Analysis

  • max time kernel
    133s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/07/2026, 12:13

General

  • Target
    1111-w-warp-2024.12.760.0-installer.exe
  • Size 2.0MB
  • Sample260707-pdvsqaew2j
  • SHA256 148dc944649f15c49e246feee7aa21695ec5770ff8bc038aa91d3a87fe68d5b6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 13 IoCs
  • Loads dropped DLL 4 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Enumerates connected drives 3 TTPs 4 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies system certificate store 2 TTPs 7 IoCs
  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1111-w-warp-2024.12.760.0-installer.exe
    "C:\Users\Admin\AppData\Local\Temp\1111-w-warp-2024.12.760.0-installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1544
    • C:\Users\Admin\AppData\Local\Temp\is-9NOZTJDXA9.tmp\1111-w-warp-2024.12.760.0-installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-9NOZTJDXA9.tmp\1111-w-warp-2024.12.760.0-installer.tmp" /SL5="$5010E,848247,840704,C:\Users\Admin\AppData\Local\Temp\1111-w-warp-2024.12.760.0-installer.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2108
      • C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component0_extract\saBSI.exe
        "C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component0_extract\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB InstallID=GnjW1demeOx0kZlQAEt7yktGdZByj2dRFU9C25172F0Xu6uLvKuwybZCnQUcLVPFZdV2oCypR2gCUJmkqYx
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        PID:4592
        • C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
          "C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe" /install /affid 91082 PaidDistribution=true InstallID=GnjW1demeOx0kZlQAEt7yktGdZByj2dRFU9C25172F0Xu6uLvKuwybZCnQUcLVPFZdV2oCypR2gCUJmkqYx saBsiVersion=4.1.1.865 CountryCode=GB /no_self_update
          4⤵
            PID:5800
        • C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component1_extract\OperaSetup.exe
          "C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component1_extract\OperaSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdEgbgI9VtZEQqqw9CBuPzvHYrprLPGaGgzwOsK41kaWEPqdkWYKX2qZSmFKEe92WhnuNdw9KgRvr
          3⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4188
          • C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdEgbgI9VtZEQqqw9CBuPzvHYrprLPGaGgzwOsK41kaWEPqdkWYKX2qZSmFKEe92WhnuNdw9KgRvr --server-tracking-blob=ZWY4ZTc2MDNhYmMyOGRmMWU1YzI2MmRlMjQwM2RhNzRmMzA5Yzc1OTNlYmY3YWY1YTE1YTEyZGFmZGY2YjI0OTp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cyIsInRpbWVzdGFtcCI6IjE3ODMwNzY0MTUuNDcxMSIsInVzZXJhZ2VudCI6InB5dGhvbi1yZXF1ZXN0cy8yLjMyLjMiLCJ1dG0iOnt9LCJ1dWlkIjoiZmU2ZTU0MjAtZWMzOC00YzhjLTg4ODgtZTlhNmJhZDUxZjY1In0=
            4⤵
            • Downloads MZ/PE file
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies system certificate store
            • Suspicious use of WriteProcessMemory
            PID:1848
            • C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe
              C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x274,0x278,0x27c,0x250,0x280,0x7ff66ae2ad88,0x7ff66ae2ad94,0x7ff66ae2ada0
              5⤵
              • Executes dropped EXE
              PID:4772
            • C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\installer.exe" --version
              5⤵
              • Executes dropped EXE
              PID:4216
            • C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe
              "C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1848 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_20260707131425" --session-guid=5ab2fb56-0d68-4784-a40b-4b1099af8510 --server-tracking-blob=MTliNTc1YTM2NDJjNGY5NTFjYTNkMWFlZTJkYzJhOTcwNDYxYjc0YjIwOWY5MGZmZWZjODNjYTY2YzAwNGU2Yzp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cyIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjEwIiwicGFja2FnZSI6IkVYRSJ9fSwidGltZXN0YW1wIjoiMTc4MzA3NjQxNS40NzExIiwidXNlcmFnZW50IjoicHl0aG9uLXJlcXVlc3RzLzIuMzIuMyIsInV0bSI6eyJjYW1wYWlnbiI6ImEiLCJpZCI6ImFnaVNmTmRFZ2JnSTlWdFpFUXFxdzlDQnVQenZIWXJwckxQR2FHZ3p3T3NLNDFrYVdFUHFka1dZS1gycVpTbUZLRWU5MldobnVOZHc5S2dSdnIiLCJtZWRpdW0iOiJhcGIiLCJzb3VyY2UiOiJhaXMifSwidXVpZCI6ImZlNmU1NDIwLWVjMzgtNGM4Yy04ODg4LWU5YTZiYWQ1MWY2NSJ9 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=2C08000000000000
              5⤵
              • Executes dropped EXE
              • Enumerates connected drives
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:4940
              • C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe
                C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x288,0x28c,0x290,0x238,0x294,0x7ff66ae2ad88,0x7ff66ae2ad94,0x7ff66ae2ada0
                6⤵
                • Executes dropped EXE
                PID:1816
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe" --backend --initial-pid=1848 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251" --session-guid=5ab2fb56-0d68-4784-a40b-4b1099af8510 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.24
                6⤵
                • Executes dropped EXE
                • Suspicious use of WriteProcessMemory
                PID:672
                • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x7ff63cc7ad88,0x7ff63cc7ad94,0x7ff63cc7ada0
                  7⤵
                  • Executes dropped EXE
                  PID:2920
                • C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe
                  "C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                  7⤵
                    PID:4780
                    • C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe
                      "C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x934040,0x93404c,0x934058
                      8⤵
                        PID:1548
                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                        8⤵
                          PID:3348
                          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                            C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x228,0x22c,0x230,0x204,0x234,0xa74040,0xa7404c,0xa74058
                            9⤵
                              PID:1152
                            • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                              9⤵
                                PID:3248
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                  10⤵
                                    PID:2964
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                      11⤵
                                        PID:4156
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                      10⤵
                                        PID:4104
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x20c,0x258,0x25c,0x208,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                          11⤵
                                            PID:4468
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                          C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x24c,0x278,0x11fc830,0x11fc83c,0x11fc848
                                          10⤵
                                            PID:4052
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                              11⤵
                                                PID:4064
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                  C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                  12⤵
