Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    105s
  • max time network
    102s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-es
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 02:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample261027-cv81fsce32
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 18 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 49 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3864
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3548
      • C:\Users\Admin\AppData\Local\Temp\7zSCDD3CA29\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSCDD3CA29\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:4684
        • C:\Users\Admin\AppData\Local\Temp\7zSCDD3CA29\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSCDD3CA29\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff79aa1d2d8,0x7ff79aa1d2e8,0x7ff79aa1d2f8
          4⤵
          • Executes dropped EXE
          PID:6080
        • C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:5460
        • C:\Users\Admin\AppData\Local\Temp\7zSCDD3CA29\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSCDD3CA29\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=es --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4684 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_20261027022615" --session-guid=169766ee-2bac-4686-9624-9f3c55838563 --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=1C09000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Suspicious use of WriteProcessMemory
          PID:756
          • C:\Users\Admin\AppData\Local\Temp\7zSCDD3CA29\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSCDD3CA29\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff79aa1d2d8,0x7ff79aa1d2e8,0x7ff79aa1d2f8
            5⤵
            • Executes dropped EXE
            PID:1908
          • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe" --backend --initial-pid=4684 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=es --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151" --session-guid=169766ee-2bac-4686-9624-9f3c55838563 --server-tracking-blob="ODQ4NGFkN2Y1YjU1ZDJkOGU1ZTA2ZWQ5MWIxMmIwZThiNjk0ODhjY2E5ZTIzMDljNjhhMzg4NDhlMmI5NGFmNzp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj12aWRlby1zdHJlYW1pbmciLCJzeXN0ZW0iOnsicGxhdGZvcm0iOnsiYXJjaCI6Ing4Nl82NCIsIm9wc3lzIjoiV2luZG93cyIsIm9wc3lzLXZlcnNpb24iOiIxMSIsInBhY2thZ2UiOiJFWEUifX0sInRpbWVzdGFtcCI6IjE3OTMwNjc5NzIuNDU1OSIsInVzZXJhZ2VudCI6Ik9wZXJhIEluc3RhbGxlci8xLjAiLCJ1dG0iOnsiY2FtcGFpZ24iOiJ2aWRlby1zdHJlYW1pbmciLCJtZWRpdW0iOiJwYiIsInNvdXJjZSI6IndyayJ9LCJ1dWlkIjoiNmZjYWI3NzUtMzI4NC00NmRmLTg2YjUtNzU4NjkzYTMzNzJmIn0= " --silent --desktopshortcut=1 --install-subfolder=138.0.6044.24
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:5460
            • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff7287ad2d8,0x7ff7287ad2e8,0x7ff7287ad2f8
              6⤵
              • Executes dropped EXE
              PID:4552
            • C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:4968
              • C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xecc9cc,0xecc9d8,0xecc9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:5064
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:2204
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x120c9cc,0x120c9d8,0x120c9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:3796
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:1760
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5676
                    • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff9169368a0,0x7ff9169368b0,0x7ff9169368c0
                      10⤵
                      • Executes dropped EXE
                      PID:4208
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5784
                    • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff9169368a0,0x7ff9169368b0,0x7ff9169368c0
                      10⤵
                      • Executes dropped EXE
                      PID:3656
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a0,0x2a4,0x2a8,0x24c,0x2ac,0x11c7324,0x11c7330,0x11c733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:5684
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:1284
                      • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff9169368a0,0x7ff9169368b0,0x7ff9169368c0
                        11⤵
                        • Executes dropped EXE
                        PID:2552
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:936
                      • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7ff9169368a0,0x7ff9169368b0,0x7ff9169368c0
                        11⤵
                        • Executes dropped EXE
                        PID:5172
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:1552
                      • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ff9169368a0,0x7ff9169368b0,0x7ff9169368c0
                        11⤵
                        • Executes dropped EXE
                        PID:4824
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:5668
              • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff9169368a0,0x7ff9169368b0,0x7ff9169368c0
                7⤵
                • Executes dropped EXE
                PID:1876
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1648,i,3007521843894689551,31415019632539075,262144 --field-trial-handle=1996,i,8941521598467863301,1261158697227666839,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,8725970281940483706,4695201656620717169,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1992 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4400
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1904,i,16003741986129720385,6664677779182233327,524288 --field-trial-handle=1996,i,8941521598467863301,1261158697227666839,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,8725970281940483706,4695201656620717169,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2112 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:3500
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2604,i,12929910011979708362,16717820386566738348,524288 --field-trial-handle=1996,i,8941521598467863301,1261158697227666839,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,8725970281940483706,4695201656620717169,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2800 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4728
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3604,i,2582119229737072187,14268104031055563568,1572864 --field-trial-handle=1996,i,8941521598467863301,1261158697227666839,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,8725970281940483706,4695201656620717169,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3980 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2736
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4112,i,13918480015817305283,9678509855344533640,524288 --field-trial-handle=1996,i,8941521598467863301,1261158697227666839,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,8725970281940483706,4695201656620717169,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4184 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5916
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4504,i,2307499239045347051,1267402775852212009,1572864 --field-trial-handle=1996,i,8941521598467863301,1261158697227666839,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,8725970281940483706,4695201656620717169,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4556 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3584
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4804,i,9162182961621348835,11258822734496842980,524288 --field-trial-handle=1996,i,8941521598467863301,1261158697227666839,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,8725970281940483706,4695201656620717169,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4776 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3520
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4992,i,12930959317656594124,7755582906168655026,524288 --field-trial-handle=1996,i,8941521598467863301,1261158697227666839,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,8725970281940483706,4695201656620717169,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4796 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5692
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4788,i,3120286582903948916,6555711489024378198,524288 --field-trial-handle=1996,i,8941521598467863301,1261158697227666839,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,8725970281940483706,4695201656620717169,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5208 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:224
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5520,i,10217445411269168815,14652107657699978888,1572864 --field-trial-handle=1996,i,8941521598467863301,1261158697227666839,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2000,i,8725970281940483706,4695201656620717169,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5464 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:7368
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6164
              • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff9169368a0,0x7ff9169368b0,0x7ff9169368c0
                7⤵
                • Executes dropped EXE
                PID:7056
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1704,i,2641442824623954370,17017937039258500371,262144 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2020 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6488
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1936,i,9394094869219262297,11418404051255698520,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1992 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:6352
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2508,i,4429790914504826937,15393655645187743223,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2744 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6464
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3668,i,9348188751781146586,12196311388133855487,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3676 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6636
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1896,i,7383018224933822123,11447599627659621737,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3208 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6744
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3308,i,4121342496573448649,9067730006383636004,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3404 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6796
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3328,i,14237511597416568966,13645077124481031796,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3424 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6812
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3352,i,16261802969838318413,1905100427938840020,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3444 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6368
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3268,i,5905996453582289098,16132058744207738022,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3316 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6388
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3292,i,4325422354378043619,5403195257608707014,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3384 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6572
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3280,i,8431561018507065748,15114955507491510547,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3364 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:6816
              • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Executes dropped EXE
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:7284
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4788,i,14635621014333686190,3165801885122374333,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4800 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8092
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4956,i,17478730323972698452,17676912233125116187,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4968 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7420
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5256,i,7379099883642969471,9712772423855717527,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5240 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:7560
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4952,i,16874650928812811107,16952909114762601489,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5412 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7576
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=3636,i,329381011544621562,8620642138090056363,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6560 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7744
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5144,i,17704550685452242598,14515816164140130576,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6824 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8072
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6808,i,10154521206897579724,8482195610769062680,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6884 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8080
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=es --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6420,i,5692884088899058248,9198867210420052385,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6572 /prefetch:12
                7⤵
                • Executes dropped EXE
                PID:6044
