Analysis

  • user interaction
    yes
  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    03/10/2026, 12:59

General

  • Target
    OperaSetup (1).exe
  • Size 3.1MB
  • Sample261003-p8a2sszzf1
  • SHA256 03f56843076bcbf082141a00cbf403ec9edd92eb219506f12efd82f695007df2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 19 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 16 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 50 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaSetup (1).exe
    "C:\Users\Admin\AppData\Local\Temp\OperaSetup (1).exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2508
    • C:\Users\Admin\AppData\Local\Temp\7zSCC9684A8\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zSCC9684A8\installer.exe --server-tracking-blob=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
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Enumerates connected drives
      • Reads the TCP/IP host and domain name from the registry
      • Modifies system certificate store
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1316
      • C:\Users\Admin\AppData\Local\Temp\7zSCC9684A8\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSCC9684A8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff6b42d6998,0x7ff6b42d69a8,0x7ff6b42d69b8
        3⤵
        • Executes dropped EXE
        PID:4984
      • C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:4828
      • C:\Users\Admin\AppData\Local\Temp\7zSCC9684A8\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zSCC9684A8\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1316 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_20261003135938" --session-guid=cbb08e28-dcd0-4a7c-bf20-3c78d31cc001 --server-tracking-blob="MGM1MDdjYzgwM2M2ZGU3MmRkMDIyNDUzZmZiZmFjMzgxZDU4OGRmMDdlYzM5NzEzOTAyMzJhYmJhYWFlNWE5ZDp7ImNvdW50cnkiOiJGUiIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYVNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhIn0sInF1ZXJ5IjoiL29wZXJhL3N0YWJsZS93aW5kb3dzP3V0bV9zb3VyY2U9Y3BpbmFwJnV0bV9tZWRpdW09cGQmdXRtX2NhbXBhaWduPWxwJnV0bV9jb250ZW50PTEwMTU1NjEmdXRtX2lkPU1Id3hOVEk0TmpsOE5UWjhWMmx1Wkc5M2MzeERhSEp2YldWOE1UQXhOVFUyTVh3NE1qWXdOakF6TURRNU1qVXlNelV4TWpGOE16Y3VOamN1TVRrMUxqTTBmREElMjUyNTI1MjUyNTI1MjUyNTI1MjUzRCZodHRwX3JlZmVycmVyPWh0dHBzJTNBJTJGJTJGd3d3Lm9wZXJhLmNvbSUyRmZyJTJGcGFydG5lciUzRnV0bV9zb3VyY2UlM0RjcGluYXAlMjZ1dG1fbWVkaXVtJTNEcGQlMjZ1dG1fY2FtcGFpZ24lM0RscCUyNnV0bV9pZCUzRE1Id3hOVEk0TmpsOE5UWjhWMmx1Wkc5M2MzeERhSEp2YldWOE1UQXhOVFUyTVh3NE1qWXdOakF6TURRNU1qVXlNelV4TWpGOE16Y3VOamN1TVRrMUxqTTBmREElMjUzRCUyNnV0bV9jb250ZW50JTNEMTAxNTU2MSZ1dG1fc2l0ZT1vcGVyYV9jb20mdXRtX2xhc3RwYWdlPW9wZXJhLmNvbSUyRnBhcnRuZXImdXRtX2lkPU1Id3hOVEk0TmpsOE5UWjhWMmx1Wkc5M2MzeERhSEp2YldWOE1UQXhOVFUyTVh3NE1qWXdOakF6TURRNU1qVXlNelV4TWpGOE16Y3VOamN1TVRrMUxqTTBmREElM0QmZGxfdG9rZW49MzcyOTI3NjgiLCJzeXN0ZW0iOnsicGxhdGZvcm0iOnsiYXJjaCI6Ing4Nl82NCIsIm9wc3lzIjoiV2luZG93cyIsIm9wc3lzLXZlcnNpb24iOiIxMCIsInBhY2thZ2UiOiJFWEUifX0sInRpbWVzdGFtcCI6IjE3OTEwMTgwNzcuMTMyMiIsInVzZXJhZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xNTQuMC4wLjAgU2FmYXJpLzUzNy4zNiIsInV0bSI6eyJjYW1wYWlnbiI6ImxwIiwiY29udGVudCI6IjEwMTU1NjEiLCJpZCI6Ik1Id3hOVEk0TmpsOE5UWjhWMmx1Wkc5M2MzeERhSEp2YldWOE1UQXhOVFUyTVh3NE1qWXdOakF6TURRNU1qVXlNelV4TWpGOE16Y3VOamN1TVRrMUxqTTBmREE9IiwibGFzdHBhZ2UiOiJvcGVyYS5jb20vcGFydG5lciIsIm1lZGl1bSI6InBkIiwic2l0ZSI6Im9wZXJhX2NvbSIsInNvdXJjZSI6ImNwaW5hcCJ9LCJ1dWlkIjoiNGUxNmE3NjgtM2NlYy00NTZkLThlYmQtNDM2NzEyMjI3NGI3In0= " --desktopshortcut=1 --wait-for-package --initial-proc-handle=7809000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:432
        • C:\Users\Admin\AppData\Local\Temp\7zSCC9684A8\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSCC9684A8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x248,0x284,0x7ff6b42d6998,0x7ff6b42d69a8,0x7ff6b42d69b8
          4⤵
          • Executes dropped EXE
          PID:4620
        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe" --backend --initial-pid=1316 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381" --session-guid=cbb08e28-dcd0-4a7c-bf20-3c78d31cc001 --server-tracking-blob="MGM1MDdjYzgwM2M2ZGU3MmRkMDIyNDUzZmZiZmFjMzgxZDU4OGRmMDdlYzM5NzEzOTAyMzJhYmJhYWFlNWE5ZDp7ImNvdW50cnkiOiJGUiIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYVNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhIn0sInF1ZXJ5IjoiL29wZXJhL3N0YWJsZS93aW5kb3dzP3V0bV9zb3VyY2U9Y3BpbmFwJnV0bV9tZWRpdW09cGQmdXRtX2NhbXBhaWduPWxwJnV0bV9jb250ZW50PTEwMTU1NjEmdXRtX2lkPU1Id3hOVEk0TmpsOE5UWjhWMmx1Wkc5M2MzeERhSEp2YldWOE1UQXhOVFUyTVh3NE1qWXdOakF6TURRNU1qVXlNelV4TWpGOE16Y3VOamN1TVRrMUxqTTBmREElMjUyNTI1MjUyNTI1MjUyNTI1MjUzRCZodHRwX3JlZmVycmVyPWh0dHBzJTNBJTJGJTJGd3d3Lm9wZXJhLmNvbSUyRmZyJTJGcGFydG5lciUzRnV0bV9zb3VyY2UlM0RjcGluYXAlMjZ1dG1fbWVkaXVtJTNEcGQlMjZ1dG1fY2FtcGFpZ24lM0RscCUyNnV0bV9pZCUzRE1Id3hOVEk0TmpsOE5UWjhWMmx1Wkc5M2MzeERhSEp2YldWOE1UQXhOVFUyTVh3NE1qWXdOakF6TURRNU1qVXlNelV4TWpGOE16Y3VOamN1TVRrMUxqTTBmREElMjUzRCUyNnV0bV9jb250ZW50JTNEMTAxNTU2MSZ1dG1fc2l0ZT1vcGVyYV9jb20mdXRtX2xhc3RwYWdlPW9wZXJhLmNvbSUyRnBhcnRuZXImdXRtX2lkPU1Id3hOVEk0TmpsOE5UWjhWMmx1Wkc5M2MzeERhSEp2YldWOE1UQXhOVFUyTVh3NE1qWXdOakF6TURRNU1qVXlNelV4TWpGOE16Y3VOamN1TVRrMUxqTTBmREElM0QmZGxfdG9rZW49MzcyOTI3NjgiLCJzeXN0ZW0iOnsicGxhdGZvcm0iOnsiYXJjaCI6Ing4Nl82NCIsIm9wc3lzIjoiV2luZG93cyIsIm9wc3lzLXZlcnNpb24iOiIxMCIsInBhY2thZ2UiOiJFWEUifX0sInRpbWVzdGFtcCI6IjE3OTEwMTgwNzcuMTMyMiIsInVzZXJhZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xNTQuMC4wLjAgU2FmYXJpLzUzNy4zNiIsInV0bSI6eyJjYW1wYWlnbiI6ImxwIiwiY29udGVudCI6IjEwMTU1NjEiLCJpZCI6Ik1Id3hOVEk0TmpsOE5UWjhWMmx1Wkc5M2MzeERhSEp2YldWOE1UQXhOVFUyTVh3NE1qWXdOakF6TURRNU1qVXlNelV4TWpGOE16Y3VOamN1TVRrMUxqTTBmREE9IiwibGFzdHBhZ2UiOiJvcGVyYS5jb20vcGFydG5lciIsIm1lZGl1bSI6InBkIiwic2l0ZSI6Im9wZXJhX2NvbSIsInNvdXJjZSI6ImNwaW5hcCJ9LCJ1dWlkIjoiNGUxNmE3NjgtM2NlYy00NTZkLThlYmQtNDM2NzEyMjI3NGI3In0= " --desktopshortcut=1 --install-subfolder=136.0.6008.80
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:4980
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x250,0x280,0x7ff753296998,0x7ff7532969a8,0x7ff7532969b8
            5⤵
            • Executes dropped EXE
            PID:1372
          • C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes a Windows system DLL name to a user directory
            • Adds Run key to start application
            • System Location Discovery: System Language Discovery
            • Modifies Internet Explorer settings
            • Suspicious use of WriteProcessMemory
            PID:4844
            • C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x9cc9cc,0x9cc9d8,0x9cc9e4
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:1664
            • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:4872
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x29c9cc,0x29c9d8,0x29c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4724
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Location Discovery: System Language Discovery
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:1884
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of WriteProcessMemory
                  PID:2872
                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x23c,0x214,0x240,0x238,0x244,0x7ff9fdf0bdb0,0x7ff9fdf0bdc0,0x7ff9fdf0bdd0
                    9⤵
                    • Executes dropped EXE
                    PID:4160
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of WriteProcessMemory
                  PID:4688
                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff9fdf0bdb0,0x7ff9fdf0bdc0,0x7ff9fdf0bdd0
                    9⤵
                    • Executes dropped EXE
                    PID:4224
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x26c,0x270,0x274,0x224,0x278,0x1197324,0x1197330,0x119733c
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:2320
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:1464
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x244,0x248,0x24c,0x240,0x250,0x7ff9fdf0bdb0,0x7ff9fdf0bdc0,0x7ff9fdf0bdd0
                      10⤵
                      • Executes dropped EXE
                      PID:4892
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:1268
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff9fdf0bdb0,0x7ff9fdf0bdc0,0x7ff9fdf0bdd0
                      10⤵
                      • Executes dropped EXE
                      PID:2120
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:2904
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff9fdf0bdb0,0x7ff9fdf0bdc0,0x7ff9fdf0bdd0
                      10⤵
                      • Executes dropped EXE
                      PID:1216
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\de932af914ba00303d4a2778a383ac9c831101e2.crx"
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Drops file in Program Files directory
            • Reads the TCP/IP host and domain name from the registry
            • Checks processor information in registry
            • Enumerates system info in registry
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:860
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x234,0x238,0x23c,0x230,0x240,0x7ff9fdf0bdb0,0x7ff9fdf0bdc0,0x7ff9fdf0bdd0
              6⤵
              • Executes dropped EXE
              PID:1712
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1804,i,12575703254661920575,4711331210164898134,262144 --field-trial-handle=1956,i,10717659733373738635,11748403326001496523,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5408115001032061543,13349080799749083653,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1952 /prefetch:2
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5144
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2188,i,288784640531859116,6884234332680240870,524288 --field-trial-handle=1956,i,10717659733373738635,11748403326001496523,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5408115001032061543,13349080799749083653,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2204 /prefetch:3
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Reads the TCP/IP host and domain name from the registry
              • System Time Discovery
              PID:5184
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2516,i,3054261368932479192,12925984130368733449,524288 --field-trial-handle=1956,i,10717659733373738635,11748403326001496523,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5408115001032061543,13349080799749083653,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2400 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5252
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3912,i,10870048843899777819,17546964066036189177,2097152 --field-trial-handle=1956,i,10717659733373738635,11748403326001496523,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5408115001032061543,13349080799749083653,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3924 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5844
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4296,i,5980841132898218735,3270636517737159115,524288 --field-trial-handle=1956,i,10717659733373738635,11748403326001496523,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5408115001032061543,13349080799749083653,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4316 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:6084
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4576,i,14699172182539100713,17354247067942624082,2097152 --field-trial-handle=1956,i,10717659733373738635,11748403326001496523,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5408115001032061543,13349080799749083653,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4588 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5392
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4620,i,788639397696495223,2927824059011542631,524288 --field-trial-handle=1956,i,10717659733373738635,11748403326001496523,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5408115001032061543,13349080799749083653,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4084 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5652
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4820,i,13556534372628084867,4050218910132040386,524288 --field-trial-handle=1956,i,10717659733373738635,11748403326001496523,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5408115001032061543,13349080799749083653,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4832 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5756
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5036,i,12024921905612361395,12042260065987466979,524288 --field-trial-handle=1956,i,10717659733373738635,11748403326001496523,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,5408115001032061543,13349080799749083653,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4608 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5940
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Drops file in Program Files directory
            • Reads the TCP/IP host and domain name from the registry
            • Checks processor information in registry
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:5600
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x234,0x238,0x23c,0x230,0x240,0x7ff9fdf0bdb0,0x7ff9fdf0bdc0,0x7ff9fdf0bdd0