                                                    PID:1908
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                  11⤵
                                                    PID:2828
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                      12⤵
                                                        PID:5076
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                      11⤵
                                                        PID:4084
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x250,0x254,0x25c,0x24c,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                          12⤵
                                                            PID:5028
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\de932af914ba00303d4a2778a383ac9c831101e2.crx"
                                                  7⤵
                                                    PID:2172
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                      8⤵
                                                        PID:4012
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,5216991943196013062,6444705042239391294,262144 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1952 /prefetch:2
                                                        8⤵
                                                          PID:5248
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2208,i,1912809917954893959,8540219057203088629,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2212 /prefetch:3
                                                          8⤵
                                                          • System Time Discovery
                                                          PID:5292
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2460,i,5481389717454552315,17594549371302169695,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2472 /prefetch:8
                                                          8⤵
                                                            PID:5412
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3496,i,4138876264666572503,16297801741437131179,2097152 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3920 /prefetch:2
                                                            8⤵
                                                              PID:5924
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3544,i,1626492691943392987,11593741202757025115,2097152 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4012 /prefetch:2
                                                              8⤵
                                                                PID:5932
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3884,i,17140155479166387626,12421078303279353828,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4040 /prefetch:8
                                                                8⤵
                                                                  PID:5940
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4492,i,2941130943525052137,3110113073917826889,2097152 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4512 /prefetch:2
                                                                  8⤵
                                                                    PID:6112
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3528,i,15715112028136407360,742903773634754403,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4832 /prefetch:8
                                                                    8⤵
                                                                      PID:5824
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3708,i,13449288341166996745,14786906621988798820,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4944 /prefetch:8
                                                                      8⤵
                                                                        PID:5276
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4940,i,12074011094681081744,67126260440103718,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5104 /prefetch:8
                                                                        8⤵
                                                                          PID:6364
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                                                                        7⤵
                                                                          PID:7424
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x250,0x254,0x258,0x230,0x25c,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                                            8⤵
                                                                              PID:7484
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1920,i,5305285049475321999,4942759106300760285,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2124 /prefetch:3
                                                                              8⤵
                                                                              • System Time Discovery
                                                                              PID:7972
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,5581352642195252681,15691084085127708891,262144 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2088 /prefetch:2
                                                                              8⤵
                                                                                PID:7984
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2532,i,4947481517099459807,13770629406188487220,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2448 /prefetch:8
                                                                                8⤵
                                                                                  PID:8084
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2696,i,1596721829733559966,11091347320809875280,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3416 /prefetch:8
                                                                                  8⤵
                                                                                    PID:7088
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3340,i,13441066681183624946,6569789209544492201,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3436 /prefetch:8
                                                                                    8⤵
                                                                                      PID:6176
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3376,i,10921280241674918457,11751498726201112325,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3496 /prefetch:8
                                                                                      8⤵
                                                                                        PID:6184
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3388,i,12655006035917223767,9118637398618934991,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3516 /prefetch:8
                                                                                        8⤵
                                                                                          PID:6192
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3400,i,14887061169327235268,8106800556344309472,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3536 /prefetch:8
                                                                                          8⤵