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6760,i,3930689136778639645,10591364769327640611,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6864 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4120
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7320,i,14625855970565650747,13481127987010758028,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7260 /prefetch:14
                7⤵
                • Enumerates system info in registry
                PID:3868
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6452,i,7538512350886643961,2237226991612034426,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7308 /prefetch:14
                7⤵
                  PID:1460
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6312,i,17887766982141425699,16493856668632272485,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7448 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:1728
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6456,i,11807629110869431848,16473324772001250002,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=6800 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:4268
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6504,i,8539763541593494928,13459855194154886995,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7264 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:5244
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7312,i,12342573904217621301,11766285729482529123,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6576 /prefetch:14
                  7⤵
                  • Enumerates system info in registry
                  PID:4924
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8228,i,446367365949224633,2213666050653222545,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8248 /prefetch:14
                  7⤵
                    PID:2744
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8284,i,7304764126905837383,10272916126467226259,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8328 /prefetch:14
                    7⤵
                      PID:1116
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8296,i,14852703581464278663,12789440097894469374,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8348 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:2304
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8316,i,8060022739015600716,7178502694178179882,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8368 /prefetch:14
                      7⤵
                        PID:2252
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8252,i,16817564541015304555,2934866519733975496,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8280 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:4880
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8932,i,9881445526254422969,3570207635397108377,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8944 /prefetch:14
                        7⤵
                        • Enumerates system info in registry
                        PID:3520
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8952,i,7809351015253763068,8426938930268821218,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8968 /prefetch:14
                        7⤵
                          PID:4308
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9188,i,9641515644576094885,7753881309197812300,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9224 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:6200
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9256,i,2419985417877536890,14291831627470773466,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9416 /prefetch:9
                          7⤵
                          • Enumerates system info in registry
                          PID:6072
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9704,i,14637915202163930097,15411710321066307212,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9700 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:7220
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9872,i,13787079781964922699,1178621886811103362,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9884 /prefetch:14
                          7⤵
                            PID:6880
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10028,i,8404757077563294334,2011394637120217959,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10040 /prefetch:14
                            7⤵
                              PID:6576
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9232,i,7011628768519814468,7522558886078370423,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9264 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:1336
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10304,i,5486250020934961886,194431196339565954,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10308 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:8016
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10324,i,6285263001206411361,9856335640001749693,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10368 /prefetch:1
                              7⤵
                              • Enumerates system info in registry
                              PID:8128
                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                              7⤵
                              • Reads the TCP/IP host and domain name from the registry
                              PID:2320
                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x298,0x29c,0x2a0,0x284,0x2a4,0x7ff6d8a33df8,0x7ff6d8a33e08,0x7ff6d8a33e18
                                8⤵
                                  PID:5644
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10920,i,17657084700200302468,7893919125277711632,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10900 /prefetch:1
                                7⤵
                                • Enumerates system info in registry
                                PID:6760
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11224,i,15990068511657084548,10276121062688772432,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11232 /prefetch:14
                                7⤵
                                  PID:5000
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10036,i,7515270787383957962,16927439351850418429,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11376 /prefetch:14
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:7020
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6800,i,6910135763606168998,6129968912857479636,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=6392 /prefetch:14
                                  7⤵
                                    PID:7500
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4648,i,11784588511546666494,9706981754319323319,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=4632 /prefetch:14
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:7920
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4512,i,139600355226179040,7770432385926574626,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=6380 /prefetch:14
                                    7⤵
                                      PID:7360
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4036,i,9362397286782345081,11840703761817475662,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=8736 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:7776
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8668,i,314624494450243021,10011379058980107901,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8660 /prefetch:14
                                      7⤵
                                        PID:7688
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8652,i,10482530600578484758,11543603684079193717,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=8380 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:7016
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10028,i,1163793155035351203,9055492977395089653,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=4636 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:6684
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10884,i,8818104107251191727,10282586889799101934,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=4608 /prefetch:14
                                        7⤵
                                          PID:6740
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4628,i,9434081072206593428,5768991660190999278,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=4664 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:5192
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=4604,i,16462753609890135751,3584962390919987565,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=9192 /prefetch:9
                                          7⤵
                                            PID:7260
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8516,i,749905696534458679,3181256433034186251,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8712 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:6820
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8736,i,12156825534068409534,15661109336749210157,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=6372 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:2948
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7944,i,144811555891948081,1984712576982586208,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=4612 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:6300
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=es --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8984,i,18174889082522445653,226393826966087358,524288 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=3460 /prefetch:14
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:7672
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8516,i,5919606023576562773,6574834232894122505,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=6364 /prefetch:9
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:3168
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=7912,i,13398409241918539465,6241676532034345322,1572864 --field-trial-handle=2024,i,15053401076124856502,1222104452268898350,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2028,i,874249137484057905,5919337985769974224,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=4268 /prefetch:9
                                            7⤵
                                            • Enumerates system info in registry
                                            PID:7296
                                    • C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                      "C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                      4⤵
                                      • Executes dropped EXE
                                      • Writes a Windows system DLL name to a user directory
                                      • System Location Discovery: System Language Discovery
                                      PID:5016
                                    • C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\assistant_installer.exe
                                      "C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\assistant_installer.exe" --version
                                      4⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • System Location Discovery: System Language Discovery
                                      • Enumerates system info in registry
                                      • Suspicious use of WriteProcessMemory
                                      PID:1548
                                      • C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\assistant_installer.exe
                                        "C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xecc9cc,0xecc9d8,0xecc9e4
                                        5⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • System Location Discovery: System Language Discovery
                                        PID:5432
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                1⤵
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Suspicious use of WriteProcessMemory
                                PID:1172
                                • C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe
                                  C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ff9169368a0,0x7ff9169368b0,0x7ff9169368c0
                                  2⤵
                                  • Executes dropped EXE
                                  PID:4868
                              • C:\Windows\system32\wbem\unsecapp.exe
                                C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                1⤵
                                  PID:5504
                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                  1⤵
                                  • Reads the TCP/IP host and domain name from the registry
                                  PID:7792
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=138.0.6044.24 --initial-client-data=0x294,0x298,0x29c,0x274,0x2a0,0x7ff6d8a33df8,0x7ff6d8a33e08,0x7ff6d8a33e18
                                    2⤵
                                      PID:3148
                                    • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                      "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                      2⤵
                                        PID:6728
                                    • C:\Windows\System32\RuntimeBroker.exe
                                      C:\Windows\System32\RuntimeBroker.exe -Embedding
                                      1⤵
                                        PID:7020

