i,14589875607135637292,7958575359662426886,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7928 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:7656
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8308,i,16112341683560823,16053369487912598581,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8348 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:7664
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8320,i,151857733746208589,4644856653680874233,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8368 /prefetch:8
                      7⤵
                        PID:7676
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8280,i,17808832819630707760,4311924702006281446,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8328 /prefetch:8
                        7⤵
                        • Enumerates system info in registry
                        PID:7684
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8840,i,7739418833990434569,17714923687575933358,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8836 /prefetch:8
                        7⤵
                        • Enumerates system info in registry
                        PID:7716
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8848,i,11534785718106200244,16394010462568246686,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9000 /prefetch:8
                        7⤵
                        • Enumerates system info in registry
                        PID:7728
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8872,i,11701682276402800306,13699755660272720521,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9144 /prefetch:8
                        7⤵
                          PID:7800
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9268,i,8461802154224036447,969374070489912934,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9308 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:8140
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9804,i,5789544349460439363,12193838936475874728,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9844 /prefetch:8
                          7⤵
                            PID:4088
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10060,i,5734281549136395731,2674517761204101152,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10072 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            PID:6632
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10056,i,6172226840062840019,15932969211862218140,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10196 /prefetch:8
                            7⤵
                              PID:6184
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10360,i,18267666063818912469,6712941228216215540,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10340 /prefetch:8
                              7⤵
                                PID:6960
                              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe" --fix-taskbar-pins
                                7⤵
                                • Enumerates system info in registry
                                PID:6668
                                • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe
                                  C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff7eff0ad88,0x7ff7eff0ad94,0x7ff7eff0ada0
                                  8⤵
                                    PID:6360
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10516,i,9851387582492110293,3953760742383122410,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10524 /prefetch:8
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:1504
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10656,i,17374785363774643060,894642339260315619,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10664 /prefetch:8
                                  7⤵
                                    PID:6340
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8140,i,17563725440285442483,18164425527445138892,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=9308 /prefetch:8
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:7592
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                    7⤵
                                      PID:7808
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff701bb8860,0x7ff701bb886c,0x7ff701bb8878
                                        8⤵
                                          PID:7680
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9104,i,4469860993067519855,13527308896444051853,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=9100 /prefetch:1
                                        7⤵
                                        • Checks computer location settings
                                        PID:8160
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6448,i,12154537857416729186,17221694815881513448,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=7356 /prefetch:8
                                        7⤵
                                          PID:2716
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4084,i,4744893888600338101,10366767777101128609,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=10136 /prefetch:8
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:3164
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7180,i,13805733966325439607,17866352822450388734,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=6908 /prefetch:8
                                          7⤵
                                            PID:7432
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10124,i,1338815408701410182,5128665285515727037,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3632 /prefetch:8
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:6456
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=10112,i,16695751457732482202,11270656389292508799,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10152 /prefetch:2
                                            7⤵
                                            • Checks computer location settings
                                            • Enumerates system info in registry
                                            PID:8056
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3624,i,17254581035546648081,15067623208674546572,524288 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=10352 /prefetch:8
                                            7⤵
                                              PID:7476
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=9952,i,14803320379797849948,10670531951886063827,2097152 --field-trial-handle=2044,i,14998816599724628501,651060429803432374,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,3210587998231796344,7927136142722105263,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=6912 /prefetch:2
                                              7⤵
                                              • Checks computer location settings
                                              PID:5508
                                      • C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                        "C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                        4⤵
                                        • Executes dropped EXE
                                        • System Location Discovery: System Language Discovery
                                        PID:3152
                                      • C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\assistant_installer.exe
                                        "C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\assistant_installer.exe" --version
                                        4⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • System Location Discovery: System Language Discovery
                                        • Enumerates system info in registry
                                        • Suspicious use of WriteProcessMemory
                                        PID:2272
                                        • C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\assistant_installer.exe
                                          "C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x5d4040,0x5d404c,0x5d4058
                                          5⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • System Location Discovery: System Language Discovery
                                          PID:4128
                                • C:\Windows\SysWOW64\DllHost.exe
                                  C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                  1⤵
                                  • System Location Discovery: System Language Discovery
                                  • Suspicious use of SetWindowsHookEx
                                  PID:2136
                                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                  1⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • System Location Discovery: System Language Discovery
                                  • Suspicious use of FindShellTrayWindow
                                  • Suspicious use of SendNotifyMessage
                                  • Suspicious use of WriteProcessMemory
                                  PID:3292
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                    2⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Suspicious use of WriteProcessMemory
                                    PID:976
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                                      3⤵
                                      • Executes dropped EXE
                                      PID:5524
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                    2⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Enumerates system info in registry
                                    • Suspicious use of WriteProcessMemory
                                    PID:3820
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                                      3⤵
                                      • Executes dropped EXE
                                      PID:1760
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x228,0x278,0x13bc830,0x13bc83c,0x13bc848
                                    2⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious use of WriteProcessMemory
                                    PID:4428
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                      3⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Enumerates system info in registry
                                      • Suspicious use of WriteProcessMemory
                                      PID:4576
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                                        4⤵
                                        • Executes dropped EXE
                                        PID:5408
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                      3⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Enumerates system info in registry
                                      • Suspicious use of WriteProcessMemory
                                      PID:3412
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                                        4⤵
                                        • Executes dropped EXE
                                        PID:1480
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                      3⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Enumerates system info in registry
                                      • Suspicious use of WriteProcessMemory
                                      PID:5940
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x25c,0x260,0x264,0x258,0x250,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                                        4⤵
                                        • Executes dropped EXE
                                        PID:5500
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                  1⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • Enumerates system info in registry
                                  • Suspicious use of WriteProcessMemory
                                  PID:3996
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffc8fca3fe0,0x7ffc8fca3ff0,0x7ffc8fca4000
                                    2⤵
                                    • Executes dropped EXE
                                    PID:5676
                                • C:\Windows\system32\wbem\unsecapp.exe
                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                  1⤵
                                    PID:848
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                    1⤵
                                      PID:7700
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff701bb8860,0x7ff701bb886c,0x7ff701bb8878
                                        2⤵
                                          PID:7868
                                        • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                          "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                          2⤵
                                            PID:4812