              6⤵
              • Executes dropped EXE
              PID:6164
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1904,i,6428441201958650933,10808872204112898660,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=3052 /prefetch:3
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Reads the TCP/IP host and domain name from the registry
              • System Time Discovery
              • Enumerates system info in registry
              PID:5528
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1716,i,765832788421141640,723738560087766460,262144 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=3012 /prefetch:2
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:5524
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2252,i,6805385085541803773,9119796708403039164,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3060 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5920
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2600,i,4097914220384921660,12386344855889282778,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3116 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5828
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2612,i,9539422592455549044,16151987349085629563,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3068 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5816
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2588,i,17546101916209299547,10883578242111389965,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3088 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5536
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2624,i,7196279583517502588,8278310103588866041,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3176 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:8260
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2636,i,5505178167231827283,1611462824741908170,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3216 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5988
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2672,i,2882962180388535399,11229979136164736922,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3260 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:8272
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=2728,i,8164891066431743833,9561259890147045857,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3276 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:5256
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2648,i,1362798457998478503,4242417024597804292,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3160 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:3860
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_gx_splash.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
              6⤵
              • Executes dropped EXE
              • Modifies registry class
              • Suspicious use of AdjustPrivilegeToken
              PID:8480
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4768,i,12340087272074455709,14288945139549621479,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4780 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:8876
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4948,i,6817162962304005286,15328005100197945959,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4944 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:9188
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5272,i,4106240736114241301,10040851941797496469,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5284 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:9056
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5424,i,6221538342302492868,1092374898672536120,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5432 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:9076
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6336,i,12663828722941158128,11050572391188256718,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6364 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:6896
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6732,i,3338564731559941262,12018534794651306827,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6656 /prefetch:2
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:9236
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5872,i,18182298104610491896,10722252870861895912,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5580 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:10200
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5592,i,8412978770222144135,6797027794421881455,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6608 /prefetch:1
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              PID:6968
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7152,i,1778957314764139423,4225776823175414942,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7008 /prefetch:8
              6⤵
              • Executes dropped EXE
              PID:10384
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6988,i,2306598933814924135,6275074453681590445,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7184 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:10392
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6752,i,10708905774437564226,10518070379831787923,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7204 /prefetch:8
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:10400
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6620,i,15249068481637885637,1463548237817285354,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7556 /prefetch:8
              6⤵
              • Enumerates system info in registry
              PID:10420
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7684,i,7597646578565546437,18250221585927019947,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7700 /prefetch:8
              6⤵
              • Enumerates system info in registry
              PID:10432
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7692,i,2243388535876035132,4440654170279104052,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7728 /prefetch:8
              6⤵
              • Enumerates system info in registry
              PID:10484
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7856,i,13705602555849482450,8330176217337915148,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7964 /prefetch:8
              6⤵
              • Enumerates system info in registry
              PID:11368
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8104,i,2557709814945757176,11290245128335363123,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8120 /prefetch:8