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Reconnaissance

                                            Resource Development

                                            Initial Access

                                            Execution

                                            Persistence

                                            Boot or Logon Autostart Execution

                                            1
                                            T1547

                                            Registry Run Keys / Startup Folder

                                            1
                                            T1547.001

                                            Event Triggered Execution

                                            1
                                            T1546

                                            Component Object Model Hijacking

                                            1
                                            T1546.015

                                            Hijack Execution Flow

                                            1
                                            T1574

                                            DLL Search Order Hijacking

                                            1
                                            T1574.001

                                            Privilege Escalation

                                            Boot or Logon Autostart Execution

                                            1
                                            T1547

                                            Registry Run Keys / Startup Folder

                                            1
                                            T1547.001

                                            Event Triggered Execution

                                            1
                                            T1546

                                            Component Object Model Hijacking

                                            1
                                            T1546.015

                                            Hijack Execution Flow

                                            1
                                            T1574

                                            DLL Search Order Hijacking

                                            1
                                            T1574.001

                                            Defense Evasion

                                            Hijack Execution Flow

                                            1
                                            T1574

                                            DLL Search Order Hijacking

                                            1
                                            T1574.001

                                            Masquerading

                                            1
                                            T1036

                                            Match Legitimate Name or Location

                                            1
                                            T1036.005

                                            Modify Registry

                                            2
                                            T1112

                                            Credential Access

                                            Credentials from Password Stores

                                            1
                                            T1555

                                            Credentials from Web Browsers

                                            1
                                            T1555.003

                                            Unsecured Credentials

                                            1
                                            T1552

                                            Credentials In Files

                                            1
                                            T1552.001

                                            Discovery

                                            Peripheral Device Discovery

                                            1
                                            T1120

                                            Query Registry

                                            5
                                            T1012

                                            System Information Discovery

                                            4
                                            T1082

                                            System Location Discovery

                                            1
                                            T1614

                                            System Language Discovery

                                            1
                                            T1614.001

                                            System Network Configuration Discovery

                                            1
                                            T1016

                                            System Time Discovery

                                            1
                                            T1124

                                            Lateral Movement

                                            Collection

                                            Data from Local System

                                            1
                                            T1005

                                            Command and Control

                                            Exfiltration

                                            Impact

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                            • Size 471B
                                            • SHA256 4bb8bbb8179a94f2268a6f6c5cc0ddf5a58de522b78d9b4711dd6654d5569884
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                            • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                            • Size 416B
                                            • SHA256 116456156a10203a79ed45cdf99f56d2e8aebdf71b2c3220496d6649fe34f616
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            f_000001
                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000001
                                            • Size 766KB
                                            • SHA256 e6334dcf080aaeca679db70565762a2c296ff5780c1af263530ac7345736bfa9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            data_1
                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_1
                                            • Size 264KB
                                            • SHA256 089cc91c04f8790150e19c075bd357d8017772df7a714c28f647e06a91a0c5cb
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            f_000001
                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                            • Size 164KB
                                            • SHA256 215cb26ed0732d50e757ef23c0fe428cd8d44da0ff1b7138169715c79b89dcbe
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            snapshot-new.baf
                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\No_Vary_Search\snapshot-new.baf
                                            • Size 20B
                                            • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            138.0.6044.24.manifest
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\138.0.6044.24.manifest
                                            • Size 225B
                                            • SHA256 a308596d8f06659398ed38592a261ccd03ec12525ffddc8208120ebe5517abb8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-100.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-100.png
                                            • Size 1KB
                                            • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-100_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-100_contrast-white.png
                                            • Size 1KB
                                            • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-140.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-140.png
                                            • Size 1KB
                                            • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-140_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-140_contrast-white.png
                                            • Size 1KB
                                            • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-180.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-180.png
                                            • Size 1KB
                                            • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-180_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-180_contrast-white.png
                                            • Size 1KB
                                            • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-80.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-80.png
                                            • Size 827B
                                            • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            150x150Logo.scale-80_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\150x150Logo.scale-80_contrast-white.png
                                            • Size 799B
                                            • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-100.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-100.png
                                            • Size 781B
                                            • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-100_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-100_contrast-white.png
                                            • Size 752B
                                            • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-140.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-140.png
                                            • Size 991B
                                            • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-140_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-140_contrast-white.png
                                            • Size 865B
                                            • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-180.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-180.png
                                            • Size 1KB
                                            • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-180_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-180_contrast-white.png
                                            • Size 1KB
                                            • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-80.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-80.png
                                            • Size 590B
                                            • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            70x70Logo.scale-80_contrast-white.png
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\Assets\70x70Logo.scale-80_contrast-white.png
                                            • Size 519B
                                            • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            assistant_package
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\assistant_package
                                            • Size 4.0MB
                                            • SHA256 d3db6378085b6ce536c560d45b54375807da6bb4be4819e0125e7f54e943c673
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            d3dcompiler_47.dll
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\d3dcompiler_47.dll
                                            • Size 4.5MB
                                            • SHA256 3b42e20384e7d1515ec2fd7cfe82bb5f03cee0b9fab4cf39e912a56f39002c37
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            dxcompiler.dll
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\dxcompiler.dll
                                            • Size 24.7MB
                                            • SHA256 bdeca837a59d75f6d02b723ed9167a1359fa74fca0fd44a7e0982ea5f7ee8e61
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            dxil.dll
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\dxil.dll
                                            • Size 1.4MB
                                            • SHA256 ea56c20ead54660c7dfd844559de48708bc937c9283ef4fa3f33af871d02d734
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            files_list
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\files_list
                                            • Size 6KB
                                            • SHA256 a5bbae7f7160a98772a9d713ae501add9db6b80015bf11302d133c0052020290
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            headless_command_resources.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\headless_command_resources.pak
                                            • Size 3KB
                                            • SHA256 7c71d88913a88c6d0006b684055f3d136782aa1f6866ecafe2096b8aeae2e418
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            icudtl.dat
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\icudtl.dat
                                            • Size 10.4MB
                                            • SHA256 113f7464a507af4f7d2b0ea73094217881386f19dac7cacc5f071e7a4cf04a20
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            installer.exe
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer.exe
                                            • Size 8.4MB
                                            • SHA256 df8f4c8801bbdfc47af42be6dc6cd649188cabb99b3b5b3a232a9eb3381d93fb
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            installer_helper_64.exe
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\installer_helper_64.exe
                                            • Size 607KB
                                            • SHA256 e3f94b159bd44a4272f46df048a368d949ef9e756e150c9213ef63763b9a2378
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            libEGL.dll
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\libEGL.dll
                                            • Size 451KB
                                            • SHA256 2f63ea3de4ad9e06b3cf6e5e9b2cc271f3ac52720c85ae8848bf55a8403e4743
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            libGLESv2.dll
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\libGLESv2.dll
                                            • Size 451KB
                                            • SHA256 3e7106cea7a667ec547a53e589e3a4558cc2e9f03ab3e4bee3e1712600fbf669
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            bg.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\bg.pak
                                            • Size 983KB
                                            • SHA256 1dc471ddd2101d87e4e24882bdf678b255e6973fbc7d86f1bedf4ff2646fa503
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            bn.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\bn.pak
                                            • Size 1.2MB
                                            • SHA256 0adbfc8c0aea9d072c502d6801a29829e62028f31595b7bd134e949e6825d72c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            ca.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\ca.pak
                                            • Size 619KB
                                            • SHA256 3f2e81140887b4c92ab2cacb287f1395364fcb698d9eb50e54f25f9137e6c8e2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            cs.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\cs.pak
                                            • Size 620KB
                                            • SHA256 0483fae37cde542b5011e5d26b1ca57f69f37ce9fa44ecd28a8e8e670ab0f712
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            da.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\da.pak
                                            • Size 569KB
                                            • SHA256 1e68cd9d9988aefe17576f3c83f1543fa1ffcb972b22dfb1de1dcb2ab23ff423
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            de.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\de.pak
                                            • Size 617KB
                                            • SHA256 a400a05615fc1c964b0f9c63de7c2321a03e919be7c7b22c61f545837b9ac756
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            el.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\el.pak
                                            • Size 1.0MB
