Overview

overview

6

Static

static

1

OperaInsta...1).exe

windows10-2004-x64

6

OperaInsta...1).exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/07/2026, 10:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller (1).exe
  • Size 178KB
  • Sample260710-mfxc8aaw2x
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Downloads MZ/PE file 2 IoCs
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 21 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 10 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 44 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 14 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller (1).exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller (1).exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2988
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5000
      • C:\Users\Admin\AppData\Local\Temp\7zS883D8638\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS883D8638\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Enumerates connected drives
        • Executes dropped EXE
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:1664
        • C:\Users\Admin\AppData\Local\Temp\7zS883D8638\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS883D8638\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff65febad88,0x7ff65febad94,0x7ff65febada0
          4⤵
          • Executes dropped EXE
          PID:3840
        • C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:3524
        • C:\Users\Admin\AppData\Local\Temp\7zS883D8638\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS883D8638\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1664 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_20260710112540" --session-guid=2c9220d0-35d1-4c1b-94ba-24d27a1c5d74 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=3407000000000000
          4⤵
          • Enumerates connected drives
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:3812
          • C:\Users\Admin\AppData\Local\Temp\7zS883D8638\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS883D8638\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff65febad88,0x7ff65febad94,0x7ff65febada0
            5⤵
            • Executes dropped EXE
            PID:3036
          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe" --backend --initial-pid=1664 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401" --session-guid=2c9220d0-35d1-4c1b-94ba-24d27a1c5d74 --server-tracking-blob=MGYyOGM4NDdlZjA5YTc1ZTNlMmE0ODU2NmEwYmIwNmI3YmFhMjlhYWQ0Zjg5MDM3N2U0MDhjNWM2ODU2ZTc4ZDp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzgzNjc5MTM2Ljc2MTMiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiJjZDYyNDhjMy02MDAyLTQyNzgtOWZiNC1kNzE5MDVlY2JkYjcifQ== --silent --desktopshortcut=1 --install-subfolder=133.0.5932.34
            5⤵
            • Enumerates connected drives
            • Executes dropped EXE
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:2588
            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff61983ad88,0x7ff61983ad94,0x7ff61983ada0
              6⤵
              • Executes dropped EXE
              PID:2996
            • C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:3860
              • C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x534040,0x53404c,0x534058
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4776
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:4112
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x1204040,0x120404c,0x1204058
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:3284
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:4172
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:1788
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x258,0x25c,0x260,0x238,0x264,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                      10⤵
                      • Executes dropped EXE
                      PID:1500
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:4100
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x25c,0x260,0x264,0x254,0x268,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                      10⤵
                      • Executes dropped EXE
                      PID:2332
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0xe3c830,0xe3c83c,0xe3c848
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:3604
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:3052
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                        11⤵
                        • Executes dropped EXE
                        PID:5084
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:4108
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                        11⤵
                        • Executes dropped EXE
                        PID:4308
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:3060
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x254,0x258,0x260,0x250,0x264,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                        11⤵
                        • Executes dropped EXE
                        PID:5216
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Program Files directory
              • Executes dropped EXE
              • Loads dropped DLL
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:2520
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                7⤵
                • Executes dropped EXE
                PID:4388
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1736,i,8378012403636944622,6273429810664955672,262144 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1940 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4548
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2172,i,4620320103569176143,9289293842150374747,524288 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2184 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                PID:5136
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2456,i,10120315203141576336,2445538994938468185,524288 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2472 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5232
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3876,i,16004456018510989069,7995765524711577010,2097152 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3892 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5792
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4280,i,704805689313959829,13019455150143081638,524288 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4292 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6044
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4288,i,8124260348282474805,14112603362243497745,2097152 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4304 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6052
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4320,i,13687738002864905564,6935036550296704098,2097152 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3852 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:5500
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4024,i,2371375034174547390,8821263831871448221,524288 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4716 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5624
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4980,i,10387183822492700933,13390485118432481772,524288 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4992 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5696
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4668,i,6377458626583310060,13588970309442130493,524288 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5096 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5396
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5272,i,14412364441768645985,18072068379660916164,2097152 --field-trial-handle=1948,i,4352847174576769409,951341921075309167,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5783041797343248461,17159851997811934740,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5252 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:8068
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\additional_file2.tmp"
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Program Files directory
              • Executes dropped EXE
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:6496
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                7⤵
                • Executes dropped EXE
                PID:7184
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2008,i,13457261863768882223,2546711455450386633,524288 --field-trial-handle=2100,i,5919425476276749091,7353115677867976624,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,246339374208620100,7517924316279491193,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2132 /prefetch:3
                7⤵
                • Executes dropped EXE
                • System Time Discovery
                PID:8060
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1736,i,1208099365095160324,3743064376798241560,262144 --field-trial-handle=2100,i,5919425476276749091,7353115677867976624,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,246339374208620100,7517924316279491193,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2096 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7004
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2516,i,3466194757577237619,5739613693742195642,524288 --field-trial-handle=2100,i,5919425476276749091,7353115677867976624,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,246339374208620100,7517924316279491193,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2716 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7424
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Program Files directory
              • Executes dropped EXE
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:8020
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                7⤵
                • Executes dropped EXE
                PID:8044
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1728,i,1593676533840413473,887918398617534716,262144 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2044 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7932
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1956,i,13377112294652603101,888378423440137916,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2100 /prefetch:3
                7⤵
                • Executes dropped EXE
                • System Time Discovery
                • Enumerates system info in registry
                PID:7956
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2492,i,15485979278137790010,14467841024906485972,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2504 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8148
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3172,i,2307422894417298188,12260850170912286067,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3316 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:8156
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3228,i,16582039745658897670,2631078270605988763,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3336 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:8144
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3232,i,5787849482131543138,15200337567255822107,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3356 /prefetch:8
                7⤵
                  PID:6388
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3284,i,11681515588699919578,2671658046917474543,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3436 /prefetch:8
                  7⤵
                    PID:6456
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3248,i,16747629325037227004,6414310274871911658,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3376 /prefetch:8
                    7⤵
                      PID:6132
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3212,i,6528575896208238497,3916932161562726448,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3396 /prefetch:8
                      7⤵
                        PID:8188
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3272,i,4536277245439213019,13366421690319617493,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3416 /prefetch:8
                        7⤵
                          PID:8184
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4212,i,5110549055150894789,8480062216121012872,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4228 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:7064
                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_gx_splash.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                          7⤵
                          • Modifies registry class
                          • Suspicious use of AdjustPrivilegeToken
                          PID:6340
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4540,i,16744245050411630416,3612119201578727901,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4700 /prefetch:2
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:6264
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4856,i,5241423687710471561,2560063541543119790,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4876 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:7068
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5156,i,10645156551705037370,14291128762943755415,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5168 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:3616
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5300,i,10761262785587024156,5834701020028101427,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5296 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:5488
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6072,i,6217644329408425012,4786831473003650859,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6100 /prefetch:2
                          7⤵
                          • Checks computer location settings
                          PID:8068
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6644,i,2184057554933678205,2774593728870153066,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6632 /prefetch:2
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:5348
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6880,i,1558781674809653676,13309179861986254773,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6712 /prefetch:2
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:5820
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6528,i,8235961780858664779,8143992998531715476,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=7036 /prefetch:8
                          7⤵
                            PID:5792
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6468,i,11207386523703544620,1659578959147831111,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7040 /prefetch:1
                            7⤵
                            • Checks computer location settings
                            • Enumerates system info in registry
                            PID:7244
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7320,i,3988680145406578459,15167378505439569945,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7328 /prefetch:8
                            7⤵
                              PID:7568
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7336,i,201642758206531446,11632172429970272244,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7376 /prefetch:8
                              7⤵
                              • Enumerates system info in registry
                              PID:5716
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7348,i,1354469645849369725,10134861777315624130,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7396 /prefetch:8
                              7⤵
                              • Enumerates system info in registry
                              PID:7708
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7744,i,16399247840395291863,9271806237305665470,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7740 /prefetch:8
                              7⤵
                                PID:7732
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7888,i,7681975783661744367,17627132146912204412,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7768 /prefetch:8
                                7⤵
                                  PID:7364
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8000,i,15416017537230750805,14160597684098580005,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7996 /prefetch:8
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:7180
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8152,i,14978872933325303418,11205249139733035161,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8040 /prefetch:8