              6⤵
                PID:11380
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8144,i,5329453908592798094,12130844047083963140,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8132 /prefetch:8
                6⤵
                • Enumerates system info in registry
                PID:11392
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8176,i,1148440029196719525,2218743774312873249,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8296 /prefetch:8
                6⤵
                • Enumerates system info in registry
                PID:11400
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8528,i,10336759295806427565,11827578179815561887,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8540 /prefetch:8
                6⤵
                • Enumerates system info in registry
                PID:11416
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8560,i,13015476201584049923,12180360045871519163,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8568 /prefetch:8
                6⤵
                • Enumerates system info in registry
                PID:11424
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8804,i,16292823630300629914,16753354029042631636,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8816 /prefetch:8
                6⤵
                • Enumerates system info in registry
                PID:11440
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8836,i,86428170202605180,18286899645309453971,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8848 /prefetch:8
                6⤵
                  PID:11452
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9076,i,9277492660642177121,6005403124511645586,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9088 /prefetch:8
                  6⤵
                    PID:11468
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9272,i,2700831311682076020,253219465626392676,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9288 /prefetch:8
                    6⤵
                      PID:11852
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9316,i,4348936510732364491,3162207229407886341,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9456 /prefetch:2
                      6⤵
                      • Checks computer location settings
                      • Enumerates system info in registry
                      PID:11880
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10060,i,12497735625328808507,11350961289369388919,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10044 /prefetch:8
                      6⤵
                        PID:12176
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10244,i,2732167653515845775,1803282091434423066,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10256 /prefetch:8
                        6⤵
                          PID:12236
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5760,i,14624710637870670494,9224313070176910608,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=3328 /prefetch:8
                          6⤵
                          • Enumerates system info in registry
                          PID:7396
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10444,i,7076575332905717777,16001290240926543028,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10288 /prefetch:8
                          6⤵
                          • Enumerates system info in registry
                          PID:7408
                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe" --fix-taskbar-pins
                          6⤵
                          • Enumerates system info in registry
                          PID:12396
                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff753296998,0x7ff7532969a8,0x7ff7532969b8
                            7⤵
                              PID:12420
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10744,i,1829980861930825161,15427328613207715040,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10720 /prefetch:8
                            6⤵
                              PID:12496
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10872,i,15734644639846552165,734636402670358525,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10884 /prefetch:8
                              6⤵
                                PID:12568
                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                6⤵
                                • Reads the TCP/IP host and domain name from the registry
                                • Enumerates system info in registry
                                PID:13088
                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                  C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x210,0x284,0x7ff67be95598,0x7ff67be955a8,0x7ff67be955b8
                                  7⤵
                                    PID:7864
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7548,i,9450863871636591013,13447706991722154734,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=8532 /prefetch:8
                                  6⤵
                                  • Enumerates system info in registry
                                  PID:6952
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=10876,i,18085519564029405638,15074054334581025739,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=6564 /prefetch:1
                                  6⤵
                                  • Checks computer location settings
                                  • Enumerates system info in registry
                                  PID:7676
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10720,i,7202353276538030324,7307255122445401527,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11080 /prefetch:8
                                  6⤵
                                  • Enumerates system info in registry
                                  PID:6212
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6620,i,15646906302589034368,9400972701577867557,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=9264 /prefetch:8
                                  6⤵
                                    PID:8012
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4080,i,9564540376262881717,6213374503171271575,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=4056 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:6680
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=9256,i,3070352173112529173,4638516046328802510,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=8836 /prefetch:2