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Reconnaissance

                                              Resource Development

                                              Initial Access

                                              Execution

                                              Persistence

                                              Boot or Logon Autostart Execution

                                              1
                                              T1547

                                              Registry Run Keys / Startup Folder

                                              1
                                              T1547.001

                                              Event Triggered Execution

                                              1
                                              T1546

                                              Component Object Model Hijacking

                                              1
                                              T1546.015

                                              Privilege Escalation

                                              Boot or Logon Autostart Execution

                                              1
                                              T1547

                                              Registry Run Keys / Startup Folder

                                              1
                                              T1547.001

                                              Event Triggered Execution

                                              1
                                              T1546

                                              Component Object Model Hijacking

                                              1
                                              T1546.015

                                              Defense Evasion

                                              Modify Registry

                                              3
                                              T1112

                                              Subvert Trust Controls

                                              1
                                              T1553

                                              Install Root Certificate

                                              1
                                              T1553.004

                                              Credential Access

                                              Credentials from Password Stores

                                              1
                                              T1555

                                              Credentials from Web Browsers

                                              1
                                              T1555.003

                                              Unsecured Credentials

                                              1
                                              T1552

                                              Credentials In Files

                                              1
                                              T1552.001

                                              Discovery

                                              Peripheral Device Discovery

                                              1
                                              T1120

                                              Query Registry

                                              6
                                              T1012

                                              System Information Discovery

                                              5
                                              T1082

                                              System Location Discovery

                                              1
                                              T1614

                                              System Language Discovery

                                              1
                                              T1614.001

                                              System Time Discovery

                                              1
                                              T1124

                                              Lateral Movement

                                              Collection

                                              Data from Local System

                                              1
                                              T1005

                                              Command and Control

                                              Exfiltration

                                              Impact

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              opera-one-dark.jpg
                                              • Path C:\Program Files\scoped_dir5048_1915484642\opera-one-dark.jpg
                                              • Size 349KB
                                              • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              persona.ini
                                              • Path C:\Program Files\scoped_dir5048_1915484642\persona.ini
                                              • Size 217B
                                              • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              opera-one.jpg
                                              • Path C:\Program Files\scoped_dir5048_275221898\opera-one.jpg
                                              • Size 194KB
                                              • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              persona.ini
                                              • Path C:\Program Files\scoped_dir5048_275221898\persona.ini
                                              • Size 207B
                                              • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                              • Size 1KB
                                              • SHA256 71ccd39de69ec147afd8ad4337a36829dcababbf40897250380c7770de551242
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              B46811C17859FFB409CF0E904A4AA8F8
                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                              • Size 528B
                                              • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                              • Size 471B
                                              • SHA256 4b00900886fc53df65f90f9bf7c1bc61d8e9588c8fb660ce2b57f89c4ba977f7
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                              • Size 174B
                                              • SHA256 37c939a0772dc0e140bba6f393b062e4362dff1a8ae62e553394bc02c3d0c0d6
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              B46811C17859FFB409CF0E904A4AA8F8
                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                              • Size 170B
                                              • SHA256 890314740d96d9a5379ccb19fd94eb2fa5747c1fd31af24e05c5211850b9c7d8
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                              • Size 416B
                                              • SHA256 3c0fc491af8a2ec64db618bc5820728374f41f6ff6ce15405f6dc2a1f6cc0b38
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              data_0
                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                              • Size 44KB
                                              • SHA256 0fee3d4e8d7529f7aa80d1ae6d082093808eca2cc705cc4a118fe9a24deaf206
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              133.0.5932.20.manifest
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\133.0.5932.20.manifest
                                              • Size 225B
                                              • SHA256 96eb02fb002deff259d109ef33c4dbab24a00a4fc27f828b2290a46ff7186f9c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              150x150Logo.scale-100.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-100.png
                                              • Size 1KB
                                              • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              150x150Logo.scale-100_contrast-white.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-100_contrast-white.png
                                              • Size 1KB
                                              • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              150x150Logo.scale-140.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-140.png
                                              • Size 1KB
                                              • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              150x150Logo.scale-140_contrast-white.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-140_contrast-white.png
                                              • Size 1KB
                                              • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              150x150Logo.scale-180.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-180.png
                                              • Size 1KB
                                              • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              150x150Logo.scale-180_contrast-white.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-180_contrast-white.png
                                              • Size 1KB
                                              • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              150x150Logo.scale-80.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-80.png
                                              • Size 827B
                                              • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              150x150Logo.scale-80_contrast-white.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-80_contrast-white.png
                                              • Size 799B
                                              • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              70x70Logo.scale-100.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-100.png