                                            • SHA256 5fc93d324372cf060857cf4a29bf31f689572914c92b24a8174a89a2c538115b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            en-GB.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\en-GB.pak
                                            • Size 499KB
                                            • SHA256 4c0eeb545466af9307b50c3cd8331532413f31b7bf7a359a9a6d31a6513ddc10
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            en-US.pak
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\138.0.6044.24\localization\en-US.pak
                                            • Size 503KB
                                            • SHA256 31d0d2140d3664754021877248cccf2ef54e4cd41bf8d98d00124e0111801142
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            installer_prefs.json25d0677c-e9ee-4b49-bbb5-e1caa97fc28c.tmp
                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json25d0677c-e9ee-4b49-bbb5-e1caa97fc28c.tmp
                                            • Size 1KB
                                            • SHA256 2c81bd35c69ea4293701554f10efffd904c6764815582b5fb98c775fee423373
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Navegador Opera.lnk
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\Navegador Opera.lnk
                                            • Size 1KB
                                            • SHA256 13eb07bd9c5f033d0e8632e0e0009f67bac5ccb0816d4fa7da2118bec0cccd64
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            additional_file0.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\additional_file0.tmp
                                            • Size 2.9MB
                                            • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            assistant_installer.exe
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\assistant_installer.exe
                                            • Size 2.4MB
                                            • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            dbgcore.DLL
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\dbgcore.DLL
                                            • Size 196KB
                                            • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            dbghelp.dll
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\assistant\dbghelp.dll
                                            • Size 1.8MB
                                            • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            de932af914ba00303d4a2778a383ac9c831101e2.crx
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                            • Size 3.5MB
                                            • SHA256 9d645b0ce032688d4f3100cd1f1d178d3c2c9d04bb691144659b98b4931d8eef
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            installer_prefs_include.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\installer_prefs_include.json
                                            • Size 228B
                                            • SHA256 fb510f9f3decb14b00aa8a87149dbbdd4286ee684cce0fab0c996d15aa67d4a6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            installer_prefs_include.json83be4601-cffc-4987-9611-d4c7a2ab79a4.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\installer_prefs_include.json83be4601-cffc-4987-9611-d4c7a2ab79a4.tmp
                                            • Size 243B
                                            • SHA256 bb34cce4e4c695d363965ea84f9ddc9cb30ce8ee95bcef6140f159be43969430
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            installer_prefs_include.jsonc2017307-667d-4f2e-a5c8-cc9c650c1621.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\bdc61ba4-bc7d-4a36-97a4-b089c8fcfcf1 Opera Installer Temp\opera_package_202610270226151\installer_prefs_include.jsonc2017307-667d-4f2e-a5c8-cc9c650c1621.tmp
                                            • Size 1KB
                                            • SHA256 f69571cfa62c3954fafd86bb6561256b9cffe20f1d5d100e81b5dec0ea9deb8f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            706b03f2-d510-48a1-896a-88c51b7571f7.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\706b03f2-d510-48a1-896a-88c51b7571f7.tmp
                                            • Size 14KB
                                            • SHA256 99dfb50b062db90ac585e2a877192973b88522ceb257a78345f1f1ca5da98e1b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            installer.exe
                                            • Path C:\Users\Admin\AppData\Local\Temp\7zSCDD3CA29\installer.exe
                                            • Size 8.4MB
                                            • SHA256 69ba0516f53a270d75435b2dcb059a77ea2e0dec2eaacff7c227c88efb694750
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            OpInst.exe
                                            • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                            • Size 3.1MB
                                            • SHA256 4c6248ce619c5847418565ac3dd238efe323e246381a5f326272a27b10494cc6
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            bg.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                            • Size 224KB
                                            • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            d4b94d2e-fe5e-4e33-8d59-7a06ec67aaa9.tmp
                                            • Path C:\Users\Admin\AppData\Local\Temp\d4b94d2e-fe5e-4e33-8d59-7a06ec67aaa9.tmp
                                            • Size 3.0MB
                                            • SHA256 5c8953fdd4f8a848a8711f749b4bf85376836da9a065b7bdd887e5d03f44cfd8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            favicon_opera_one.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5668_1470525021\CRX_INSTALL\favicon_opera_one.png
                                            • Size 2KB
                                            • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            manifest.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5668_1470525021\CRX_INSTALL\manifest.json
                                            • Size 3KB
                                            • SHA256 04dbe0c15af570ccff856c4bb005419e343ba39092eaeda1116b91a8e5961523
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            reader_mode.js
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5668_1470525021\CRX_INSTALL\reader_mode.js
                                            • Size 112KB
                                            • SHA256 ebb002d9d7d9206bc39d3f44bae6e49b7d694a172a0b1da9934f49c17f433084
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            service_worker.js
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5668_1470525021\CRX_INSTALL\service_worker.js
                                            • Size 1.1MB
                                            • SHA256 055406577738ff3eac762b7d2e7360bac21acf0bb688d829d0acfb9126993de2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            spotify_frame_interceptor.js
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5668_1470525021\CRX_INSTALL\spotify_frame_interceptor.js
                                            • Size 5KB
                                            • SHA256 f25cc540e5212f9f327bfb16702e156d385aa2545bd1b4c572f6a5543d4e7930
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            manifest.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1460450013\CRX_INSTALL\manifest.json
                                            • Size 1KB
                                            • SHA256 a2829f3f71f076f86b10bf610d9d35c45d8b653ab501c9cc5d7fe4634cbf4f9a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            manifest.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1460450013\CRX_INSTALL\manifest.json
                                            • Size 1KB
                                            • SHA256 8b3312d3adb43c2f1b3e88d0941c8c0edbf038f9056a734f8b1495a1b1d1a51a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\_locales\de\messages.json
                                            • Size 395B
                                            • SHA256 7f068365742c910bd20d60741e89473e3b422ca92776fcfe7db1529bdfcb3efa
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\_locales\en\messages.json
                                            • Size 396B
                                            • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\_locales\es\messages.json
                                            • Size 398B
                                            • SHA256 d2c36a6b4b6535152df5adba5c9d85c45ea6898a1b170a4f795c228931cacc5b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\_locales\pl\messages.json
                                            • Size 401B
                                            • SHA256 c6e32b74d1b21921946f59b9a12cc7b24086e876608d3db3f29628c35b35dbee
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\_locales\ru\messages.json
                                            • Size 463B
                                            • SHA256 5f08e78f50623ca8140af8d02eb7fd7e56ff8e9538e4449f7ee327a7b2ef292d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            background.js
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\background.js
                                            • Size 105KB
                                            • SHA256 9a9b0f7b3070d6f47773e487ebf53134c7629c15c4564ca613c3c9a8077b543d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            content.js.LICENSE.txt
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\content.js.LICENSE.txt
                                            • Size 1KB
                                            • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Active.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\icons\128\Icon_Light_Active.png
                                            • Size 2KB
                                            • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Available_Red.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\icons\128\Icon_Light_Available_Red.png
                                            • Size 2KB
                                            • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Available_Yellow.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\icons\128\Icon_Light_Available_Yellow.png
                                            • Size 2KB
                                            • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Active.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\icons\32\Icon_Light_Active.png
                                            • Size 883B
                                            • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Available_Red.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\icons\32\Icon_Light_Available_Red.png
                                            • Size 895B
                                            • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Available_Yellow.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\icons\32\Icon_Light_Available_Yellow.png
                                            • Size 895B
                                            • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Neutral.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                            • Size 962B
                                            • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            index.html
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\index.html
                                            • Size 222B
                                            • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            manifest.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\manifest.json
                                            • Size 1KB
                                            • SHA256 28fe81416b71c3f1f2ccd27abf21410d83a18b3845f2c31c45c6d21c0e8bf583
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            rules.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_1746654010\CRX_INSTALL\rules.json
                                            • Size 839B
                                            • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_2081452735\CRX_INSTALL\_locales\uk\messages.json
                                            • Size 410B
                                            • SHA256 95ef7c34001a60c39cc5fb3516081ff901bb65a08db6ed00acd70afb48858675
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Neutral.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_2081452735\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                            • Size 2KB
                                            • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            logo_128.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_656553578\CRX_INSTALL\public\icons\logo_128.png
                                            • Size 7KB
                                            • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            logo_16.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_656553578\CRX_INSTALL\public\icons\logo_16.png
                                            • Size 653B
                                            • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            logo_32.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_656553578\CRX_INSTALL\public\icons\logo_32.png
                                            • Size 1KB
                                            • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            logo_48.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_656553578\CRX_INSTALL\public\icons\logo_48.png
                                            • Size 2KB
                                            • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            logo_64.png
                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6164_656553578\CRX_INSTALL\public\icons\logo_64.png
                                            • Size 2KB
                                            • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            settings.dat
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                            • Size 40B
                                            • SHA256 04fe467229065bf522c79272ebe320c7638a7047bb0e80657d886607b27888bc
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            BookmarkMergedSurfaceOrdering81a985d2-6650-46de-bc9e-46a87e3dc60d.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering81a985d2-6650-46de-bc9e-46a87e3dc60d.tmp
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            Bookmarks35a510a1-086f-4fa1-b736-a17ddbc60cad.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks35a510a1-086f-4fa1-b736-a17ddbc60cad.tmp
                                            • Size 33KB
                                            • SHA256 043700321621f0998043c24cc372f8face4e5644315243cc45a483a40ad2baba
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            BookmarksExtras28a5a695-5c75-40f6-a6a1-74493a30e4dd.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras28a5a695-5c75-40f6-a6a1-74493a30e4dd.tmp
                                            • Size 223KB
                                            • SHA256 8ec7a056aaf7acc36eeeaad2c563f129dfe4a68e7d913f8d526677d764abaff8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            temp-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                            • Size 1KB
                                            • SHA256 4db63c976c1fa20d291739232585625bd250dcc40a3b14d9e033f681ca90f839
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            temp-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                            • Size 336B
                                            • SHA256 6fc347f581900809589e916c5e4fb1fb8b4d6a2af7a5da1e404a2cf2419aa79b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            the-real-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 48B
                                            • SHA256 b9a2d5c7dce09bce0b29f934ecbc6c1af912f10eca4e63f2909352b99a375eb0
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            data_0
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                            • Size 8KB
                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            data_2
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
                                            • Size 8KB
                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            data_3
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
                                            • Size 8KB
                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                            • MD5 SHA1 SHA512 SSDEEP
                                            Submit Download