                                  7⤵
                                    PID:7264
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8312,i,14579043667423143837,3352761872645266108,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8344 /prefetch:8
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:7284
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8332,i,10896812048110353934,4527506694201631150,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8364 /prefetch:8
                                    7⤵
                                      PID:7304
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8316,i,8722573385942694279,2377799921831479557,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8300 /prefetch:8
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:7344
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8736,i,3461699915868544595,15453501955879417260,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8708 /prefetch:8
                                      7⤵
                                        PID:5708
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8860,i,12604879331419022578,3009064180613255105,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8868 /prefetch:8
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:7128
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8988,i,15416882044432228255,14662206778958195809,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9004 /prefetch:8
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:7056
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9036,i,11813422162625229033,11397848458953303043,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9044 /prefetch:8
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:7052
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9272,i,14765462109338681748,13883671131118364013,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9280 /prefetch:8
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:1736
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9420,i,11170921772237515716,17662746917881049069,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9476 /prefetch:2
                                        7⤵
                                        • Checks computer location settings
                                        • Enumerates system info in registry
                                        PID:4760
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9596,i,11645716535062716481,15277401231761047093,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9604 /prefetch:8
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:6620
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7088,i,7247925566500050660,17108756059183617429,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9732 /prefetch:8
                                        7⤵
                                          PID:5532
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9816,i,7452020276415079663,13546457026911165330,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9812 /prefetch:8
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:6364
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10496,i,16157978659371328854,5537586133411240220,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10504 /prefetch:8
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:8468
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                          7⤵
                                            PID:8548
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                              C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff6b0d88860,0x7ff6b0d8886c,0x7ff6b0d88878
                                              8⤵
                                                PID:8820
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10680,i,2748599899585040442,12009090512765135201,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10696 /prefetch:8
                                              7⤵
                                                PID:8592
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10700,i,12768397800530061226,3736147855172502972,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10836 /prefetch:8
                                                7⤵
                                                  PID:8672
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=9428,i,15921736124456871264,12676746329230365875,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11044 /prefetch:1
                                                  7⤵
                                                  • Checks computer location settings
                                                  • Enumerates system info in registry
                                                  PID:9144
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe" --fix-taskbar-pins
                                                  7⤵
                                                    PID:7164
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff61983ad88,0x7ff61983ad94,0x7ff61983ada0
                                                      8⤵
                                                        PID:6652
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5496,i,12771378678862645214,1055901384896382864,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=3556 /prefetch:8
                                                      7⤵
                                                        PID:6488
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11180,i,11244716594740879665,4892305720790199727,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11188 /prefetch:8
                                                        7⤵
                                                        • Enumerates system info in registry
                                                        PID:5848
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4296,i,15109604162963025489,17606757411135989007,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=9412 /prefetch:8
                                                        7⤵
                                                          PID:7372
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6420,i,8323261767599829855,9016152009538612344,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11336 /prefetch:8
                                                          7⤵
                                                          • Enumerates system info in registry
                                                          PID:8400
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10452,i,7184210873055607349,11717328186467792718,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=7352 /prefetch:8
                                                          7⤵
                                                            PID:8220
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=7880,i,18236904073776453130,2341871449976529775,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=6512 /prefetch:2
                                                            7⤵
                                                            • Checks computer location settings
                                                            • Enumerates system info in registry
                                                            PID:4816
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6400,i,11855665938201989997,4757265083992364440,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=7484 /prefetch:8
                                                            7⤵
                                                              PID:1816
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6364,i,2479071052856192339,3758729255497796341,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=6920 /prefetch:8
                                                              7⤵
                                                              • Enumerates system info in registry
                                                              PID:8376
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10828,i,3920498777696038030,5408753401672109526,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10808 /prefetch:8
                                                              7⤵
                                                                PID:7520
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9816,i,16577456436991593231,8699986537488939127,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=9964 /prefetch:8
                                                                7⤵
                                                                • Enumerates system info in registry
                                                                PID:7072
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=8292,i,16806940141465660153,7266637264567141733,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=7652 /prefetch:2
                                                                7⤵
                                                                • Checks computer location settings
                                                                PID:764
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8396,i,517648662761904770,12993704204942720311,524288 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=10960 /prefetch:8
                                                                7⤵
                                                                • Enumerates system info in registry
                                                                PID:2492
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=5492,i,4809370242161020005,15481066104916640909,2097152 --field-trial-handle=2052,i,14605155876045819095,9493467267503535795,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,4386756905139369662,11798871449443503866,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=7720 /prefetch:2
                                                                7⤵
                                                                • Checks computer location settings
                                                                • Enumerates system info in registry
                                                                PID:6416
                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                          4⤵
                                                          • Executes dropped EXE
                                                          • System Location Discovery: System Language Discovery
                                                          PID:2332
                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\assistant_installer.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\assistant_installer.exe" --version
                                                          4⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • System Location Discovery: System Language Discovery
                                                          • Enumerates system info in registry
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:2528
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\assistant_installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x534040,0x53404c,0x534058
                                                            5⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            PID:2644
                                                  • C:\Windows\SysWOW64\DllHost.exe
                                                    C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                    1⤵
                                                    • System Location Discovery: System Language Discovery
                                                    • Suspicious use of SetWindowsHookEx
                                                    PID:1240
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                    1⤵
                                                    • Executes dropped EXE
                                                    • Loads dropped DLL
                                                    • System Location Discovery: System Language Discovery
                                                    • Enumerates system info in registry
                                                    • Suspicious use of FindShellTrayWindow
                                                    • Suspicious use of SendNotifyMessage
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:2612
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                      2⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:3672
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x250,0x258,0x25c,0x254,0x260,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                                                        3⤵
                                                        • Executes dropped EXE
                                                        PID:3648
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                      2⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:1980
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                                                        3⤵
                                                        • Executes dropped EXE
                                                        PID:3760
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x24c,0x278,0xe3c830,0xe3c83c,0xe3c848
                                                      2⤵
                                                      • Executes dropped EXE
                                                      • Loads dropped DLL
                                                      • System Location Discovery: System Language Discovery
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:4168
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                        3⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:4184
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                                                          4⤵
                                                          • Executes dropped EXE
                                                          PID:5124
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                        3⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:5436
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                                                          4⤵
                                                          • Executes dropped EXE
                                                          PID:5720
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                        3⤵
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:5356
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                          C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                                                          4⤵
                                                          • Executes dropped EXE
                                                          PID:5928
                                                  • C:\Windows\system32\wbem\unsecapp.exe
                                                    C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                    1⤵
                                                      PID:6732
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                      1⤵
                                                      • Executes dropped EXE
                                                      • Enumerates system info in registry
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:7116
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe
                                                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffd713f2260,0x7ffd713f2270,0x7ffd713f2280
                                                        2⤵
                                                        • Executes dropped EXE
                                                        PID:5616
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                      1⤵
                                                        PID:8808
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff6b0d88860,0x7ff6b0d8886c,0x7ff6b0d88878
                                                          2⤵
                                                            PID:9120
                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                            2⤵
                                                              PID:2968