                                              • Size 781B
                                              • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              70x70Logo.scale-100_contrast-white.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-100_contrast-white.png
                                              • Size 752B
                                              • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              70x70Logo.scale-140.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-140.png
                                              • Size 991B
                                              • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              70x70Logo.scale-140_contrast-white.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-140_contrast-white.png
                                              • Size 865B
                                              • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              70x70Logo.scale-180.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-180.png
                                              • Size 1KB
                                              • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              70x70Logo.scale-180_contrast-white.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-180_contrast-white.png
                                              • Size 1KB
                                              • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              70x70Logo.scale-80.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-80.png
                                              • Size 590B
                                              • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              70x70Logo.scale-80_contrast-white.png
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-80_contrast-white.png
                                              • Size 519B
                                              • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              assistant_package
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\assistant_package
                                              • Size 3.6MB
                                              • SHA256 71000aefbbef427fc6c0e20d8f8cbad0c70dc6eefd95f6e90c7fc1f43d2ad0e7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              d3dcompiler_47.dll
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\d3dcompiler_47.dll
                                              • Size 4.5MB
                                              • SHA256 de25d109d46273045207b504443d5730aadf6b5a7fe1978043dac4d3e638ea65
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              dxcompiler.dll
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\dxcompiler.dll
                                              • Size 24.4MB
                                              • SHA256 90fb45ff598d7e24cfffef07924de8159ec6de15a08a8f075c187442f95cb217
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              dxil.dll
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\dxil.dll
                                              • Size 1.5MB
                                              • SHA256 3cb1f2c44f376ecfb64f23021776f633375ec2b42b99844f8fef4686164d1cae
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              files_list
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\files_list
                                              • Size 6KB
                                              • SHA256 04356be072ab31fb5ce09d26bb1d8bb664c7334883a2e6157238cdd97979e97b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              headless_command_resources.pak
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\headless_command_resources.pak
                                              • Size 2KB
                                              • SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              icudtl.dat
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\icudtl.dat
                                              • Size 10.4MB
                                              • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              installer.exe
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe
                                              • Size 8.3MB
                                              • SHA256 c006f335efec016cf3d381a3a89d1692bdd27f5994b7f283e7619386367ae002
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              installer_helper_64.exe
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer_helper_64.exe
                                              • Size 639KB
                                              • SHA256 55c0cd782af626adcf9bf144ef26528e598e8c8efcd60372ab2e43b65881129c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              libEGL.dll
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\libEGL.dll
                                              • Size 492KB
                                              • SHA256 24e5c900d1a8bebe2092480a2c0d5f8fd093af76b939b16d51fde1a276bef579
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              libGLESv2.dll
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\libGLESv2.dll
                                              • Size 7.5MB
                                              • SHA256 2eff13a97dbe96393088f714d22b59be2be88973062f27ef21282fc35aedf815
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              bg.pak
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\localization\bg.pak
                                              • Size 1005KB
                                              • SHA256 8a151c2685798e8c559c4329496eac4845b23bf977c1f10fa97e452617179036
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              bn.pak
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\localization\bn.pak
                                              • Size 1.3MB
                                              • SHA256 75b433bac6b07c87874885f87d38d6a87dab684310611072e880ea157cebf967
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              ca.pak
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\localization\ca.pak
                                              • Size 634KB
                                              • SHA256 951a872c07a86b56273a468472edc64ff1fd3072ee92f1b747c2d56862266e9a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              installer_prefs.json
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                              • Size 1KB
                                              • SHA256 f443fd7543fca8c72eb4dd2d832ca24dc1c71c640669516f366b4e9ab885eb08
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              opera.exe
                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              • Size 2.9MB
                                              • SHA256 a881c8dab332b019e97a6d65fe95c062ef9bd8e7b2b3b40d8069e19d5b2886e5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Opera Browser.lnk
                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\Opera Browser.lnk
                                              • Size 1KB
                                              • SHA256 1940fd8465db55b0450a5e78bbb2cbc0a02f4b3e550abad3bab9453187177b6e
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              additional_file0.tmp
                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\additional_file0.tmp
                                              • Size 2.8MB
                                              • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              assistant_installer.exe
                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\assistant_installer.exe
                                              • Size 2.4MB
                                              • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              dbgcore.dll
                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\dbgcore.dll
                                              • Size 222KB
                                              • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              dbghelp.dll
                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\assistant\dbghelp.dll
                                              • Size 1.8MB
                                              • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              installer_prefs_include.json
                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\installer_prefs_include.json
                                              • Size 239B
                                              • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              installer_prefs_include.json
                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\installer_prefs_include.json
                                              • Size 1KB
                                              • SHA256 d881973beffde05420230ea9d04541bf4990424770a04b08cc8473b02a3bfece
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              installer_prefs_include.json.backup
                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\7719b389-93ff-4c1c-a670-d0fdfa9c9036 Opera Installer Temp\opera_package_202607021509101\installer_prefs_include.json.backup
                                              • Size 224B
                                              • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              18182159-d2b6-44b1-b62f-2de9bcaa02c3.tmp
                                              • Path C:\Users\Admin\AppData\Local\Temp\18182159-d2b6-44b1-b62f-2de9bcaa02c3.tmp
                                              • Size 14KB
                                              • SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              installer.exe
                                              • Path C:\Users\Admin\AppData\Local\Temp\7zS406B4708\installer.exe
                                              • Size 8.3MB