                                    6⤵
                                    • Checks computer location settings
                                    • Enumerates system info in registry
                                    PID:8688
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10984,i,5786296132191200697,7753562573981906173,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8548 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:12788
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3344,i,4686842827227023418,8860860675827841129,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=9100 /prefetch:8
                                    6⤵
                                    • Enumerates system info in registry
                                    PID:1920
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9264,i,8465937591731459988,4679838169855339883,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=2668 /prefetch:8
                                    6⤵
                                      PID:884
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10808,i,18048542797236970478,11871164793538898519,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10768 /prefetch:8
                                      6⤵
                                        PID:2096
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=10660,i,301046459075175566,13710245174475525412,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=4092 /prefetch:2
                                        6⤵
                                        • Checks computer location settings
                                        PID:5216
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10988,i,9182575843249098150,15203936811567035470,524288 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=9080 /prefetch:8
                                        6⤵
                                        • Enumerates system info in registry
                                        PID:5220
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=5792,i,2929945903492955638,8894007088488121588,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=11036 /prefetch:2
                                        6⤵
                                        • Checks computer location settings
                                        • Enumerates system info in registry
                                        PID:8776
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=4760,i,581293641074113823,8819588126869480094,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=9556 /prefetch:1
                                        6⤵
                                        • Checks computer location settings
                                        • Enumerates system info in registry
                                        PID:12348
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:gcm-store-self-repair=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=4076,i,5781243542959331101,11783815838738029718,2097152 --field-trial-handle=3016,i,6089368767446825704,579997059087921963,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,GcmStoreSelfRepair,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=3020,i,16433989878779957971,6195623147315972502,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=9424 /prefetch:1
                                        6⤵
                                        • Checks computer location settings
                                        • Enumerates system info in registry
                                        PID:12572
                                • C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                  "C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                  3⤵
                                  • Executes dropped EXE
                                  • Writes a Windows system DLL name to a user directory
                                  • System Location Discovery: System Language Discovery
                                  PID:3432
                                • C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\assistant_installer.exe
                                  "C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\assistant_installer.exe" --version
                                  3⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • System Location Discovery: System Language Discovery
                                  • Enumerates system info in registry
                                  • Suspicious use of WriteProcessMemory
                                  PID:3916
                                  • C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\assistant_installer.exe
                                    "C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x9cc9cc,0x9cc9d8,0x9cc9e4
                                    4⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • System Location Discovery: System Language Discovery
                                    PID:4408
                            • C:\Windows\system32\wbem\unsecapp.exe
                              C:\Windows\system32\wbem\unsecapp.exe -Embedding
                              1⤵
                                PID:5724
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                1⤵
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Suspicious use of WriteProcessMemory
                                PID:5712
                                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x234,0x238,0x23c,0x230,0x240,0x7ff9fdf0bdb0,0x7ff9fdf0bdc0,0x7ff9fdf0bdd0
                                  2⤵
                                  • Executes dropped EXE
                                  PID:5176
                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                1⤵
                                • Reads the TCP/IP host and domain name from the registry
                                • Enumerates system info in registry
                                PID:12720
                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                  C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff67be95598,0x7ff67be955a8,0x7ff67be955b8
                                  2⤵
                                    PID:13168
                                  • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                    "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                    2⤵
                                      PID:11524