                                                                                            PID:6296
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3352,i,6812140399480498996,18062823895153937408,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3428 /prefetch:8
                                                                                            8⤵
                                                                                              PID:5320
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3364,i,6482298455635566857,4959359880827243667,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3476 /prefetch:8
                                                                                              8⤵
                                                                                                PID:5908
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4228,i,15745551613761888567,17274158228569830566,2097152 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4236 /prefetch:1
                                                                                                8⤵
                                                                                                  PID:6096
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_gx_splash.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                                                                                                  8⤵
                                                                                                    PID:6732
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4708,i,6232814533681555712,14435807540770471587,2097152 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4748 /prefetch:2
                                                                                                    8⤵
                                                                                                      PID:5944
                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                                                                5⤵
                                                                                                • Executes dropped EXE
                                                                                                • System Location Discovery: System Language Discovery
                                                                                                PID:3016
                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe" --version
                                                                                                5⤵
                                                                                                • Executes dropped EXE
                                                                                                • Loads dropped DLL
                                                                                                • System Location Discovery: System Language Discovery
                                                                                                • Enumerates system info in registry
                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                PID:2788
                                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x934040,0x93404c,0x934058
                                                                                                  6⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                  PID:4380
                                                                                      • C:\Windows\SysWOW64\DllHost.exe
                                                                                        C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                                                        1⤵
                                                                                          PID:3560
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                          1⤵
                                                                                            PID:2504
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                              2⤵
                                                                                                PID:2732
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                                                                  3⤵
                                                                                                    PID:1812
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                  2⤵
                                                                                                    PID:648
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                                                                      3⤵
                                                                                                        PID:4896
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x24c,0x278,0x11fc830,0x11fc83c,0x11fc848
                                                                                                      2⤵
                                                                                                        PID:3604
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                          3⤵
                                                                                                            PID:3816
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                                                                              4⤵
                                                                                                                PID:5156
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                              3⤵
                                                                                                                PID:5376
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                                                                                  4⤵
                                                                                                                    PID:5884
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                  3⤵
                                                                                                                    PID:6104
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                                                                                      4⤵
                                                                                                                        PID:5816
                                                                                                                • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                  1⤵
                                                                                                                    PID:6616
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                                                                    1⤵
                                                                                                                      PID:7076
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f5000
                                                                                                                        2⤵
                                                                                                                          PID:7136