                                            main.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_0\main.js
                                            • Size 48KB
                                            • SHA256 c2d961a8340848930aa0b7141ec03b973639d119756904d35fc8efe1a4cb8ec7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            scraping-method-Dq4mm50p.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                            • Size 6KB
                                            • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            service-worker.ts-fle0M1Xd.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                            • Size 13KB
                                            • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            service-worker-loader.js
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                            • Size 49B
                                            • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\_locales\en\messages.json
                                            • Size 429B
                                            • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            messages.json
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\_locales\es\messages.json
                                            • Size 431B
                                            • SHA256 3efb81c6c075cb9477cde6823496bc4a83f4be1b3365541a76598522987065a3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Neutral.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\128\Icon_Light_Neutral.png
                                            • Size 2KB
                                            • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            Icon_Light_Neutral.png
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\icons\32\Icon_Light_Neutral.png
                                            • Size 932B
                                            • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            manifest.json
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.87.1062_0\manifest.json
                                            • Size 1KB
                                            • SHA256 54a218f04a2f504690e6c61ed8ccb7345e128fcadd4fc2b6031966a43bd445f3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            13bf520e-5206-43ef-be33-006ad754fa6f.tmp950f577d-bd6f-4ce3-ad2d-dbfc5b7b4095.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\13bf520e-5206-43ef-be33-006ad754fa6f.tmp950f577d-bd6f-4ce3-ad2d-dbfc5b7b4095.tmp
                                            • Size 27KB
                                            • SHA256 f79057f51183f6efa9c93c2a864f9a4165992119cf38c938cff219619aefe2d2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            44e636c9-7d28-43b7-8f95-ea9d3549fc79.tmp46abf966-aaa8-40e7-a7dd-485264b6f732.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\44e636c9-7d28-43b7-8f95-ea9d3549fc79.tmp46abf966-aaa8-40e7-a7dd-485264b6f732.tmp
                                            • Size 27KB
                                            • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            939a21a1-89b7-4a81-ac84-13e3bacb7f1a.tmp6568b619-4cf9-4dd0-a068-f6f03bf1470c.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\939a21a1-89b7-4a81-ac84-13e3bacb7f1a.tmp6568b619-4cf9-4dd0-a068-f6f03bf1470c.tmp
                                            • Size 27KB
                                            • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            cfefc365-b3c3-43b1-97d4-ab4a7851bbbd.tmpdcd62845-0e29-4473-ad13-4d0cadd30355.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\cfefc365-b3c3-43b1-97d4-ab4a7851bbbd.tmpdcd62845-0e29-4473-ad13-4d0cadd30355.tmp
                                            • Size 27KB
                                            • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            d34a4c63-b68c-4196-a0bc-f9d65924bcdc.tmp7531fe5a-955a-4d35-945b-dab4d6279bb7.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\d34a4c63-b68c-4196-a0bc-f9d65924bcdc.tmp7531fe5a-955a-4d35-945b-dab4d6279bb7.tmp
                                            • Size 27KB
                                            • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            febaff95-f9a3-45f6-b526-847bc7cd8ed7.tmp38e636f4-1784-40c3-aa3a-652be9c5292f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\febaff95-f9a3-45f6-b526-847bc7cd8ed7.tmp38e636f4-1784-40c3-aa3a-652be9c5292f.tmp
                                            • Size 27KB
                                            • SHA256 24683ea67b7b390d33c1d607fc44a309989ada5a9fa5fb4ec96a96fda96d44ff
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Network Persistent State4ec501b6-06a9-42c2-a4de-8b7a3360c8c8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State4ec501b6-06a9-42c2-a4de-8b7a3360c8c8.tmp
                                            • Size 351B
                                            • SHA256 efd2dfd85bfd994d08e696f4d81d41cc93d724469d1dcd7dd215f0204ca227c4
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            SCT Auditing Pending Reports
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            Preferences
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                            • Size 15KB
                                            • SHA256 ce8650e67411b768cda6097970e859ff551e959fb94b5f7854dbcdbfe6b7e0f1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Preferences75c4f3ac-a57e-4c66-aab1-89895303f18a.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences75c4f3ac-a57e-4c66-aab1-89895303f18a.tmp
                                            • Size 10KB
                                            • SHA256 254eedd8afc6921f7d2917cf643dc87c773dcb2c2d5eb678178cb8c3cbf283f7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Preferencesb1d924d1-5cdd-460a-be81-b0a8d3d62488.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesb1d924d1-5cdd-460a-be81-b0a8d3d62488.tmp
                                            • Size 15KB
                                            • SHA256 16f3184f1cb28b72e7a91ccafb4af2ce6b96bdfe93c343bbe8b8efbea081488e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Secure Preferences
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                            • Size 82KB
                                            • SHA256 25870b6fe209c6f9728a5634532ca567405c06e9f7c973e350d04d59c8430d53
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Secure Preferences17fc556e-0e67-4a70-888e-cd0982b352fe.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences17fc556e-0e67-4a70-888e-cd0982b352fe.tmp
                                            • Size 112KB
                                            • SHA256 4fc0c1142d7478a77f47cd10f62368aa19cd8c9a327ac0b3ea26baf3955560c8
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            temp-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                            • Size 96B
                                            • SHA256 de7c4bfaf4d9a58fa2e963f28d544b10b08414ed3d468adf71374d566105fa2f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            temp-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                            • Size 456B
                                            • SHA256 bcb556165833576e13e62f1793df85f01fe6ed71d93e463a0132f3c66f437ca6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            the-real-index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                            • Size 72B
                                            • SHA256 eee8407129f701a0326a3038d5a5a465b10270fe88b8298183b689c7622666ee
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            index
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index
                                            • Size 24B
                                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            CURRENT
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\CURRENT
                                            • Size 16B
                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw
                                            • Size 381B
                                            • SHA256 5245712a81911c2af8d703e1b7a93f59e70479eab05ef06a3c54892ae9b7f3f9
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw0f9b5fba-5183-47fe-9cfc-adf6edb5aebb.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw0f9b5fba-5183-47fe-9cfc-adf6edb5aebb.tmp
                                            • Size 1KB
                                            • SHA256 ebbb52b89c1962f2538eec5feb5eef9f3909255fa919392bbebfb33b8ce6796e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw14045ad5-8c33-4a98-93d9-acdab0b41473.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw14045ad5-8c33-4a98-93d9-acdab0b41473.tmp
                                            • Size 1KB
                                            • SHA256 ccc8f5bcccd07167d0b61eb1214358483dba26ec703625ffed8aa7573bdd0bf1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw3ae4967d-4d32-4d54-abf3-54ebadbb5e06.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw3ae4967d-4d32-4d54-abf3-54ebadbb5e06.tmp
                                            • Size 493B
                                            • SHA256 55bd52515c5822c7a009d201e6bfa53e5341cc169ec20e4d435f0088a0b724cf
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw3b5ab380-be6a-4804-8f33-33bb734a7be3.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw3b5ab380-be6a-4804-8f33-33bb734a7be3.tmp
                                            • Size 1KB
                                            • SHA256 3e7b57bd0443b16f391a4927febbd0ac3faa53c0e4bbf0490a6ad02a416aa0e6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw4122c935-f240-4a8e-a607-34d7b6063f0d.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw4122c935-f240-4a8e-a607-34d7b6063f0d.tmp
                                            • Size 605B
                                            • SHA256 7fdcf2b1cbbd83f4bb34840a19db65d8affae01e7e692c49132e80fc04527c26
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw64ec8fc1-92e9-4dda-b0ce-ab03f8c7d5ee.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw64ec8fc1-92e9-4dda-b0ce-ab03f8c7d5ee.tmp
                                            • Size 1KB
                                            • SHA256 16d6009b4eb4e7dcd956bdde6715b92c316229ce1e37f836646fe64ca1a6d0b9
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw8a50773e-6075-41a7-b45a-b70de30d2d8a.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.raw8a50773e-6075-41a7-b45a-b70de30d2d8a.tmp
                                            • Size 781B
                                            • SHA256 6ff2eb5729f71b5d828947490a4ead12a6d8fe35d452385485420ce837a36bd1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.rawa3cc5e18-7f1a-44e7-bbe0-45e11b5f5e8a.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.rawa3cc5e18-7f1a-44e7-bbe0-45e11b5f5e8a.tmp
                                            • Size 941B
                                            • SHA256 623aee0620dab66a073c6accf7d9882e78fb16548db01620fc9b157509bdf02c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.rawc63525d5-eeda-461f-928d-33d925efd90d.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.rawc63525d5-eeda-461f-928d-33d925efd90d.tmp
                                            • Size 1KB