                                              • SHA256 8a134a76b3ea979d3647853879db52b07bb5d1dff6249e8452e5d10d803d64ef
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              OpInst.exe
                                              • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                              • Size 3.1MB
                                              • SHA256 8d068fc35045be8cd0390c37ac5e4e54dc72bd7c2a0492943724933abcbe9da7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              bg.png
                                              • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                              • Size 224KB
                                              • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              cf86469a-e0e3-4e01-8866-c746b9386f00.tmp
                                              • Path C:\Users\Admin\AppData\Local\Temp\cf86469a-e0e3-4e01-8866-c746b9386f00.tmp
                                              • Size 2.6MB
                                              • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              favicon_opera_one.png
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1706294820\CRX_INSTALL\favicon_opera_one.png
                                              • Size 2KB
                                              • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              manifest.json
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1706294820\CRX_INSTALL\manifest.json
                                              • Size 3KB
                                              • SHA256 64620e875ac18f8a5dfb0a403c8f9307a14c7f1b3278b7801bfa1c21f3365c71
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              service_worker.js
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1706294820\CRX_INSTALL\service_worker.js
                                              • Size 74KB
                                              • SHA256 1480798b974b29c617d9ebb4b4408f1eea9febbcde0083373cf8d178dca1b6cb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              de932af914ba00303d4a2778a383ac9c831101e2.crx
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1706294820\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                              • Size 4.2MB
                                              • SHA256 9527f8a88118af8921b40c59fee22654dbf169a96d6a8febd2d0bb83363b1b4a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Icon_Light_Neutral.png
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5048_663802695\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                              • Size 2KB
                                              • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              messages.json
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6444_1245668149\CRX_INSTALL\_locales\en\messages.json
                                              • Size 401B
                                              • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              messages.json
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6444_1245668149\CRX_INSTALL\_locales\en_GB\messages.json
                                              • Size 387B
                                              • SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              messages.json
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6444_1245668149\CRX_INSTALL\_locales\es_419\messages.json
                                              • Size 424B
                                              • SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              manifest.json
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6444_1245668149\CRX_INSTALL\manifest.json
                                              • Size 4KB
                                              • SHA256 dee09929862d037e825b73576a80272b344d7c8e90a3d245a658f5b54486e9d7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              pipeline.json
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6444_1245668149\CRX_INSTALL\source\shaders\pipeline.json
                                              • Size 146B
                                              • SHA256 9e4ae1e22f4ebc23b914d04a4d0cd0b79639dfa609d830b62cc0285dc4a95bba
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              accent.png
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6444_1245668149\CRX_INSTALL\wallpaper\color_picker\accent.png
                                              • Size 99KB
                                              • SHA256 0ba039580d11744514f1734bd6ed144bcd8ef605f61b9c4c2fa300a5afae3348
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              background.png
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6444_1245668149\CRX_INSTALL\wallpaper\color_picker\background.png
                                              • Size 70KB
                                              • SHA256 44cb4f1b7692d39f251bd2dd24352fff8ce8d9b2bcc47506e642ee4dd3f96f11
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              additional_file2.tmp
                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6444_1245668149\additional_file2.tmp
                                              • Size 937KB
                                              • SHA256 73355e09adb2bbb96a8e146e1098ad18036d58353d87f78cf4e6183c1f8fa8a6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              settings.dat
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                              • Size 40B
                                              • SHA256 3f015f95a45ed6c2e79f537eb2059497ff90e0772b72265f65e15bdb9389c9b3
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              0f4d04a1-5d48-476e-9c5c-f2b0be77c35b.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\0f4d04a1-5d48-476e-9c5c-f2b0be77c35b.tmp
                                              • Size 10KB
                                              • SHA256 8bb67e36d5f25ab42ff5d72d2bc99920165c64786276b77ba51569a540152b61
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              144e08a6-b2ea-45fe-8e72-f41017234cbc.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\144e08a6-b2ea-45fe-8e72-f41017234cbc.tmp
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              1b842dbe-f3c5-4495-ba06-0cb8aa31917c.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\1b842dbe-f3c5-4495-ba06-0cb8aa31917c.tmp
                                              • Size 607KB
                                              • SHA256 6ec6d6ad99f1101efe45aee561fd49cd96406be0572f2c7a1a95ae1b40d89ab6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              20762515-19cc-4f4c-bb00-41c82c0ca27d.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\20762515-19cc-4f4c-bb00-41c82c0ca27d.tmp
                                              • Size 203B
                                              • SHA256 0740d9318d191b60611885154a99a9d95b884eb8c3aaab42adfecc97621b21ca
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              2cd1a2be-9a99-499b-870d-c99f23baaefd.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\2cd1a2be-9a99-499b-870d-c99f23baaefd.tmp
                                              • Size 456B
                                              • SHA256 948b9b0d221de9e94ed67d88576a2204575afd87b84057a2f5e88a39437e27b5
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              6722b8f4-7203-4e26-9cbe-65f5e5daa8b5.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\6722b8f4-7203-4e26-9cbe-65f5e5daa8b5.tmp
                                              • Size 171B
                                              • SHA256 2ec9da9f91788d6ffc19de891b078acd127ef8ca64d9fc005bb1e7aa6acb189a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              7bdf990f-0b75-4aed-b195-29fa519de55f.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\7bdf990f-0b75-4aed-b195-29fa519de55f.tmp
                                              • Size 15KB
                                              • SHA256 f48e06ad5bbae675bc2422b9ffc6f0140721ec9b19e8130a7ea2a5eb2967e091
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              9a84b7b3-a43f-43f2-9be6-b08940d8ddfb.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\9a84b7b3-a43f-43f2-9be6-b08940d8ddfb.tmp
                                              • Size 203B
                                              • SHA256 5376f9eeefdc8a0d9471340c382ebf6f5494fcb6d4a45525234fa466846ece41
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Bookmarks
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                              • Size 36KB
                                              • SHA256 2e646e3aebcaad90663c29fba93968b696377df46598f06ef829d73eaeaef598
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              BookmarksExtras
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                              • Size 242KB
                                              • SHA256 0615d6e70ce4b86c5ae988c13934c8ba282ee9773ae53b053f47f4018e170de8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 48B
                                              • SHA256 916903d7a9987f9489b17a68ad6fe03b1c07e565faf3814dcdcd096a7a4ec35b
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 264B
                                              • SHA256 73973b3a79fdcf2fa645023dd291193bbc23d3076eb9cdde32a54913078e6ccc
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 336B
                                              • SHA256 8dbecbfffc4df7e7259fe4390de80a9e9f83ef1237696da02e1db7ee3e8d374f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                              • Size 744B
                                              • SHA256 4c4f4d5db1c831a8017b8f000dda64fd28bcf4c7008ea39314c24894a369c8da
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              data_0
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                              • Size 8KB
                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                              • MD5 SHA1 SHA512 SSDEEP
                                              Submit Download