                                                                                                                      Network

                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                            Replay Monitor

                                                                                                                            Loading Replay Monitor...

                                                                                                                            Downloads

                                                                                                                            saBSI.exe

                                                                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
                                                                                                                            • Size 1.5MB
                                                                                                                            • SHA256 5ec42b168f2541dbb413d6f87aa5569470a2b0c6c574c3e655242461a4524763
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            133.0.5932.24.manifest

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\133.0.5932.24.manifest
                                                                                                                            • Size 225B
                                                                                                                            • SHA256 0c224a50985264cb571fd2c0ed61bc989fd6ecef11c453e2582a226700d6d268
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-100.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-100.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-100_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-140.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-140.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-140_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-180.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-180.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-180_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-80.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-80.png
                                                                                                                            • Size 827B
                                                                                                                            • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            150x150Logo.scale-80_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                            • Size 799B
                                                                                                                            • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-100.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-100.png
                                                                                                                            • Size 781B
                                                                                                                            • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-100_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                            • Size 752B
                                                                                                                            • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-140.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-140.png
                                                                                                                            • Size 991B
                                                                                                                            • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-140_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                            • Size 865B
                                                                                                                            • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-180.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-180.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-180_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-80.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-80.png
                                                                                                                            • Size 590B
                                                                                                                            • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            70x70Logo.scale-80_contrast-white.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                            • Size 519B
                                                                                                                            • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            assistant_package

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\assistant_package
                                                                                                                            • Size 3.6MB
                                                                                                                            • SHA256 476635dedd92ecb61b45179264d0f6f73da81e68e9786c3c4f6c2b8efe540452
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            d3dcompiler_47.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\d3dcompiler_47.dll
                                                                                                                            • Size 4.5MB
                                                                                                                            • SHA256 7133c3fe1899ef81aeb523a22b58598172e5763fb0a27a10ccce4b34566612f7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            dxcompiler.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\dxcompiler.dll
                                                                                                                            • Size 12.8MB
                                                                                                                            • SHA256 d6d1ed568d995f3e6c6bb434c9eb4065ce888387510d65c8d36517be717f3c71
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            dxil.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\dxil.dll
                                                                                                                            • Size 1.5MB
                                                                                                                            • SHA256 d77798ac46e1d6610805033b266320e343d00741cf76049dd96ea5e2d99e39de
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            files_list

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\files_list
                                                                                                                            • Size 6KB
                                                                                                                            • SHA256 df53c99bd75d5a50ab78ca0291b46b2da3dda808c903b90d928e814808205df8
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            headless_command_resources.pak

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\headless_command_resources.pak
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            icudtl.dat

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\icudtl.dat
                                                                                                                            • Size 10.4MB
                                                                                                                            • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            installer.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
                                                                                                                            • Size 8.3MB
                                                                                                                            • SHA256 968128ce27a633a91f092062d5d0a36586dd01129c9e50d420d85b2f69319fb9
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            installer_helper_64.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer_helper_64.exe
                                                                                                                            • Size 639KB
                                                                                                                            • SHA256 adda39e020da8fc8c98fddb668bc07cd3aa3b72a0f96ab9819eafe028844c994
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            libEGL.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\libEGL.dll
                                                                                                                            • Size 492KB
                                                                                                                            • SHA256 47ba65371272562b0510f1b389bb9ff4a0e21845904a4a83958497dead3dc379
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            libGLESv2.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\libGLESv2.dll
                                                                                                                            • Size 7.5MB
                                                                                                                            • SHA256 85e8cf63991c492fc72edd810c239d030656e31de2a04def498b82d5d891cc36
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            bg.pak

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\bg.pak
                                                                                                                            • Size 1005KB
                                                                                                                            • SHA256 8a151c2685798e8c559c4329496eac4845b23bf977c1f10fa97e452617179036
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            bn.pak

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\bn.pak
                                                                                                                            • Size 1.3MB
                                                                                                                            • SHA256 75b433bac6b07c87874885f87d38d6a87dab684310611072e880ea157cebf967
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            ca.pak

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\ca.pak
                                                                                                                            • Size 634KB
                                                                                                                            • SHA256 951a872c07a86b56273a468472edc64ff1fd3072ee92f1b747c2d56862266e9a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            cs.pak

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\cs.pak
                                                                                                                            • Size 633KB
                                                                                                                            • SHA256 1ad3a061c4efeb9719caff31b374f2c7461bbf26dfa83d23378f7d146d6a2961
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            da.pak

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\da.pak
                                                                                                                            • Size 584KB
                                                                                                                            • SHA256 2bce9052d3537685476b030689ddd793045e5d173201192455753a374903a5d3
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            de.pak