                                            • SHA256 f9667dcf5f72cde6a9502177a33706567dcd91c5747e85e2b962b4b75227946e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.rawd3f97ab9-f9bf-4651-85ae-7931b84caa44.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.rawd3f97ab9-f9bf-4651-85ae-7931b84caa44.tmp
                                            • Size 1KB
                                            • SHA256 293d75dccba05692d33ce58e4458470a1d0aca6def27b5d39aea691981604cf4
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.rawd9c7df84-7ced-4645-b248-a26da7ff2c8a.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.rawd9c7df84-7ced-4645-b248-a26da7ff2c8a.tmp
                                            • Size 1KB
                                            • SHA256 f47e9f6dbfae2e133175e0271569d76367e233e4a58501087e50715da72ef2f6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.rawf5b98fdf-9fa7-4236-8143-3edf0918ff0f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_82af1f10-91d4-47f9-9df4-f5cd2d9d467b.rawf5b98fdf-9fa7-4236-8143-3edf0918ff0f.tmp
                                            • Size 1KB
                                            • SHA256 cdbabdd87cd1d4191e209f2f1da2494c5cada6d01b3c2b69002682269c8b5999
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw
                                            • Size 381B
                                            • SHA256 61355e64cbf1cbd68219f611dcff7c4e10a248d3f157c7cb9ac2a8cd2e8743b2
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw
                                            • Size 6KB
                                            • SHA256 751b6f8fdc14c1fcbf2cfaf6ce8bc7adaaa22e08961bb38c98c35acfc8f065a0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw07a821d4-3906-4c06-a6ce-80f1ef62a141.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw07a821d4-3906-4c06-a6ce-80f1ef62a141.tmp
                                            • Size 1KB
                                            • SHA256 bed6cb99d7ccf4f3cef2b266e6ee157f9b2c59b82ad2c25b6ea54812da0b48db
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw0a3ffc5a-173f-47ef-a4f2-f7f3a55b855a.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw0a3ffc5a-173f-47ef-a4f2-f7f3a55b855a.tmp
                                            • Size 9KB
                                            • SHA256 e866f6539cb28be2d5c9a297fed449714342dd5f3fac5e331cbf50c5250597da
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw0dc3c14e-5045-4a35-acc3-eaa3e392cd08.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw0dc3c14e-5045-4a35-acc3-eaa3e392cd08.tmp
                                            • Size 7KB
                                            • SHA256 164cae0092a684b17aadf7ee382fd27dd537ccf1caaa628a749e33f0f9a32719
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw1d9c5b58-20ac-4623-8a83-c5cdf83de5ed.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw1d9c5b58-20ac-4623-8a83-c5cdf83de5ed.tmp
                                            • Size 10KB
                                            • SHA256 99f696e32d675926fe90152a0c12c6031f389613935032494e5b00e52fcc4ae4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw1fbe5a43-1ce9-4158-aa42-4b3b4d33b111.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw1fbe5a43-1ce9-4158-aa42-4b3b4d33b111.tmp
                                            • Size 9KB
                                            • SHA256 339a490f6774ace169f268212b07dadaa0de45c2c13f9991b7d426ded9e8d9f2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw24857f58-0314-4fef-9959-56bfa8a049f4.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw24857f58-0314-4fef-9959-56bfa8a049f4.tmp
                                            • Size 10KB
                                            • SHA256 2a43ca735edd5a98eb56183ee14bfeb6ef00f36788fc21a27754c5f172931a9e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw323d9e45-1918-4132-bf34-df37c187bad8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw323d9e45-1918-4132-bf34-df37c187bad8.tmp
                                            • Size 8KB
                                            • SHA256 457a06260536a2fa9ea5844bfe86773e66b94b228d0237f4ec95508f03160ae2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw36411292-6cdd-4c59-891e-477d1d61e33a.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw36411292-6cdd-4c59-891e-477d1d61e33a.tmp
                                            • Size 10KB
                                            • SHA256 2e2c275953aea4890a72d2ddca4d3a588c52358c59e3a66f9c26d5cf493b4078
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw39cc377f-4d08-47da-8aa3-807e09378c00.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw39cc377f-4d08-47da-8aa3-807e09378c00.tmp
                                            • Size 9KB
                                            • SHA256 77a479cbb55d3988b6396fc287fb4433558a226236759f92a37e522bf17c06e0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw39d89763-26a8-4258-8503-4bbc7f131d9f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw39d89763-26a8-4258-8503-4bbc7f131d9f.tmp
                                            • Size 9KB
                                            • SHA256 a98ee413d7e775aa81ac38ea0729e0c2f913dc478725f3327bf60b768a33e377
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw3bb8a61d-eb50-44c9-92a5-2e5ded24c69e.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw3bb8a61d-eb50-44c9-92a5-2e5ded24c69e.tmp
                                            • Size 8KB
                                            • SHA256 c328f699a705dae7dddaee33b39e9251009004384a06b764b341de24690ffba2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw4c366c9b-c6f2-454f-a5ce-287b43bbf51c.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw4c366c9b-c6f2-454f-a5ce-287b43bbf51c.tmp
                                            • Size 10KB
                                            • SHA256 27a54630895529d26bbcbb4f2500ccb088bb91929ea0af6bf5c6eb4414355557
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw542659b0-3d10-4eab-9f6b-c8345cf6082c.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw542659b0-3d10-4eab-9f6b-c8345cf6082c.tmp
                                            • Size 1KB
                                            • SHA256 c691d91467a37226add8392289817b9c51005431a3dd577b01358844fb22f4bb
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw5645da7b-c05c-40e2-87ae-baccc708f866.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw5645da7b-c05c-40e2-87ae-baccc708f866.tmp
                                            • Size 8KB
                                            • SHA256 4373d375656d8c7f0aba45b976cf6acce8aeb75a724323d5e317ac24f4bfd732
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw57ade08b-7d74-42c4-bc65-9b5391aff8a7.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw57ade08b-7d74-42c4-bc65-9b5391aff8a7.tmp
                                            • Size 8KB
                                            • SHA256 b14535e77ff2f3d0316792f9d77b0b3166fbffbfc5486217e4ce4a26607a93f3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw59bb2520-d519-49c1-967b-32a89e2fe29f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw59bb2520-d519-49c1-967b-32a89e2fe29f.tmp
                                            • Size 493B
                                            • SHA256 87bac11545b396cf3c322769719039999c63dc29588b23614a19733ff3d7fa02
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw5ef00b13-0254-4001-93b2-d61d976cb7f2.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw5ef00b13-0254-4001-93b2-d61d976cb7f2.tmp
                                            • Size 9KB
                                            • SHA256 49968326523242b60f3761051bb4779c1e64b4e1a717072a8e85b3228316799e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw607f408e-3834-47e0-816c-2f8c9e273fc5.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw607f408e-3834-47e0-816c-2f8c9e273fc5.tmp
                                            • Size 10KB
                                            • SHA256 8b216355d24f1410a3f6edcfc35d2b534f810a37427d9638c295991b4bd08910
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw623fe425-a06d-46e3-8f89-db5a633eccf8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw623fe425-a06d-46e3-8f89-db5a633eccf8.tmp
                                            • Size 8KB
                                            • SHA256 46579101142cb4585957a792c42f00afeac4cf431c4c11df24f2fdd9d690ec22
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw6329366b-bc83-437c-8973-1f71aec90d9a.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw6329366b-bc83-437c-8973-1f71aec90d9a.tmp
                                            • Size 1KB
                                            • SHA256 fa4544b7c9d91780ff55bc3879b1ed73b636216ed5900ecb374df18fd16ad949
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw659f84ea-aa73-4518-b3b3-752a354b336c.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw659f84ea-aa73-4518-b3b3-752a354b336c.tmp
                                            • Size 973B
                                            • SHA256 879aa470e0b879b27a019eff783f0f69f73489cda46c8587280e2ca2351a5051
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw67d775de-2f9f-4ca9-ad77-1001249d89f0.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw67d775de-2f9f-4ca9-ad77-1001249d89f0.tmp
                                            • Size 7KB
                                            • SHA256 e2f1cfdd0d57eb2c0dc6c7b18265a1d040dcfa81c7ca92d47d42d9fe102fbfff
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw68a8b6ba-cc74-4144-91ff-83a0b2c76928.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw68a8b6ba-cc74-4144-91ff-83a0b2c76928.tmp
                                            • Size 7KB
                                            • SHA256 ab8164f175e4a5c51be48039e094fc3800ec81525531fc411c97fd1b8a0b190d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw6c6a4e60-dc3f-4dfa-86cb-dab162268c60.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw6c6a4e60-dc3f-4dfa-86cb-dab162268c60.tmp
                                            • Size 8KB
                                            • SHA256 f74c1feffbbe1679f528fa2b99008582a6a5a06f0e3ab6056fa219445209848f
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw730749d5-d9d2-4d86-bfbb-7dd0ed15dd74.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw730749d5-d9d2-4d86-bfbb-7dd0ed15dd74.tmp
                                            • Size 9KB
                                            • SHA256 6b3e7405c5accb10a0abf551f26f01509f463a0c1c23fd1836ada8f7d73bb8b1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw785776c2-39d9-45a1-9fe0-5e0f6345e739.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw785776c2-39d9-45a1-9fe0-5e0f6345e739.tmp
                                            • Size 9KB
                                            • SHA256 da2f5790d3077c2fa1fe032a7846336d4a4f66ab891a66548dc10f23fc6299e2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw7b269751-b746-48f8-91d2-4f032e50db6d.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw7b269751-b746-48f8-91d2-4f032e50db6d.tmp
                                            • Size 1KB
                                            • SHA256 8a96985e69438de7b6b3f9291bd24d6aaf993344ce0a3084727591a2feddc111
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw8f289d77-d42a-4896-a21a-72d89fe0aa61.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw8f289d77-d42a-4896-a21a-72d89fe0aa61.tmp
                                            • Size 9KB