                                                          Network

                                                                MITRE ATT&CK Enterprise v16

                                                                Reconnaissance

                                                                Resource Development

                                                                Initial Access

                                                                Execution

                                                                Persistence

                                                                Boot or Logon Autostart Execution

                                                                1
                                                                T1547

                                                                Registry Run Keys / Startup Folder

                                                                1
                                                                T1547.001

                                                                Event Triggered Execution

                                                                1
                                                                T1546

                                                                Component Object Model Hijacking

                                                                1
                                                                T1546.015

                                                                Privilege Escalation

                                                                Boot or Logon Autostart Execution

                                                                1
                                                                T1547

                                                                Registry Run Keys / Startup Folder

                                                                1
                                                                T1547.001

                                                                Event Triggered Execution

                                                                1
                                                                T1546

                                                                Component Object Model Hijacking

                                                                1
                                                                T1546.015

                                                                Defense Evasion

                                                                Modify Registry

                                                                3
                                                                T1112

                                                                Subvert Trust Controls

                                                                1
                                                                T1553

                                                                Install Root Certificate

                                                                1
                                                                T1553.004

                                                                Credential Access

                                                                Credentials from Password Stores

                                                                1
                                                                T1555

                                                                Credentials from Web Browsers

                                                                1
                                                                T1555.003

                                                                Unsecured Credentials

                                                                1
                                                                T1552

                                                                Credentials In Files

                                                                1
                                                                T1552.001

                                                                Discovery

                                                                Peripheral Device Discovery

                                                                1
                                                                T1120

                                                                Query Registry

                                                                6
                                                                T1012

                                                                System Information Discovery

                                                                5
                                                                T1082

                                                                System Location Discovery

                                                                1
                                                                T1614

                                                                System Language Discovery

                                                                1
                                                                T1614.001

                                                                System Time Discovery

                                                                1
                                                                T1124

                                                                Lateral Movement

                                                                Collection

                                                                Data from Local System

                                                                1
                                                                T1005

                                                                Command and Control

                                                                Exfiltration

                                                                Impact

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                opera-one.jpg
                                                                • Path C:\Program Files\scoped_dir8020_683542649\opera-one.jpg
                                                                • Size 194KB
                                                                • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                persona.ini
                                                                • Path C:\Program Files\scoped_dir8020_683542649\persona.ini
                                                                • Size 207B
                                                                • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                • Size 1KB
                                                                • SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                B46811C17859FFB409CF0E904A4AA8F8
                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                                                • Size 528B
                                                                • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                • Size 471B
                                                                • SHA256 e15fde1c644488d02e6a4274f3a9500140feb05ccda9f2b57af35aacb5e7d347
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                • Size 174B
                                                                • SHA256 86eef43d6d63cf180a4593bf2a543da816200b121892d9c0b8d5bccc9d6e7a4f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                B46811C17859FFB409CF0E904A4AA8F8
                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                                                • Size 170B
                                                                • SHA256 eb6fb27fa20fba7831bd07e051a4f770aa68700de3a0131cd6892d0ca4ca214d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                • Size 416B
                                                                • SHA256 d00b789e21f47d22a6cd2e65f1d379ed48bcadb44c21095531e0adc6373be307
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                133.0.5932.34.manifest
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\133.0.5932.34.manifest
                                                                • Size 225B
                                                                • SHA256 263b6d3a0906d766fb973078f348a9d3efe543a7e58f4c9fb209bacf32500f21
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-100.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-100.png
                                                                • Size 1KB
                                                                • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-100_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-100_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-140.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-140.png
                                                                • Size 1KB
                                                                • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-140_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-140_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-180.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-180.png
                                                                • Size 1KB
                                                                • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-180_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-180_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-80.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-80.png