                                              data_1
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
                                              • Size 264KB
                                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                              • MD5 SHA1 SHA512 SSDEEP
                                              Submit Download

                                              data_2
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
                                              • Size 8KB
                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                              • MD5 SHA1 SHA512 SSDEEP
                                              Submit Download

                                              data_3
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
                                              • Size 8KB
                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                              • MD5 SHA1 SHA512 SSDEEP
                                              Submit Download

                                              CURRENT
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
                                              • Size 16B
                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              reader_mode.js
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir4132_77745747\CRX_INSTALL\reader_mode.js
                                              • Size 112KB
                                              • SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              spotify_frame_interceptor.js
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir4132_77745747\CRX_INSTALL\spotify_frame_interceptor.js
                                              • Size 5KB
                                              • SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              preview.png
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6444_171999002\CRX_INSTALL\wallpaper\preview.png
                                              • Size 464KB
                                              • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              icon.png
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\bckiheihmdiaaoadimffbjbjafkoooaj\1.0.4_0\icon.png
                                              • Size 5KB
                                              • SHA256 f355f2b3167c6c63bb570444d5e2db91f08a6903339a48f30e9d8eba233396e5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              cos-bridge.js
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                              • Size 173B
                                              • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              cos-content.js
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                              • Size 502B
                                              • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              main.js
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                              • Size 47KB
                                              • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              favicon_opera_one.png
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\favicon_opera_one.png
                                              • Size 2KB
                                              • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              background.js
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                              • Size 86KB
                                              • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Icon_Light_Neutral.png
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                              • Size 2KB
                                              • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              popup.js.LICENSE.txt
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                              • Size 1KB
                                              • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              rules.json
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                              • Size 839B
                                              • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              496294ee-58d6-40f2-84eb-277fee113abc.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\496294ee-58d6-40f2-84eb-277fee113abc.tmp
                                              • Size 27KB
                                              • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              4d808ad6-a5a6-4fe6-8e42-f406cb5a7ea5.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4d808ad6-a5a6-4fe6-8e42-f406cb5a7ea5.tmp
                                              • Size 27KB
                                              • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              635a64ae-0316-444e-bd2f-9c9c5a7d828b.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\635a64ae-0316-444e-bd2f-9c9c5a7d828b.tmp
                                              • Size 27KB
                                              • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              ab0cfbbd-9bba-4c3f-aeec-01d121fa8225.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\ab0cfbbd-9bba-4c3f-aeec-01d121fa8225.tmp
                                              • Size 27KB
                                              • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              d2df4e2d-4b31-45b2-bdf7-fad8d2f0176e.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\d2df4e2d-4b31-45b2-bdf7-fad8d2f0176e.tmp
                                              • Size 27KB
                                              • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              dd9f23dc-4dbd-48c9-925e-97a4edfe0772.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\dd9f23dc-4dbd-48c9-925e-97a4edfe0772.tmp
                                              • Size 27KB
                                              • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              61294c1e-ccd7-429a-a929-ab7386951728.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\61294c1e-ccd7-429a-a929-ab7386951728.tmp
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                              • Size 10KB
                                              • SHA256 04638354176e002e19f49620135675f7b48e511a0797ff88e3a720964d72d6c0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Preferences
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                              • Size 15KB
                                              • SHA256 ad57b6ab30a2332ac103f3363ed6b00dbaeda2fb8d4197ed4729ffbe4f20b7fa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Secure Preferences
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                              • Size 114KB
                                              • SHA256 471e69e4245ee6102f492456d1fe86426944b4a3658e50ce5e2ff4a107090902
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Secure Preferences
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                              • Size 91KB
                                              • SHA256 180e68eb2229a9c76c033b8882f99767f2788d9b1589789fe5b25ecea0ce228f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              Secure Preferences
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                              • Size 91KB