                                            • SHA256 8b06cb679bb00f2091180960cfa3cdb502720fb62e587957969668eb32ca2d4c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw997a112f-ac6b-4945-a06b-cc0268c51b87.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw997a112f-ac6b-4945-a06b-cc0268c51b87.tmp
                                            • Size 7KB
                                            • SHA256 75af4a39e09b3e2777e07e6bd33d4750b6893da5d449c25050f909d8892f5e8c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw9f866406-c5fa-4072-9d08-5fb7ac7c38bd.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raw9f866406-c5fa-4072-9d08-5fb7ac7c38bd.tmp
                                            • Size 9KB
                                            • SHA256 f1d2b4b386f5145ec54384d9852c3ccb57196abf87fff41b14ecfaef5010da4a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawa3c70a1f-4a53-43d1-9cca-58393abb2a6f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawa3c70a1f-4a53-43d1-9cca-58393abb2a6f.tmp
                                            • Size 8KB
                                            • SHA256 7c4c781e1b4791a10d18d0e8d122c141747464069ac2d7a05df6df103fdd524b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawaa5d054d-d7ac-4d78-8981-f21dccdaceba.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawaa5d054d-d7ac-4d78-8981-f21dccdaceba.tmp
                                            • Size 6KB
                                            • SHA256 2baf09c1108d80abb20e9518f45eb4c3b67c87bc8ec8aada0af66a6ca40b0a18
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawab437c96-b4de-4227-8722-597930fa7939.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawab437c96-b4de-4227-8722-597930fa7939.tmp
                                            • Size 1KB
                                            • SHA256 6a9520b357e83cbd933e5f92d1a927ca6afa53f193f4ca0653aae947c6987bf8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawb7d3dd6b-9eb9-42c4-988e-47c22f85fc7b.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawb7d3dd6b-9eb9-42c4-988e-47c22f85fc7b.tmp
                                            • Size 8KB
                                            • SHA256 8c59ce0fb8631a7e0cb621e41acd7e339592c259abd7bbdc0846886d79fd0904
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawb94bb157-951a-4bbe-b33a-d0f0bce2a1d2.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawb94bb157-951a-4bbe-b33a-d0f0bce2a1d2.tmp
                                            • Size 9KB
                                            • SHA256 1bf38a0a2d3961792438a6e705d6f6e56d1807f1c94f33bbe6d3f54a34ccfe1c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawbaa158e6-179e-4d35-9757-1de81400e0e4.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawbaa158e6-179e-4d35-9757-1de81400e0e4.tmp
                                            • Size 9KB
                                            • SHA256 c27231ccf07a3b3cbfe39cfc41e003c6aed4b7d0ef59fa454130e73462589f09
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawcc714f18-d624-4f9f-b422-2a7528ac74a2.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawcc714f18-d624-4f9f-b422-2a7528ac74a2.tmp
                                            • Size 1KB
                                            • SHA256 7093753125a8a9665ab52bd9c9b06ddd7853e570ac570ecc271a336dffcf9c20
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawd24b84e3-9286-4701-a148-a72020cab7a1.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawd24b84e3-9286-4701-a148-a72020cab7a1.tmp
                                            • Size 8KB
                                            • SHA256 27860cd56618c9e5360ae4690df63e7be7414a5cd9d8fc39156d8b535166a706
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawd2d20e41-a656-4ad5-80b6-50018ddeaf57.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawd2d20e41-a656-4ad5-80b6-50018ddeaf57.tmp
                                            • Size 10KB
                                            • SHA256 fab3a1fabb152be0a6e105c8d84981587b0a70ce1ce1d1345b9bfcf440486d52
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawd91f9703-d353-4310-9da8-e8210628c3f9.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawd91f9703-d353-4310-9da8-e8210628c3f9.tmp
                                            • Size 10KB
                                            • SHA256 c322647540352869d896966e75ecd970dcb85cd6d3a19d070bfdc5c5477b9549
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawdd7640a2-151c-4e8d-b8ee-09ec100d28be.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawdd7640a2-151c-4e8d-b8ee-09ec100d28be.tmp
                                            • Size 9KB
                                            • SHA256 a247e5ad26bb95ddefc357dc17f65edb0694794fcc37d388777e13ca7cd31aaf
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawe1d14616-7fa0-407f-bae7-7503ebc4962f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawe1d14616-7fa0-407f-bae7-7503ebc4962f.tmp
                                            • Size 749B
                                            • SHA256 16de62997c8073e72e392ae6a21b62dd739ff03014629160e109e8450b46ce84
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawe280e282-f5e3-40c6-97a0-1e060f6ceff2.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawe280e282-f5e3-40c6-97a0-1e060f6ceff2.tmp
                                            • Size 1KB
                                            • SHA256 3c1d048b96c6b15e08bb4d646a252a9286d96eb7b438fe2b9daeaf516397be8f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawe47b4e88-dc13-407b-967a-1011acc74c7d.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawe47b4e88-dc13-407b-967a-1011acc74c7d.tmp
                                            • Size 9KB
                                            • SHA256 7735c74a6c78cf40b61e3536609a689768e44a1e9ecfd60c25ad3b225f06ebdc
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawe9471eee-a1c9-479d-a7b5-a9f9a3a93d46.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawe9471eee-a1c9-479d-a7b5-a9f9a3a93d46.tmp
                                            • Size 10KB
                                            • SHA256 bf498fc6af310fd099751d6a8a47498ad1f04d41b63a92407d0bc9b873ce5f16
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.raweb1f6bce-deb1-4f60-963e-637ac2df96d7.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.raweb1f6bce-deb1-4f60-963e-637ac2df96d7.tmp
                                            • Size 621B
                                            • SHA256 43af1d52311d0671050feb9776134f22cfb3c0380078e2598591119853cdbb76
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawefed495a-80d4-4acd-b912-7454b4715051.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawefed495a-80d4-4acd-b912-7454b4715051.tmp
                                            • Size 1KB
                                            • SHA256 fed8dc35032090270ab046075a460e0dc2dba8caadc37db49a9707045c4d6b4c
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawf5a7f8d2-2996-48f0-b3ac-9e72909f1e8d.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawf5a7f8d2-2996-48f0-b3ac-9e72909f1e8d.tmp
                                            • Size 1KB
                                            • SHA256 2603d8428f41cc734f9144aeb59d44c4fb8b4e35fd41cfdf4a6e4bba9efa8a44
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawfa91659b-5a0b-45de-b0c1-36f387f27467.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawfa91659b-5a0b-45de-b0c1-36f387f27467.tmp
                                            • Size 925B
                                            • SHA256 a9b52938eb96e7391807421af80501400a69d212e958e5663b1578de43492af6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawfeeafc8c-a128-409b-852f-1e5459a1939e.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_dac3458d-8980-42a0-a6fe-a03daebfe916.rawfeeafc8c-a128-409b-852f-1e5459a1939e.tmp
                                            • Size 10KB
                                            • SHA256 ab03574f4fdc65a696fc7843d1c35877590c5d142a0d6fa477aca4fbe8164106
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            MANIFEST-000001
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\MANIFEST-000001
                                            • Size 41B
                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            ssdfp5668.0.1331750242
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5668.0.1331750242
                                            • Size 203B
                                            • SHA256 0a197d13995326d1b7a497ab2c041f855084c8a7a80ad0eddfcf0aa59d97aee5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp5668.0.133175024207069c83-2540-4568-a223-8004b9531109.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5668.0.133175024207069c83-2540-4568-a223-8004b9531109.tmp
                                            • Size 1014B
                                            • SHA256 00f6b8ea7e4a74bca6b767ff6d0d0f04c438db025519b338826efba688605758
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp5668.0.1331750242a2e8f936-0a42-4bf5-8950-3ecf300ba37f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5668.0.1331750242a2e8f936-0a42-4bf5-8950-3ecf300ba37f.tmp
                                            • Size 1KB
                                            • SHA256 1f04deff56385fea1da87ebc063738b31e2ca07a57b66315a95cdc4c6120dbf6
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp5668.0.1331750242ddf3b2df-3177-4345-959b-1e1a416214e0.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5668.0.1331750242ddf3b2df-3177-4345-959b-1e1a416214e0.tmp
                                            • Size 265B
                                            • SHA256 b7753df0ffb7349971286895b7592e6335f89d7bff601db443604da4245e9b9e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.590292465
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.590292465
                                            • Size 401B
                                            • SHA256 7c32e3152bea927d85d16227b66e60aa671ee16e1e513e5d14e042c9d4db515b
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.59029246514828db8-3e51-4b4a-9c62-a843af7cf830.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.59029246514828db8-3e51-4b4a-9c62-a843af7cf830.tmp
                                            • Size 2KB
                                            • SHA256 a7ba24c216a8282021ba905a2d0990a7f7003fdb84e5e27aa6c6a70950cf02c8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.59029246519c0f8cf-ba17-4947-887c-94c41a6e124c.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.59029246519c0f8cf-ba17-4947-887c-94c41a6e124c.tmp
                                            • Size 1KB
                                            • SHA256 5b74ced0331fe34bc039a184c77f599734fbe6a2fb9ca606019aea0d1dfcea3f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.5902924651a809336-0562-4ae0-9042-d282473480e8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.5902924651a809336-0562-4ae0-9042-d282473480e8.tmp
                                            • Size 499B
                                            • SHA256 c68501e104cc7e8bc4bb28874317182b923d2e6ab66bfd336683f4783438a138
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.5902924651c888671-75fa-41df-b84f-1571cead1d90.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.5902924651c888671-75fa-41df-b84f-1571cead1d90.tmp
                                            • Size 2KB
                                            • SHA256 e75b6b68bea8a006683d8d65c185c2fc6be90393c2e5ae140337df9d34489e8d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.5902924656d8dad9d-ddbe-43d0-8f67-29140435f4b1.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.5902924656d8dad9d-ddbe-43d0-8f67-29140435f4b1.tmp