                                                                • Size 827B
                                                                • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                150x150Logo.scale-80_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-80_contrast-white.png
                                                                • Size 799B
                                                                • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-100.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-100.png
                                                                • Size 781B
                                                                • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-100_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-100_contrast-white.png
                                                                • Size 752B
                                                                • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-140.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-140.png
                                                                • Size 991B
                                                                • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-140_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-140_contrast-white.png
                                                                • Size 865B
                                                                • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-180.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-180.png
                                                                • Size 1KB
                                                                • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-180_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-180_contrast-white.png
                                                                • Size 1KB
                                                                • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-80.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-80.png
                                                                • Size 590B
                                                                • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                70x70Logo.scale-80_contrast-white.png
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-80_contrast-white.png
                                                                • Size 519B
                                                                • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                assistant_package
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\assistant_package
                                                                • Size 3.6MB
                                                                • SHA256 2657d6a8131dd28868151a5f268061b61a735f3628ec9def2a0d910b870a8c36
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                d3dcompiler_47.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\d3dcompiler_47.dll
                                                                • Size 4.5MB
                                                                • SHA256 849d98787d901b52a5f48c96b6bb0d8b4931bcae8478d93dc0be8662d4480ad3
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dxcompiler.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\dxcompiler.dll
                                                                • Size 24.4MB
                                                                • SHA256 0c6d2ef8c5f6f67a193599e26ea2d8e2ba3f7265cb33fecbdc267e298df68aa8
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dxil.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\dxil.dll
                                                                • Size 1.5MB
                                                                • SHA256 e645ad7d3e725216726359ccfbdfcb4206be5799a5deb3a39d79c66047801029
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                files_list
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\files_list
                                                                • Size 6KB
                                                                • SHA256 65ae2b1708851d551a013ed7ec11e3a0ddeb737430aa62a469b5af3e0fac5fca
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                headless_command_resources.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\headless_command_resources.pak
                                                                • Size 2KB
                                                                • SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                icudtl.dat
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\icudtl.dat
                                                                • Size 10.4MB
                                                                • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer.exe
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe
                                                                • Size 8.3MB
                                                                • SHA256 cd7570b5356bbfc8dd323d6cf68cbab8333631e5fe591779407d1edc0999b580
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer_helper_64.exe
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer_helper_64.exe
                                                                • Size 639KB
                                                                • SHA256 3f8f95b35bda9cf3432fd3687d54f61c1854f82e0d30250360db799ccaed2a48
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                libEGL.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\libEGL.dll
                                                                • Size 492KB
                                                                • SHA256 430b9680bd3cd33ba7047a068d0e3d528970d3ac682f75d0cfcefece5ba10bfa
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                libGLESv2.dll
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\libGLESv2.dll
                                                                • Size 7.5MB
                                                                • SHA256 1532791918857fc8ae1d076a05114bf11e9ed9c4a3149d6eb35d2fea1033a430
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                bg.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\bg.pak
                                                                • Size 1009KB
                                                                • SHA256 5c093d5331235d36141d943b4ccf33e73af1c860b9527304ce2a80947f6b9f79
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                bn.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\bn.pak
                                                                • Size 1.3MB
                                                                • SHA256 3143ad5b348c3c583c2d8bb29217db4b21ec4dcc9182679561f0215199a67776
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ca.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\ca.pak
                                                                • Size 635KB
                                                                • SHA256 19dabe0db6bd7ab457a72fb2fc4c61f0ada1469061d053af047b31661b25720c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                cs.pak
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\cs.pak
                                                                • Size 634KB
                                                                • SHA256 1fab3e2f35aba0dc75b35fc8f7d4abb00feafac83fed0e49624b07e90969a7ea
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer_prefs.json
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                • Size 1KB
                                                                • SHA256 e87cb0faba3eb077439a05cec4a853b5ef150825ed474ccb6396477dcd9936aa
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                opera.exe
                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                • Size 2.9MB
                                                                • SHA256 d0606e47a765efb0efd06dbcb796ed6fb4ba0b1fc307270d017122c47e3bdce7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Opera Browser.lnk
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\Opera Browser.lnk
                                                                • Size 1KB
                                                                • SHA256 535e0007212eda2eb8b1137d9729d252e0253d3af8d1ae84fe753ca5613a406a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                additional_file0.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\additional_file0.tmp
                                                                • Size 2.8MB
                                                                • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                assistant_installer.exe
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\assistant_installer.exe
                                                                • Size 2.4MB
                                                                • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dbgcore.dll
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\dbgcore.dll
                                                                • Size 222KB
                                                                • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                dbghelp.dll
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\assistant\dbghelp.dll
                                                                • Size 1.8MB
                                                                • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer_prefs_include.json
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\installer_prefs_include.json