                                              • SHA256 77e9605213a49aaf84e28cf0e3e03bcd87995bf90e24656948e4e553ddcaf81b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              a1ec8259-c805-4878-8952-f073af13be73.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\a1ec8259-c805-4878-8952-f073af13be73.tmp
                                              • Size 72B
                                              • SHA256 97b06c550dfdbe0a5e9ee58c58a4a31906c6857029fa2325337ecee47270e402
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                              • Size 96B
                                              • SHA256 3a0c091d25b9ed34cb88d648fdf2f8705726e9490e84f47ab486d049241a1f6f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                              • Size 216B
                                              • SHA256 a1dc59e1bcdfcd9c1eddda6f9a63064807ea03ebf766a76cd2c76d0a09b97830
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              the-real-index
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                              • Size 288B
                                              • SHA256 cc9b340d585413ca2f817f081bcfaa5e5cf9887f54ca4b40d30f8687bd45ddb8
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              1e8e9249-1b37-4e4b-a1af-e56183fb4bbf.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\1e8e9249-1b37-4e4b-a1af-e56183fb4bbf.tmp
                                              • Size 381B
                                              • SHA256 9c0ecc7174a3cc81d8afe66eac48556c015743bbb3a104c6e2051036096e177b
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              40d598a3-e041-4c7f-b3f9-4741ddd9bcd6.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\40d598a3-e041-4c7f-b3f9-4741ddd9bcd6.tmp
                                              • Size 381B
                                              • SHA256 973a713496e66dd85b2cf7226f0ed0db4526755031bebfcf3fe5016e44d64fb7
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              4d631bc4-8faf-4ba1-94f9-5814d23ca468.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\4d631bc4-8faf-4ba1-94f9-5814d23ca468.tmp
                                              • Size 381B
                                              • SHA256 350902f0714874dcfe0b6609843ca1f5d1e3e4a8e7e32d19cda24d86616fa99d
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 493B
                                              • SHA256 70690455c75be9d803bbead7585e4fe77ee88739df302be2600bccf06c0daa3c
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 621B
                                              • SHA256 82c4943c1356f5277332c9f9af607a156292425c8359e94b10c0ceaf1af0380a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 733B
                                              • SHA256 549151f09520b6144bec23422304376922ff7d1e273a95f4ef892d6cd486ac96
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 909B
                                              • SHA256 039b5acb0b29bf28ed08496292703e2498ba4450f5f8f08d19badcf28b91b2c4
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 957B
                                              • SHA256 aae64b41c005e364c148092335489031cbd227e94342635063018b47bbb5b23f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 1KB
                                              • SHA256 57822d0f7c1a985d9d29f32e2d24a66f6d1fb0a6cfc4fdc037f1556bb560e526
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 1KB
                                              • SHA256 2de2b93d2a7e28f60ff1fc6979d76a4fe3d0035f971652c47aa03366cce52adc
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 f9441e34450848d006fbcdf7d3d8d99197b44ca1bd7f9d32b5cd83c294481223
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 f25b99f0f4974dff60111e463a790950ecd43e1c176c02c4f7abc7e828aad793
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 3472b9c81926370b14c55e476de1115ed836a5bcaad1f354b36f01e93fff5cfa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 c20d03638e7f622d7ec0778ecde9954152d8100070fcb594fe3875933ac9831f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 02c8cc61cac6630aa6ec29212b4f4875f2244ad296dee4e81e7e62253c4b30f0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 8ca63370325fd07bb10a5ae69089c5211a445eba7069793c297332294f57463f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 3f59019cc759172641448c581d19f0c9813da29bfcdd588cfc43e12dd0be4a9c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 05424e8240a9b222a768f44f51bc2a5b04960a0eed0e29d4e54f3b28008f4cfc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 5b99036230601cd6f66be96e497c8c5a2eb40ee008e5e24dd077e751b23677b7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 376e9e10db65dc65ee8abf5eded1f1b696aaaa76d8638c714fe5fbf90518fb2f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 e7ac3e53cb6ef9ca5404dc3b51e05d7ea060522a62141f65e64ee8e466665415
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 2ee3b2d5d72167ae8bc92e9523ebadb1c342a769a38bbd69b1acd0eb567ce88a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 3474753fc11744a86ecd9d48284bffca191191a6396ada705473e346088bcc44
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 c66d46f8f0b1dde1d5d9bbd30af811c53cc8258616afc2d77b7b5d57b2860c2c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 4f82c966e12fbd9faeb03a0e666cca2fa74265c316a95ed33f9021bf34e58afa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 11KB
                                              • SHA256 f5d3218fb9935b7b07cfa43f4f9e5a0c583cdea7d9598c80aa96ac3a4ea995cb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 7KB
                                              • SHA256 deaea371c8cb428b3e9399eaedbf996e4ea95fde3a930590af595af33032b197
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 1KB
                                              • SHA256 5c408f51d7fe23d2eda98c08ca4329be90d68df469e86b0e403dea1c370403d0
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 1KB
                                              • SHA256 4a608119ed948d50b918ac93848cc686c51e1c5b015dc475989021d32dfc2da0
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 1KB
                                              • SHA256 9e83ab07c0dc8571221f81a343f6989e8c40053f44ba62d4293751a2ddaf15c2
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 7c6d114ea8f0639754df139793bd03d4fb78e67bb4cfdd32b1d26c40911eafc5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 a6f3c0a417b0947b97f2a56d06d76180924bff5a18f0439e95a2b39c75d0a829
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 309a5333923815b29d58c17c12fcc42bdc7242ad534d1bb0cfc30651fefe59c9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 eec75fb6abacbb38c2421dda1413d25d036ad5bae4084939631c33b029dadec5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 11KB
                                              • SHA256 9a3e94830b9c4b9e6a429b880081a70172d7041b36530ebb9540486c8aed5761
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 11KB
                                              • SHA256 7d290c51bd500f398fc4e3edb67287290a4ee48121400c079c850cc92f2e8d3b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 77183ac0d1639d1189fe65fbfed6086234efbed94e71fdd49f2fad9ed7bd730a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 7KB
                                              • SHA256 709914e707a3790ec994986d204e9073a52d735ef4b96b35bfddda2507697599
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 8KB
                                              • SHA256 8e1ab882d9c05cc348b70b78aa39058f959c8a297fa4babf8c7f6f9c87e77ebf