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\de.pak
                                                                                                                            • Size 631KB
                                                                                                                            • SHA256 a80aa856a2294dab6291202009ce6fd2c773193e49d1b1baf32bc122fa04cd04
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            el.pak

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\el.pak
                                                                                                                            • Size 1.1MB
                                                                                                                            • SHA256 99f84f005cdf1b39df775920a1d3fcabffe5a1f825edc34e06090afe05f5cb89
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            en-GB.pak

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\en-GB.pak
                                                                                                                            • Size 512KB
                                                                                                                            • SHA256 ef56d4e338e0e86fd3d05fe605fd60af16ff5c070d99a77650a919abf94d3e21
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            browser_assistant.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                            • Size 5.3MB
                                                                                                                            • SHA256 fdd6f367514a8c44bedd7d8cae73120bcab054975df41be2a38f082b9521746a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            opera.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                            • Size 2.9MB
                                                                                                                            • SHA256 bc903cc712c48e440f1f08e189fe05199286ee424550898130207f32fd65516b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Opera Browser.lnk

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\Opera Browser.lnk
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 70bf5eadb96026a008bf6de840038b0855cb4e9fdc33dff68e378badd8299d83
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            additional_file0.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\additional_file0.tmp
                                                                                                                            • Size 2.8MB
                                                                                                                            • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            assistant_installer.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe
                                                                                                                            • Size 2.4MB
                                                                                                                            • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            dbgcore.DLL

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\dbgcore.DLL
                                                                                                                            • Size 222KB
                                                                                                                            • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            dbghelp.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\dbghelp.dll
                                                                                                                            • Size 1.8MB
                                                                                                                            • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            installer_prefs_include.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\installer_prefs_include.json
                                                                                                                            • Size 258B
                                                                                                                            • SHA256 4df02fca40dcacba0957628b0480a4e50bfb55f38cd318b85635c67883526fe5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            installer_prefs_include.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\installer_prefs_include.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 2824bd51a1f2ba0d2b88ab00b71fcd98f8228086a33f95842a11df345c5e28ab
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            installer_prefs_include.json.backup

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\installer_prefs_include.json.backup
                                                                                                                            • Size 243B
                                                                                                                            • SHA256 035dd8fac4285ba7af8dd0d7cc50c21bd77f05f636eca9adff7ed3cfdc50137a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            installer.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe
                                                                                                                            • Size 8.3MB
                                                                                                                            • SHA256 0221deb9031dc461368bc66f1db22c1c6b1d4a291a9f3223f4c3653bbd646e0e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            1111-w-warp-2024.12.760.0-installer.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-9NOZTJDXA9.tmp\1111-w-warp-2024.12.760.0-installer.tmp
                                                                                                                            • Size 4.1MB
                                                                                                                            • SHA256 3a62ae0d102cff66fba0a1f0b9bcdf116ad369c3c4f0212eb21a53c766c75a7d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            100.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\100.png
                                                                                                                            • Size 46KB
                                                                                                                            • SHA256 a6ecce54116936ca27d4be9797e32bf2f3cfc7e41519a23032992970fbd9d3ba
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            101.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\101.png
                                                                                                                            • Size 51KB
                                                                                                                            • SHA256 3f63f320e919830fb21fff8dbd82509ecc8330c89513163daedb1b7687a0a529
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            component0.zip

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component0.zip
                                                                                                                            • Size 515KB
                                                                                                                            • SHA256 cc6f4faf4e8a9f4d2269d1d69a69ea326f789620fb98078cc98597f3cb998589
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            saBSI.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component0_extract\saBSI.exe
                                                                                                                            • Size 1.1MB
                                                                                                                            • SHA256 f5aa950381fbcea7d730aa794974ca9e3310384a95d6cf4d015fbdbd9797b3e4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            component1.zip

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component1.zip
                                                                                                                            • Size 3.1MB
                                                                                                                            • SHA256 6e78567c5eb7162b9c69edbba762db7c427c3f02543ef25c828948f5e4abb41d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            OperaSetup.exe