                                                                • Size 239B
                                                                • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                installer_prefs_include.json
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\installer_prefs_include.json
                                                                • Size 1KB
                                                                • SHA256 5ece6a951a866b9342e38897269c5a279e8c54243fac945ebe1db31703d7173f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                installer_prefs_include.json.backup
                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8a992def-ffdd-4b2a-a143-80a4be8c4835 Opera Installer Temp\opera_package_202607101125401\installer_prefs_include.json.backup
                                                                • Size 224B
                                                                • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                5c854f6d-b96c-4df7-892c-0813fb076f82.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\5c854f6d-b96c-4df7-892c-0813fb076f82.tmp
                                                                • Size 2.6MB
                                                                • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                installer.exe
                                                                • Path C:\Users\Admin\AppData\Local\Temp\7zS883D8638\installer.exe
                                                                • Size 8.3MB
                                                                • SHA256 a2e8e9b2e04fe41207c6327b761507631ee22a57e9f84fb1da99760b2d372d65
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                OpInst.exe
                                                                • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                • Size 3.1MB
                                                                • SHA256 233e61bb512ec3b6fa320a1f997beee2c651f0edc1418182a7fada96ac9970bb
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                b6392030-8958-41e2-a632-fbfb0edc3eb7.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\b6392030-8958-41e2-a632-fbfb0edc3eb7.tmp
                                                                • Size 45KB
                                                                • SHA256 c943858b3c313af47b70a38e46a36e5f2ac9f177334384702359c186ccfd9c52
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                bg.png
                                                                • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                • Size 224KB
                                                                • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                c0a99854-6f80-4916-a3ae-9ed70b98eadf.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\c0a99854-6f80-4916-a3ae-9ed70b98eadf.tmp
                                                                • Size 14KB
                                                                • SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                favicon_opera_one.png
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2520_415080612\CRX_INSTALL\favicon_opera_one.png
                                                                • Size 2KB
                                                                • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                manifest.json
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2520_415080612\CRX_INSTALL\manifest.json
                                                                • Size 3KB
                                                                • SHA256 64620e875ac18f8a5dfb0a403c8f9307a14c7f1b3278b7801bfa1c21f3365c71
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                service_worker.js
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2520_415080612\CRX_INSTALL\service_worker.js
                                                                • Size 74KB
                                                                • SHA256 1480798b974b29c617d9ebb4b4408f1eea9febbcde0083373cf8d178dca1b6cb
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2520_415080612\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                • Size 4.2MB
                                                                • SHA256 9527f8a88118af8921b40c59fee22654dbf169a96d6a8febd2d0bb83363b1b4a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Icon_Light_Neutral.png
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir8020_1548445557\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                • Size 2KB
                                                                • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                settings.dat
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                • Size 40B
                                                                • SHA256 f38cd106f8ec96d4f790e8200e0e1f063c1f46a928355dfdbd65173b26c3fbf8
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                441e3da8-6b05-422d-923c-dbbd9eafd283.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\441e3da8-6b05-422d-923c-dbbd9eafd283.tmp
                                                                • Size 87KB
                                                                • SHA256 889bdc61355390e7f2beb4a6663d3a2a776c4b2eb253f94f38636e32b7f56f08
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                4b6ec761-9cc4-47a6-9967-fb9721ffbf7a.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\4b6ec761-9cc4-47a6-9967-fb9721ffbf7a.tmp
                                                                • Size 6B
                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                51b6e942-0e0d-4939-bf5b-2857786ede10.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\51b6e942-0e0d-4939-bf5b-2857786ede10.tmp
                                                                • Size 456B
                                                                • SHA256 32fdd643dea48722154c1f5800837bafefd0dba8295fefcd0bc6503b0dd5b9e2
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                5a6e55c1-7ecb-46f1-8261-e880cfa0bf8f.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\5a6e55c1-7ecb-46f1-8261-e880cfa0bf8f.tmp
                                                                • Size 203B
                                                                • SHA256 7bd4b66675fe042715dee4b5fca172c3f058096b93f2914649c2a60488d31c25
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                68a39873-80b0-4eb1-a6ab-70eeb476afc6.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\68a39873-80b0-4eb1-a6ab-70eeb476afc6.tmp
                                                                • Size 171B
                                                                • SHA256 8ad621c5790e5b3e2ac4ec1fd372842112f1e041ba7a1e19c77a83b8e8b85125
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                71e8d62a-f07d-4932-9388-796c4004073d.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\71e8d62a-f07d-4932-9388-796c4004073d.tmp
                                                                • Size 2B
                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                Bookmarks
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                • Size 36KB
                                                                • SHA256 a86971f72437fd0d6c37bf54cffc7a693ec593c70ce8241b88c87c8d8c42a0a3
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                BookmarksExtras
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                • Size 256KB
                                                                • SHA256 558dc9ed8b18b6a1c927c15f494a0e20405bc2591660ecd234e7c0429ae05bcc
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                7fb92cd7-c4fe-40e8-af74-d4ce7fb0e4fa.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\7fb92cd7-c4fe-40e8-af74-d4ce7fb0e4fa.tmp
                                                                • Size 48B
                                                                • SHA256 3c5d5568f1bd95a796d826ad99d6438b56b0720cff129be7283324f65e9034f0
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                • Size 264B
                                                                • SHA256 1cda029fe0a63c61e1106e291fa9a9f3abff0ef216f17c93efd8fcb6ba41bf8c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                MANIFEST-000001
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                • Size 41B
                                                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                reader_mode.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir2520_693643627\CRX_INSTALL\reader_mode.js
                                                                • Size 112KB
                                                                • SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                spotify_frame_interceptor.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir2520_693643627\CRX_INSTALL\spotify_frame_interceptor.js
                                                                • Size 5KB
                                                                • SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                cos-bridge.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                                                • Size 173B
                                                                • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                cos-content.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                                                • Size 502B
                                                                • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                main.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                                                • Size 47KB