                                            • Size 2KB
                                            • SHA256 5310d6369f72ff4c909cdf35e40a7d57f912491213a20eafa6c5d8b55ed47cae
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.590292465720c5eb2-afe7-476d-8af5-fc12b17812a8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.590292465720c5eb2-afe7-476d-8af5-fc12b17812a8.tmp
                                            • Size 561B
                                            • SHA256 36ed9a3329242811de145bbac11d6cc2bcb9b2abe713ef03d2081241fc0b6b29
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.590292465749f9199-3261-4189-a4ce-5579b43733f8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.590292465749f9199-3261-4189-a4ce-5579b43733f8.tmp
                                            • Size 2KB
                                            • SHA256 d05e7eea82182af3cf5ee50a9522e03814e33997cf3e4735f2538ae6142f9fcf
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.5902924657bc0dff5-88d9-4831-9adc-ecfa76c7daec.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.5902924657bc0dff5-88d9-4831-9adc-ecfa76c7daec.tmp
                                            • Size 2KB
                                            • SHA256 4d02398566a97095c3308e4d0206d4c58e9a3e3bbbbf3f806086880431dfb955
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.5902924658f0b94c3-1f47-4026-9cbc-bfd007674fa6.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.5902924658f0b94c3-1f47-4026-9cbc-bfd007674fa6.tmp
                                            • Size 2KB
                                            • SHA256 1c287952b540843ad909d786dc0ba4a5cfeb22bec5b48a48db9a046c6527870a
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.590292465e3cd094b-4510-4e1f-a4ed-9cccfb23a5c8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.590292465e3cd094b-4510-4e1f-a4ed-9cccfb23a5c8.tmp
                                            • Size 2KB
                                            • SHA256 e08f57f1a669a7e4022695ff3a8f1e8e061fceaca77f040275ed5e68eac1b4e1
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.0.590292465f2d2dfef-5e85-472a-bff1-def85ba78a4f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.0.590292465f2d2dfef-5e85-472a-bff1-def85ba78a4f.tmp
                                            • Size 2KB
                                            • SHA256 bed7ef3bf5371ae887e57559c5853f501edad41271ad82df982f7952ccc6f28e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.87843263
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.87843263
                                            • Size 171B
                                            • SHA256 a82107c6529cd095c85a4956cb61a8f86079cd377ff2189ea7de0b6cfd07c38f
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.878432630de2c8b6-82f4-4cc8-98cf-4b86798f15d6.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.878432630de2c8b6-82f4-4cc8-98cf-4b86798f15d6.tmp
                                            • Size 892B
                                            • SHA256 1b3c5417295a5cf9daf9b7f6656c482c1717e007557b9e88cb48487ae93227fd
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.8784326311d29603-959c-4354-b735-ed12876d2ac8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.8784326311d29603-959c-4354-b735-ed12876d2ac8.tmp
                                            • Size 514B
                                            • SHA256 fc4cd748163d5c8382149421a7870f6a765c891306b2968e6c599b4ce22b2ba8
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.878432631e9c9736-33f2-48fa-9dc9-d9125bd802bc.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.878432631e9c9736-33f2-48fa-9dc9-d9125bd802bc.tmp
                                            • Size 424B
                                            • SHA256 e719482dc8321d93570fb9983de58249206e232105681d3e2e7773264cf86cb3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.8784326329015905-d626-4cff-b7c8-196c8a7f4edc.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.8784326329015905-d626-4cff-b7c8-196c8a7f4edc.tmp
                                            • Size 200B
                                            • SHA256 1cc2973bea6e7e612cc3de39782ed6035bd8f019f0b6187ad40885ce1ec41991
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.878432632d2fecc7-2717-43e3-af96-b8a35095ef2b.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.878432632d2fecc7-2717-43e3-af96-b8a35095ef2b.tmp
                                            • Size 1KB
                                            • SHA256 6115aa30deb51d584e842c933521de1fe9eff91343c3f22dfc89f1eea8cbb245
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.8784326336ea7041-2368-4fc3-afa2-9a47b63b2eb8.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.8784326336ea7041-2368-4fc3-afa2-9a47b63b2eb8.tmp
                                            • Size 984B
                                            • SHA256 416f502e875c7a1708d8f21a41e1d91455a58eca507e5f5578eb53c6ad38b53d
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.87843263403dbe8a-cce9-4589-9ecd-dc4b0a8e82b5.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.87843263403dbe8a-cce9-4589-9ecd-dc4b0a8e82b5.tmp
                                            • Size 697B
                                            • SHA256 cd5bfdc0a129cd68ac0023da4d0475164f1138d84e1a10bfc4d1b18203e6e1fb
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.87843263790d49e4-58f6-48e0-83a2-41f66d000fa3.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.87843263790d49e4-58f6-48e0-83a2-41f66d000fa3.tmp
                                            • Size 601B
                                            • SHA256 6e77c3fce5e6d47ea2431bb4d0d6a7615bf2b76d8bfe78e01e8310d96d666c25
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.878432638aa46c7d-bf8f-4106-b4cf-f70d757bfb8f.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.878432638aa46c7d-bf8f-4106-b4cf-f70d757bfb8f.tmp
                                            • Size 1KB
                                            • SHA256 edc9953301eced98138bd290fab0e57f70650cb6fcab754a6e65771ebb3f7d97
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.878432638c54e639-01ee-403d-8412-15e5ddd89880.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.878432638c54e639-01ee-403d-8412-15e5ddd89880.tmp
                                            • Size 1KB
                                            • SHA256 488ff282da783a6e8b4b81d09dffd60b0a1e755c6dcff169f312ccd60b56f0e5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.87843263a671804b-bd60-4415-911f-7978e8864a69.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.87843263a671804b-bd60-4415-911f-7978e8864a69.tmp
                                            • Size 1KB
                                            • SHA256 f752d70181f0a24fd9b1bdd0869c4ad958393709d7690091078b08887b5910e5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.87843263b02cf832-39ee-4306-8204-4025170d5d75.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.87843263b02cf832-39ee-4306-8204-4025170d5d75.tmp
                                            • Size 1KB
                                            • SHA256 2151f1851f7c22fdcb744bdef85fdb5d05f38844e72b9e055841feb7f230a8fe
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.87843263bd6da1bc-2b9e-4f39-b18e-67d14e1700d0.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.87843263bd6da1bc-2b9e-4f39-b18e-67d14e1700d0.tmp
                                            • Size 326B
                                            • SHA256 46b0fb09f204e7791c5f73b81237836c73ddb81cf02e8570754133d63ffb2c7e
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            ssdfp6164.1.87843263ee72edbf-fe58-4174-9114-1a2001ab98dd.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6164.1.87843263ee72edbf-fe58-4174-9114-1a2001ab98dd.tmp
                                            • Size 793B
                                            • SHA256 98b107846391028831095ae0e75c07341ae73b08a6a45b022d7ea02e80533f54
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            suggestions_cache.json9865e225-9cfc-4a9e-9983-9acdae39d171.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json9865e225-9cfc-4a9e-9983-9acdae39d171.tmp
                                            • Size 652KB
                                            • SHA256 dd7018d4d3dfe47ef880b69a48305d90dea21407a852d4be6e78502f2d42dc97
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            Local Statedd7a6e8f-f407-4cd2-b20a-c03f0819d599.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Statedd7a6e8f-f407-4cd2-b20a-c03f0819d599.tmp
                                            • Size 3KB
                                            • SHA256 b98f00983e5a900bd5d74b5a93ad2d2a004ad67eca6ff6663f36124ad35431e3
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            VariationsSafeSeedV2
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSafeSeedV2
                                            • Size 19B
                                            • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            VariationsSeedV2dd2e01fc-dfa6-4f3d-9665-597bb729f0bd.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2dd2e01fc-dfa6-4f3d-9665-597bb729f0bd.tmp
                                            • Size 11B
                                            • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            metadata.json1be01a86-c7b3-4e6a-a827-41e1a707fcf2.tmp
                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.json1be01a86-c7b3-4e6a-a827-41e1a707fcf2.tmp
                                            • Size 13B
                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                            • MD5 SHA1 SHA512
                                            Submit Download

                                            opera-one-dark.jpg
                                            • Path C:\Windows\SystemTemp\scoped_dir6164_1085933024\opera-one-dark.jpg
                                            • Size 349KB
                                            • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            persona.ini
                                            • Path C:\Windows\SystemTemp\scoped_dir6164_1085933024\persona.ini
                                            • Size 217B
                                            • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            opera-one.jpg
                                            • Path C:\Windows\SystemTemp\scoped_dir6164_1974813226\opera-one.jpg
                                            • Size 194KB
                                            • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                            Submit Download

                                            persona.ini
                                            • Path C:\Windows\SystemTemp\scoped_dir6164_1974813226\persona.ini
                                            • Size 207B
                                            • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                            • MD5 SHA1 SHA512 TLSH
                                            Submit Download

                                            memory/4728-589-0x00007FF950260000-0x00007FF950261000-memory.dmp
                                            Download

                                            memory/4728-590-0x00007FF9505C0000-0x00007FF9505C1000-memory.dmp
                                            Download