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component1_extract\OperaSetup.exe
                                                                                                                            • Size 3.1MB
                                                                                                                            • SHA256 030befec0a28196a12a7b05eceb12cd0b5776e63f65fb4eed56202ff9e08bc15
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            favicon_opera_one.png

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2172_1266410128\CRX_INSTALL\favicon_opera_one.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2172_1266410128\CRX_INSTALL\manifest.json
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 64620e875ac18f8a5dfb0a403c8f9307a14c7f1b3278b7801bfa1c21f3365c71
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            service_worker.js

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2172_1266410128\CRX_INSTALL\service_worker.js
                                                                                                                            • Size 74KB
                                                                                                                            • SHA256 1480798b974b29c617d9ebb4b4408f1eea9febbcde0083373cf8d178dca1b6cb
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            de932af914ba00303d4a2778a383ac9c831101e2.crx

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2172_1266410128\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                                                            • Size 4.2MB
                                                                                                                            • SHA256 9527f8a88118af8921b40c59fee22654dbf169a96d6a8febd2d0bb83363b1b4a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            settings.dat

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                            • Size 40B
                                                                                                                            • SHA256 1f3b315a55bead1cb49e8d68f4979d77ed30b6e3962ed64e6d23f7bae6de5ee1
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            79b839a6-7081-4820-8010-c07105400e89.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\79b839a6-7081-4820-8010-c07105400e89.tmp
                                                                                                                            • Size 203B
                                                                                                                            • SHA256 2ec46e4dd0b255ed1538d05c358291616634dc7e61dc35973d307dbc76eb84bc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            80dc9374-4471-4ada-881f-dda0d55a4d4e.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\80dc9374-4471-4ada-881f-dda0d55a4d4e.tmp
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 08f0bb3822f125ec1e57290d02eba9d6e9e030e0c94de3494a986cd0f92409ca
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                            • Size 48B
                                                                                                                            • SHA256 3bebb08f2605b0e2930af0330e688f85f4e0fdf365466fbfaf9c978946568a97
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                            • Size 264B
                                                                                                                            • SHA256 fc411c0fe43c26a72118e4c1217e52f10cd1210cb7c23e230dc9ff074d8501fb
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            data_0

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                            data_2

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                            data_3

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                            MANIFEST-000001

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                                            • Size 41B
                                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            reader_mode.js

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir2172_2130218876\CRX_INSTALL\reader_mode.js
                                                                                                                            • Size 112KB
                                                                                                                            • SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            spotify_frame_interceptor.js

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir2172_2130218876\CRX_INSTALL\spotify_frame_interceptor.js
                                                                                                                            • Size 5KB
                                                                                                                            • SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            favicon_opera_one.png

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\favicon_opera_one.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            734716ea-18f9-4ccd-9be8-39c2f8421ffc.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\734716ea-18f9-4ccd-9be8-39c2f8421ffc.tmp
                                                                                                                            • Size 72B
                                                                                                                            • SHA256 43f4f78984468cb8962e85e8f50dd53d2d9610cc72abfa24ed3f5b6155686524
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                            • Size 48B
                                                                                                                            • SHA256 1a93f368b9028d78a66f129dbf963893a05251b374677117bbd018aa5f8afb5c
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            7ff9b52e-a617-4668-8e49-5277aad1603b.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\7ff9b52e-a617-4668-8e49-5277aad1603b.tmp
                                                                                                                            • Size 445B
                                                                                                                            • SHA256 b733904b74ec5b5c5864b3feab7b267aab3e625a7853f31f7187db5e51494a10
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
                                                                                                                            • Size 861B
                                                                                                                            • SHA256 d379999d38b731aa8feb7172ff4ae64b23fb9968a233570116ed0d53bb427eeb
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
                                                                                                                            • Size 861B
                                                                                                                            • SHA256 bfbd7a27c01446854299062a3850439033d4b91d739f343b7d64289a40e7370e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
                                                                                                                            • Size 1021B
                                                                                                                            • SHA256 296234114b635bd129e8c86fcb2c2ad023edf13df4c6784bf6b920f3b6386b68
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 84c7ae188c9f754dac930024a2a30e1bca85e6f2367d98d0280984c4aa19bf74
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
                                                                                                                            • Size 557B
                                                                                                                            • SHA256 cd5e0e5287e4e23bde8dd867143b702ca5b65d12a465496f518fec803ad735ac
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
                                                                                                                            • Size 685B
                                                                                                                            • SHA256 bba359a49e7b5d64e726f6512152f5d75327cefd2284a73300a3ce7f589aeb45
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
                                                                                                                            • Size 845B
                                                                                                                            • SHA256 32d2c13b80f221b7a9c574f08b6573e3a2335f40f431939527fbdea43524cc2e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 9fe0ec4cb42fad8545937b5bb3403d94b888539eff614fcebe855920cd611dca
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 939ef53c91e0822cf2431841c82b02e81340e6952744a21c444a464007d42c89
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 724797d6da7349de5d2b7acffa218c102f0b44679a230bbefafb1e0be27ae341
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            CURRENT