                                                                • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                logo_128.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_128.png
                                                                • Size 7KB
                                                                • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                logo_16.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_16.png
                                                                • Size 653B
                                                                • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                logo_32.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_32.png
                                                                • Size 1KB
                                                                • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                logo_48.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_48.png
                                                                • Size 2KB
                                                                • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                logo_64.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_64.png
                                                                • Size 2KB
                                                                • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                service-worker-loader.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\service-worker-loader.js
                                                                • Size 49B
                                                                • SHA256 4409861989b435ae91707e5c01965f2a6b00d0822da0bcbf6e8a6d1a8df6fc2d
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                favicon_opera_one.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\favicon_opera_one.png
                                                                • Size 2KB
                                                                • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                background.js
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                • Size 86KB
                                                                • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Icon_Light_Neutral.png
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                • Size 2KB
                                                                • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                popup.js.LICENSE.txt
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                • Size 1KB
                                                                • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                rules.json
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                • Size 839B
                                                                • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                3d4c0529-990e-49bc-a2c8-d879163e4239.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\3d4c0529-990e-49bc-a2c8-d879163e4239.tmp
                                                                • Size 27KB
                                                                • SHA256 39bd99139f46534251ca30ee1eafe846edde8f96356642e04b68a9f2af9799b7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                54ccd8bd-7133-4a0f-b0d3-b8d78ab2185b.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\54ccd8bd-7133-4a0f-b0d3-b8d78ab2185b.tmp
                                                                • Size 27KB
                                                                • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                68712090-fb5d-497d-b664-f6088448563f.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\68712090-fb5d-497d-b664-f6088448563f.tmp
                                                                • Size 27KB
                                                                • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                8fd226c3-a732-4c9d-8f88-f213ccf632d3.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\8fd226c3-a732-4c9d-8f88-f213ccf632d3.tmp
                                                                • Size 27KB
                                                                • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                d03067a8-62ca-4890-ab8e-7c14f63efa3c.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\d03067a8-62ca-4890-ab8e-7c14f63efa3c.tmp
                                                                • Size 27KB
                                                                • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ed87fc3b-388b-4894-86f4-b4ae9d95ecab.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\ed87fc3b-388b-4894-86f4-b4ae9d95ecab.tmp
                                                                • Size 27KB
                                                                • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                31587e20-1f57-459b-9771-c8e44520584a.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\31587e20-1f57-459b-9771-c8e44520584a.tmp
                                                                • Size 2B
                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                • Size 10KB
                                                                • SHA256 08bea07445b41f2897c402a15c576393d06ac0e3f51bbaf7e9b9c1b27a776d60
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                • Size 15KB
                                                                • SHA256 c3203555883dcee4944388038f0493e47311d28e6270bc244fc39184146b13c2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                • Size 15KB
                                                                • SHA256 9a330bef74d9867ed744319c6a3d52360a904cae5f9946e4fb9e85ca7f8c365d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Secure Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                • Size 113KB
                                                                • SHA256 cfabd2cbf76762fb94d4ddb13b0eca2a5f59326564552bd440a39b965515fedb
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Secure Preferences
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                • Size 88KB
                                                                • SHA256 dca56e1fd0387ba0bf7a793b8626c87b6721716e23ad46c4b23ce92072ddc25e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                cafa7dbd-44d6-4ed4-ac06-9def91ea76ec.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\cafa7dbd-44d6-4ed4-ac06-9def91ea76ec.tmp
                                                                • Size 72B
                                                                • SHA256 676de32866748d40559dcce2a667134fef15c7d8e576913b86f6d3fb5e8d218c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                • Size 360B
                                                                • SHA256 ce55e237765fbf58b7a4467a7955b9377bf89fb7567ae128d9d88f804763d51a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                • Size 48B
                                                                • SHA256 f0dc56449d166a23744eb239e9eb282b7e2207a57941b9f4c1f1e4642f4051c7
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                8091ef33-02c1-408e-a7e5-1e85a84c46a0.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\8091ef33-02c1-408e-a7e5-1e85a84c46a0.tmp
                                                                • Size 11KB
                                                                • SHA256 94f5cb722ebb7e09234fbe9ebb68bd78c5f609472b1fb4233c355a6ac717e6de
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                9f7c0287-cc3d-41ac-ac1b-954928e38290.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\9f7c0287-cc3d-41ac-ac1b-954928e38290.tmp
                                                                • Size 381B
                                                                • SHA256 ae79243f8716d7404077b3849027ad7792c9fe3e439e2a14c7d5084ae1a4aca1
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                de364c7c-4230-4aa2-aeb0-ca0175993724.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\de364c7c-4230-4aa2-aeb0-ca0175993724.tmp
                                                                • Size 381B
                                                                • SHA256 a6ce8a4805860c4987d4aace414b05336d1f80a85bdc4be7850707a274ca59d1
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Size 941B
                                                                • SHA256 1a5c6a45eae8b1cf0fd6c4b140e5c4a4b00d8ce806b7c3d71281a004011cdb98
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Size 957B
                                                                • SHA256 6a564f968f7e341fb3acc4ad973583f26bc66474f33c109db7b907d865764f71
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Size 1KB
                                                                • SHA256 6f13d199adb1a65bcd6f2e7294e98de95435ce35a5b1df343cb63fc4a32f1013
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Size 493B
                                                                • SHA256 fcf91f94217f36cc45674cb30fdba7b6109130db06a9d671f18a2405d4ded133
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Size 605B
                                                                • SHA256 c2f9473019d3f43d72c09017c073e972a1f2390d637fe9651faa052f8cdbb8eb
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Size 765B
                                                                • SHA256 1925f421965845411b9133282c95ef57cb89f80e624c5a6116c489ab524d47f9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Size 957B