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 bd1aa9ae69b9c8b8b006381702f827ee0e05739d1ac6fd76c9e12bd7a59e14d2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 4b39021a74a7beb3d94ac0f85eeec3b019a9c79741aed1b041102cc957067244
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 4763b34d71f06eebf9f56aa101e128dde2ad6c2034d04e7c2e51696809a18176
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 11KB
                                              • SHA256 0fc3ddde3224487a5a4d8056e4dfed8a11a967f3e92891d5c604bdc13fdad65c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 fd37e3f6e3f99552ef17914adf8d19170a2c70e21c54cc885db72e121db2f380
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 1KB
                                              • SHA256 976ba4ed5c923fbc059830f19af6e94d3ae49b7fe3ef27c0310bc63661e589b5
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 11KB
                                              • SHA256 52bf08a99bfa2321b49a84cd4221d72bb5675d04639d432d6d414772eb2a4ab2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 c9037eb932e99de09cc86d87c036b55a61b520a42f2cf62c3e803427e1d61861
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 6cb6f46e4a0926a21efe4bca4eecd4d8e404a03e43cd75f79672ebd8404a6b19
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 8fc38d5c73af13c0e85874812a5e149dce7e6ae4c359dc378dfad601ef26ecd3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 6757354f089b4d44846fb0b2c9868512b7e8e80573a307ccbee82a2e7efe76a9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 1KB
                                              • SHA256 f2df4ccd59bbef5384ea5094d04d40609f93ee75e7352f32767e125e258352d0
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 1KB
                                              • SHA256 ab6e3f2d31c702dd43d4668b1edafb9e172836f0a284818cdbd737caa27d46f5
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 9KB
                                              • SHA256 91dbe25343e4d0107331723dcad3552fc8d18304cfb9c0b8386484808a767346
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 165dd0a03c5d457494f48d0a5407552744fe7c2015705bb071118569d9c6eb53
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 7KB
                                              • SHA256 37c718d51aa5264425698b15427908a445ffef113624793431d4ef7cd5728835
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 7KB
                                              • SHA256 a3dbd263b959a4329dc9c45f889637423dbe7932d844e0f7a33c7ec6a9657c30
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 1KB
                                              • SHA256 b9fdf4ab3c4bedb2b22044236e25d80a86c59952170bfcdee9551914757cc7b7
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 8KB
                                              • SHA256 e92fad5e9575fb324af6da8e848e6840be0847460fa93cd22f09721b23bf32d4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 1KB
                                              • SHA256 52ced9f639140d1a1770f8e28d1f126b7422526995537058ac4eac27b62aad37
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 8KB
                                              • SHA256 9afe8c635d025f3c4505fd06fca458cf0cff92d5df638d57a33d7e00beaed428
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 10KB
                                              • SHA256 174fd227d2a55ff88c5daa1ea28c17108dad26b86f3b80058a387c0f99513989
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_06c64cba-adc6-4bfc-89ee-e75b1ff34a15.raw
                                              • Size 7KB
                                              • SHA256 15e3979ab72b6e383285cac17539596f6c0da81fcae785546aae348966235a71
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Size 637B
                                              • SHA256 632a56ccefb14d79b380c529beddba3698b145c66cff1c7fa77d274c6b45ce4a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Size 493B
                                              • SHA256 3f2ec5fc1287bbd512c3ef93711a25f64a8f24663ad6db278219b0cd6efbe690
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Size 621B
                                              • SHA256 1b309ba9223a2c13d9a41396e40a63016796eb4b1765a05886403dac8e4de3a4
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Size 637B
                                              • SHA256 2b85ec8453e347ab4b95d4a75d60de0e7c2366062f2b992f6edd434d53c8cc82
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Size 637B
                                              • SHA256 b1bb28a409fe0fb6e80b2c2d1d758458ae3925b7cb727f69bd47942d00dd91c4
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Size 797B
                                              • SHA256 3ee2d34d747e265c92dd91b1c60bfee6ba2021370d0f338689499cb5d8dae980
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_68a49b35-2094-4677-bd9e-2985d21bb2b7.raw
                                              • Size 845B
                                              • SHA256 0c5bd5151e3798eede735aef0408522a41682c19e69a87a6e4de36eecdffbdf8
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Size 493B
                                              • SHA256 be87165073af8aff0ad8749d0ad8db17433be0534dcd663e7650bb446108e968
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Size 781B
                                              • SHA256 d1c340d30a39bbf3cc1e900937615c15faa34f636561a8f8db60a93ad7bbfe79
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Size 1KB
                                              • SHA256 970b34d36831da81107be5556177f07e35649d223edefcacd0d6e86e971c5fa2
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Size 765B
                                              • SHA256 5bf252cc5aec82cde8082f19226fcf0119bda61dcf355c7449e168af6ffa3df0
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Size 957B
                                              • SHA256 0320f3b238e538982f3915df0b7ff62ed2295179ee1db1c4bac8d9787f1d229d
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Size 1KB
                                              • SHA256 1ea8351dd9bf27b277087dbbe94496454bcc41f9aa739513a6f5ed254ddaafae
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Size 781B
                                              • SHA256 4d7a1a3518ad27d51f1ee3af6364727b5bfcd1116c651f26964bcda1a4ade2f9
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Size 605B
                                              • SHA256 2b13656d09db4287b4907486def59222940943cf7800fe1dffdfdfd8e7a927d6
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Size 1KB
                                              • SHA256 499e7e2c686d8a73255a439f7ac33762bd6eea0c06b66e9bab2de59367b18cbf
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_eb0c9ae2-06fb-4843-b7b3-9d6744f1693e.raw
                                              • Size 1KB
                                              • SHA256 8f6ce872eea3a5e6402dcabb35270789c1dfb1b9749fc514ad42e3f5b03708c3
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              aa0abc2c-67b6-401e-bd7b-c74554c11462.tmp
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\aa0abc2c-67b6-401e-bd7b-c74554c11462.tmp
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              MANIFEST-000001
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\shared_proto_db\metadata\MANIFEST-000001
                                              • Size 41B
                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                              • MD5 SHA1 SHA512
                                              Submit Download