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                                                                            • Size 16B
                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            ssdfp2172.0.1288586805

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2172.0.1288586805
                                                                                                                            • Size 265B
                                                                                                                            • SHA256 1aae5b9387385e8337a6e59da8dda9900135d350ef04a95eec8db1b49e287ab8
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp2172.0.1288586805

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2172.0.1288586805
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 1eb58d200b683393ec24c4bca88f864aa5a02917cad7ca0c570a0c8c191dfc89
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ssdfp2172.0.1288586805

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2172.0.1288586805
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 625e3bbea1072c2ef22b57e53f1558a61b3cd23ac13c112cf62259204d2da0e7
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            data_1

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                                                                            • Size 264KB
                                                                                                                            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP

                                                                                                                            memory/1544-0-0x0000000000370000-0x000000000044C000-memory.dmp

                                                                                                                            memory/1544-7-0x0000000000370000-0x000000000044C000-memory.dmp

                                                                                                                            memory/2108-25-0x0000000003480000-0x00000000035C0000-memory.dmp

                                                                                                                            memory/2108-34-0x0000000003480000-0x00000000035C0000-memory.dmp

                                                                                                                            memory/2108-8-0x0000000000E20000-0x0000000001256000-memory.dmp

                                                                                                                            memory/2108-15-0x0000000000E20000-0x0000000001256000-memory.dmp

                                                                                                                            memory/2108-20-0x0000000003480000-0x00000000035C0000-memory.dmp

                                                                                                                            memory/2108-5-0x0000000002FC0000-0x0000000002FC1000-memory.dmp

                                                                                                                            memory/2108-21-0x0000000003480000-0x00000000035C0000-memory.dmp

                                                                                                                            memory/2108-26-0x0000000003480000-0x00000000035C0000-memory.dmp

                                                                                                                            memory/2108-28-0x0000000000E20000-0x0000000001256000-memory.dmp

                                                                                                                            memory/2108-29-0x0000000003480000-0x00000000035C0000-memory.dmp

                                                                                                                            memory/2108-33-0x0000000003480000-0x00000000035C0000-memory.dmp

                                                                                                                            memory/2108-9-0x0000000002FC0000-0x0000000002FC1000-memory.dmp

                                                                                                                            memory/2108-35-0x0000000003480000-0x00000000035C0000-memory.dmp

                                                                                                                            memory/2108-37-0x0000000000E20000-0x0000000001256000-memory.dmp

                                                                                                                            memory/2108-42-0x0000000003480000-0x00000000035C0000-memory.dmp

                                                                                                                            memory/2108-41-0x0000000000E20000-0x0000000001256000-memory.dmp

                                                                                                                            memory/2108-144-0x0000000000E20000-0x0000000001256000-memory.dmp

                                                                                                                            memory/2108-131-0x0000000003480000-0x00000000035C0000-memory.dmp

                                                                                                                            memory/5248-2339-0x00000238CE9E0000-0x00000238D0259000-memory.dmp

                                                                                                                            memory/5412-588-0x00007FFA0E9F0000-0x00007FFA0E9F1000-memory.dmp

                                                                                                                            memory/5412-589-0x00007FFA0E070000-0x00007FFA0E071000-memory.dmp