                                                                • SHA256 6e7508bde0d92065af6692aa80c56d53e6a645fe531bdb5ec747a0a24528070b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Size 1KB
                                                                • SHA256 df9644c7b40a871294f644b063f46baacabc608ec80ad1821606e86fbbfdd80e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Size 1KB
                                                                • SHA256 ef43545f9d5f67ef1062ae653ec4b19dac2ecfe38284ac78eb8961c48dcb9030
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5a87b503-a6ac-4510-84a2-73469146ff17.raw
                                                                • Size 1KB
                                                                • SHA256 0ec3c1c1331d678db5c34c9951b42678f680f7b13ac5c824e54a1c8801a996c6
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 6KB
                                                                • SHA256 d03951603f11778be20e978abd910c98022529654af3c721925d38e2d24fdcd6
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 10KB
                                                                • SHA256 cce1a208ba4fe181598324d211d97260ab765f2499581790b83eb6c6bc290016
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 10KB
                                                                • SHA256 d3e0efa697d75bf129627c26748a3c09d96a4470b9e8258ef930c30a479d7332
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 733B
                                                                • SHA256 c90dab409fa3336cbe26f83b2831fb274c946ad6e12c6840e2b6a034c96c4aab
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 de85e4bd787473ac9ff59641ed383ab50891cda84df4227f7d47797b99ffad04
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 6KB
                                                                • SHA256 158a04248a10a509b213d614a866ec3647784a234c3935800d74eb9ca54dccb4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 973B
                                                                • SHA256 87b4875ae3506818a9d11584c4fa6794d0710fef186d30b0cd65e45a3ee33187
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 1KB
                                                                • SHA256 54b17c2398d81724fa0950158157681eb7b14e8160d628519f00eca12fba620d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 1KB
                                                                • SHA256 40f4ac3e520030be90722004d4971c2c8f182da7cde36c9cf8814f1fa8dc0b10
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 1KB
                                                                • SHA256 db0768387524f2b36a768076f97ec75afa3e4dd225dce8fd14b30b5de3dc403d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 1KB
                                                                • SHA256 9d7a52a3bbe0cd18e8801b65253f719802185c708106d9274da3209317a4ae0f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 1KB
                                                                • SHA256 4e9004b8645899cfcd290fd08fc7b854ca19fd119d74ee65d016da932c6c38ee
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 1KB
                                                                • SHA256 86e22cd8da9e200b1ea0b39421d308e53640c387160a64bc0d3f26af94b9b3b1
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 1KB
                                                                • SHA256 d2812b9ac33b33f7a8d9fd9e494978176550b52a3ea4224b0db42f45b612307a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 1KB
                                                                • SHA256 af56dcdfa878d4a5e06a0ad426f7d6132882f3d256a5899b43e0547faf48906b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 1KB
                                                                • SHA256 20fb27581b96bae9b566bb0783c99953894634b8c197edaeb3323307662e6ad3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 7KB
                                                                • SHA256 8af6f4f5f4a69b8952f39ede2f3a9182856f045d81834247dbdff228129225e0
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 a3fcf12c90913009783d81e87ca2bc3a16019770f7377dc08f23fd398018be20
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 b7f1df53315d5da903f6e1ecdb1d7a2afbfe5668b6872e4e978be9fbf540beb0
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 b8920257e2262ae66308fd60d15fb5eeab5ba390cf9df974c2508dc9d250fefe
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 3136797e55f8ec41349ea10d9209d24251f0483660ea6c4734938225cf67e332
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 ee0242d41d12208db145e237a17b4c6e2df899f130e77ba4d2148f45e2ec8ba2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 1167fc29ba6fc0d19c55b89fcad6b75c8f002f5c572f08439ae8111725d5024d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 6ee40c0c4442e8c7397bfa540282ffd86befd6ab9b23568b039645798cbcd917
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 e19536c6ae4b438e63acd347f5f9b80151b88ef9f32ac37cf797b4c21274a355
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 55620ebfb7b4ff4fb4d759c4602b75bcf91cd50cce3e20e23498a6c200599d60
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 80dc424b0909ed46a5b5f2185877c82c5874144858f177de0e52c00dca2b6a1f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 91a152e6b1ffd52c6952f009358ba6d50fd3955172fd058a4f034cb47fdc6839
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 518086e8623352ad272038e2f58d670f0e4a823d38403a51a269661aad80d0bf
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 10KB
                                                                • SHA256 bac827c52705727ba2a57a922a35de34f5fb119fa5320a9f215363e5ca5cf103
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 10KB
                                                                • SHA256 4b00f1b9b41fd273ab1c960e355a4e01789ba761dc0bb7b28c844106ae976f67
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 10KB
                                                                • SHA256 98154eaa9fb0f564b506b1fdb4286453b4ceddfb87509cc02dee8d90b94383e2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 11KB
                                                                • SHA256 3504627cf72835136056d1b8a01404c928032afd9d39997ff012c2c297aa01a6
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 621B
                                                                • SHA256 b0600321574199b48e3bda4bf072dc16162c44266a440ff95c37a91a80e8f4ee
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 7KB
                                                                • SHA256 bc0c61c9ee2bdeed07eed5062b16d45fab7ef8cb34374b36a248654cc7887a2b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 925B
                                                                • SHA256 06be9b66248ff8aa5b185d07444bab15f752b567d660344ff0b17445ad882574
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 8KB
                                                                • SHA256 bff6a2c0e3771f1517f824030d0a6978790aa95c87271d907acd9da9e7feb305
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 8KB
                                                                • SHA256 0da5bc7c3b7a586cde9055866f6b986f7244ca17e577c71385e0a61499ca1cdc
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 b435dbf2df6e5429fd99663d0c22750436851e393936b3b0827f52c9ddfbe7cc
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 10KB
                                                                • SHA256 a0d6df40716acfcc211337bd9ed81965dc05882da4841421480ecb7ff3e9585b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 11KB
                                                                • SHA256 cefd61482595ee35b4f219cf3f432c80c333d942d7e510f3632acf1614b701b2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 11KB
                                                                • SHA256 0d6cf6215130f57fe27c09449923133d01c5c2371989704fbd6de510bb93720b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 11KB
                                                                • SHA256 c4b18250d4c7fb362eddb9c11359263e67dafc1f2d7e60f829145e467a34d729
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 493B
                                                                • SHA256 f978f51f4fc1ebbd2b551680458d33d6ac0e6ef638bd94090ef37247897ad2f3
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 7296858c80a91c0cffeb40f1e7c94b01b873897dbb8002faa2f721dfacc5cf51
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 8KB
                                                                • SHA256 3180d3bbb70f7c309086a51ef431a87a7fbd9fc782668d7823face3d7994e68a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 8KB
                                                                • SHA256 1830b36a8c6c01ae4235522aa145812fd04a6320024cce72e69982f038407aff
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 8108dcdc7616b81fa6eea2c180fdf49e5a225a1331b8a7df788239945b7b4eea
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 8KB
                                                                • SHA256 f6ab147ba169010657f0df915b55ed68c2d6ea668bca86e61c702aaba5b80934
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 c7fcb6b2a9e05efbb856775b2a88931b50486eecfe379da51eb880b3a2441fe7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 11KB
                                                                • SHA256 38751d8eb553a25d66f8afb630edc8f0892de219a9918163d9e1a21a5742165b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 10KB
                                                                • SHA256 877ee534f106fa7c1cee174fa0beebf315f3b8ceb95d852242fd5fa7a30cea99
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 9a48cd3ed18a61058bbd8a56f3865b675f653d921df02f31b3e681c4d160e127
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 8KB
                                                                • SHA256 21d60816d9a66ae6efb01bf46951eba3de18081ad0dbfcc943b8821915df4472
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 8d52e6428552eb151cbec9373d5a682ae317c46c104772a3e2353138bc4993aa