                                              ssdfp4132.0.1502389655
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4132.0.1502389655
                                              • Size 2KB
                                              • SHA256 561b6fb9ed1a241ff6802be4da50bc3e22da0561ad78d309b74955c64c936268
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp4132.0.1502389655
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4132.0.1502389655
                                              • Size 1KB
                                              • SHA256 bdc909c35aef664b96cf3cbd0482772a72f58810ae10542682628d58666cbe44
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp4132.0.1502389655
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4132.0.1502389655
                                              • Size 265B
                                              • SHA256 f14a9061ebaaa73d2cbad01dc0a73118d76de025ae37d13c6677f86441904c35
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 918B
                                              • SHA256 293e182e7ccf2851c2e2aceaed977fe3c14c10dfd5e43e2ad567ba56f3fe83cb
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 1KB
                                              • SHA256 c0468093dedc7bc43331fb757aeba4a0572b827c7b740b2cf4aed1e174b91cab
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 1KB
                                              • SHA256 dadfeaa3349b9bdab1ba4ef3c948ef097751d5b306193da318dcb33eac3a2069
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 1KB
                                              • SHA256 2a35ba0d6dce25c195e6a0e7e55a3aa1e36b084b9b020d1535de475641c287f2
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 4KB
                                              • SHA256 5324c2bc06723af885a28e43e379c83deef6b9d177db79994764e9cdaec197b7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 4KB
                                              • SHA256 83c2aa8cd1925b7b1795784d3d27d1a2051a0430a524463a32c73183b43cd991
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 4KB
                                              • SHA256 315fd53f98b773b6c34bbade8e7137d5be2cd77427538cb44466813b02a5d067
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 4KB
                                              • SHA256 fa2859151f9097bf7dce64d3d30b2ca1ad5d413428664437bfa5d5c9cd770e36
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 4KB
                                              • SHA256 7cbd92b593ce85f092fdd21a1e9b241bb60335db9f62fda1fe8aed151b8e762e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 647B
                                              • SHA256 2db4c1746f3c8046f57aee237400ebf6989bf3db66f5fdae7c5d94b518758ca4
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 1014B
                                              • SHA256 9ecb57dfcac1f58cee99db28442646812b44e95a6b4684f8bf819ab66cbcd26a
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 1KB
                                              • SHA256 f2a9880a12097c5bdbf96852f11a120d40d16465e4ee3b99bb2ec4e250b13047
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 1KB
                                              • SHA256 07c29b748fd72fac6e625e7db99ba7783d64f6a7561ae41fd9e201bf39eb1e42
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 1KB
                                              • SHA256 f570e9a0529101c0010da3113b8c6c8763f0d66b23dd4dbb837745dc7bdf4ea4
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 4KB
                                              • SHA256 eacd1433ee2cd4b1f65c06ab631a9638fc26a62a4cd5ce89ad639b3258cb3d18
                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 549B
                                              • SHA256 133d1dae8cdd34f2719dece0741e202f092509a018a664f19e4a0b76ab7e2595
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 824B
                                              • SHA256 a55412d321ddb3038814acfa30e78f2352e5dd73223e8aecb2ea8f468d7ef403
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 2KB
                                              • SHA256 1516e63c00a650fd9dc7ec60e6f680a3c51353cc11cf9480de31fa88d8489bec
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 3KB
                                              • SHA256 f5b6df685e7bc56805877a2a76df00ee9197fcc3653d910a09425cbbd005be49
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 3KB
                                              • SHA256 5e47ed45d8126ad2434bb62671ff7a9ddc96c9b540195fff5cf3629d9e0331e8
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 1KB
                                              • SHA256 de772b2342e8f63b91eaab9d417ee810fa410f3f312055aae92bfce952d83055
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.0.2061617037
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.0.2061617037
                                              • Size 737B
                                              • SHA256 a98b70d838bd74cdcdbfc89d76a127790eb28992518c564ce7158cdc7c58ebf4
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp5048.1.1682999367
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5048.1.1682999367
                                              • Size 200B
                                              • SHA256 1be08977479d3a9d718a14db04acc1cda32bfa977546e9c01104155a9377bdc8
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp6444.0.1721498790
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6444.0.1721498790
                                              • Size 2KB
                                              • SHA256 0a62afe2d9aa71b2899f0b2be83d8ec1fd7fee3d5e38c4ba1f5185d84593aee6
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp6444.0.1721498790
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6444.0.1721498790
                                              • Size 1KB
                                              • SHA256 6b884bfe2122a5963d28036d342954f11414a79b37eabbffad7755da10556436
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              ssdfp6444.0.1721498790
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6444.0.1721498790
                                              • Size 265B
                                              • SHA256 5f9aba6b00107da5ebf0319469a407f4aecd3628fe68367ffeea0d1647c181ce
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                              • Size 2KB
                                              • SHA256 f7a22ff52c781be7b0884e81daa1ba3b45debb3e983a54d3e39bdb2653ffd91f
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              Local State
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                              • Size 3KB
                                              • SHA256 813338439fed62564ff9cee3bb3252b08d6bb6a3d1d1f238ecbbaeec8563c241
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              assistant_prefs.json
                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                              • Size 150B
                                              • SHA256 e4aab27f3cce98f9cbc2555b25b5c4c44f3f244fecfe1cebf095168589bdcc92
                                              • MD5 SHA1 SHA512 TLSH
                                              Submit Download

                                              memory/3216-455-0x00007FFCD6490000-0x00007FFCD6491000-memory.dmp
                                              Download

                                              memory/3216-456-0x00007FFCD53C0000-0x00007FFCD53C1000-memory.dmp
                                              Download

                                              memory/4608-2224-0x0000017DF5870000-0x0000017DF70E9000-memory.dmp
                                              Download

                                              memory/6152-3784-0x0000021695B10000-0x0000021697389000-memory.dmp
                                              Download

                                              memory/6152-4091-0x0000021695B10000-0x0000021697389000-memory.dmp
                                              Download

                                              memory/6764-2868-0x0000019ACD040000-0x0000019ACE8B9000-memory.dmp
                                              Download