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 9KB
                                                                • SHA256 9914b08fbab39b84eece64e156a34b1b4e0777b68c89e6085a8261a78cc0d5f8
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 11KB
                                                                • SHA256 644459c47b9bd4a1ea9dc33301ac5d948c9952ab63475feb0624550d6d8270be
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 10KB
                                                                • SHA256 1af3e75f61ed670ae8b539f73edd8ea83419d9c829053304b691eb1e350c7acd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 10KB
                                                                • SHA256 0e07f5f0a1fb9a4fc3637989e0ba719e3006519c7126b21e537db61212a765c2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_5cb383e3-9f60-487c-9218-ff5f20188c41.raw
                                                                • Size 10KB
                                                                • SHA256 43593f99265ebd470e0ca3b26ba846b1b29e45c9ade93f55cb34c58748a55e81
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                CURRENT
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                • Size 16B
                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                b3cf4388-20d3-4f8f-943d-f32e17926472.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\b3cf4388-20d3-4f8f-943d-f32e17926472.tmp
                                                                • Size 10KB
                                                                • SHA256 42ca093dbb847c9f90084fb8823bf9154727f8b88953749f18168485841aaa90
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                cb2fd963-d5c5-462d-a42d-d19869e1dbc6.tmp
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\cb2fd963-d5c5-462d-a42d-d19869e1dbc6.tmp
                                                                • Size 608KB
                                                                • SHA256 1e52573a52becea906e46f6ea07aebcf8e24d803bdfb15f12a53e414f16c4cd8
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ssdfp2520.0.1795784446
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2520.0.1795784446
                                                                • Size 1KB
                                                                • SHA256 317b9ce357ef6a48ef46fa95fd27cc682763f0868ee6a58cae6197007b77f0c9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2520.0.1795784446
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2520.0.1795784446
                                                                • Size 265B
                                                                • SHA256 5be3a8a3666d92577ff9829b0b96fa19199f12cfdf06d45234913349e410b54a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp2520.0.1795784446
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2520.0.1795784446
                                                                • Size 2KB
                                                                • SHA256 407cb2cc16cc663213d5a59b4d6c2fdb74b1081565e648058e39dac3e661f5e5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 918B
                                                                • SHA256 30beeaaf591cbf189495f2ea12d4e31e6652291471925ed9ba908799eaad4973
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 1014B
                                                                • SHA256 c83bd76cf805affc74e76d529a638ec29136f17341e87ce0ecf2b1340ab6a3e7
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 1KB
                                                                • SHA256 196ac4089ef82ccd641af19616699b09d18a0c6e6c27f9e61234552515d86187
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 1KB
                                                                • SHA256 07a4ee1947db33af79f21b652a5344fe354eb54ff0500c6120fb01ae0c47aab7
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 1KB
                                                                • SHA256 4b6f4d78036e8fac4ed192f56f112fd6fd604a43db4c2218671f6bca49ad0a7f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 1KB
                                                                • SHA256 3c73aa1291e8f2326fd18b0ee30875850cb8307ea1a6f689fe85383cb76766e0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 1KB
                                                                • SHA256 81e870724013ddbeb4c9e2008892c5ed7e908f9a8518601efd97403d703be574
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 1KB
                                                                • SHA256 661e2afdb4c254b777ceba292aced9fe2cdecd5a0fea86125fce549014ca360f
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 2KB
                                                                • SHA256 ec9edf117fc972841f004d0b2e474e7bfa98d36f004b451f16d2ae333f6a0571
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 3KB
                                                                • SHA256 8f7e3acb809cb4bca0f26ca6dc007238fad3d01ca9fbead37f3b53b3883bd936
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 4KB
                                                                • SHA256 6c0886328f314fa758036b638c9aee1b1947ba37a24c9ec2aa46fce0cfb2b868
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 4KB
                                                                • SHA256 47a87e92f55dfcb687ce66d10f251008958e4588ba48370a71f5480f7dad4144
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 4KB
                                                                • SHA256 670e97e92b77d9debe8a7a0a6331d5d599967270586c6b76025095fd24342a36
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 4KB
                                                                • SHA256 55dfb8db7c83460f04c161751a375a150b358244fd2c77e5d67a7ed7e14faa18
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 4KB
                                                                • SHA256 6c6a22c4d9ff9d77679c0456c6022732d6574ac809b1a7485ab7664235984727
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 549B
                                                                • SHA256 f96be9add252ad3353fa9511fc937cbe011cbdfc1f715b8d8182537c44c1e073
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 1KB
                                                                • SHA256 df8088c01d7219be8ecce8335ce660d91a94220b6eff0bc4d4d5aabbe5253096
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 4KB
                                                                • SHA256 7d847769ec360ff15271173dfc06f638058065c852237d04553dc7214d3b3c7d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 4KB
                                                                • SHA256 0395d681f0a347d957920162f502c05879beaea6b03403b7199d9a90abdf42e8
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 647B
                                                                • SHA256 dee223c20ae83a8d41a5ccd7751309889dc69639953fea357459fa29fd09bede
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 737B
                                                                • SHA256 01cd5307a00e6f96a1070d23a51e4be91ecf3023d7e2a48d6d22c26b216ec85d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.0.514388559
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.0.514388559
                                                                • Size 824B
                                                                • SHA256 5d01181408cefb2cbe364724ce474fdb74e3b2c6bbb0ea27319cf614290f60fb
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                ssdfp8020.1.964101482
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp8020.1.964101482
                                                                • Size 200B
                                                                • SHA256 79e8921ebfb33090accd75215360b51ce725602ff6dd682774a7cb174dcc1f0d
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                data_0
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                • Size 8KB
                                                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                data_1
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                • Size 264KB
                                                                • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                data_2
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_2
                                                                • Size 8KB
                                                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                data_3
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_3
                                                                • Size 8KB
                                                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                • Size 2KB
                                                                • SHA256 c034b16235cc58d7d93ed5ab42881e8cda29b751b90e95b46fb417ef8253ca8c
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                • Size 3KB
                                                                • SHA256 2c2664a657389bc746c1b72e7c7ad54852780b26a86c57215bc818bdb55e50d8
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                assistant_prefs.json
                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                • Size 151B
                                                                • SHA256 0ed535980226fd7212d1ad40efd69a9b0f40c2b732e4b5f3c6ec8e7c77149043
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                memory/5232-455-0x00007FFDA3310000-0x00007FFDA3311000-memory.dmp
                                                                Download

                                                                memory/5232-456-0x00007FFDA4880000-0x00007FFDA4881000-memory.dmp
                                                                Download