                                  Network

                                        MITRE ATT&CK Enterprise v16

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        opera-one-dark.jpg

                                        • Path C:\Program Files\scoped_dir5600_1638985897\opera-one-dark.jpg
                                        • Size 349KB
                                        • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        persona.ini

                                        • Path C:\Program Files\scoped_dir5600_1638985897\persona.ini
                                        • Size 217B
                                        • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                        • MD5 SHA1 SHA512 TLSH

                                        opera-one.jpg

                                        • Path C:\Program Files\scoped_dir5600_230437667\opera-one.jpg
                                        • Size 194KB
                                        • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        persona.ini

                                        • Path C:\Program Files\scoped_dir5600_230437667\persona.ini
                                        • Size 207B
                                        • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                        • MD5 SHA1 SHA512 TLSH

                                        snapshot-new.baf

                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                        • Size 20B
                                        • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                        • MD5 SHA1 SHA512

                                        f_000001

                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                        • Size 164KB
                                        • SHA256 c9fb381c12c0e8536f946dbc9c94a05be02ab48546537e2ffd19c7f2d8c4da9b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        136.0.6008.80.manifest

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\136.0.6008.80.manifest
                                        • Size 225B
                                        • SHA256 0b42e2f6e44cb617486730d36045d7eafdb43c83e473dc2446fc266e3091fd12
                                        • MD5 SHA1 SHA512 TLSH

                                        150x150Logo.scale-100.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-100.png
                                        • Size 1KB
                                        • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                        • MD5 SHA1 SHA512 TLSH

                                        150x150Logo.scale-100_contrast-white.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-100_contrast-white.png
                                        • Size 1KB
                                        • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                        • MD5 SHA1 SHA512 TLSH

                                        150x150Logo.scale-140.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-140.png
                                        • Size 1KB
                                        • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                        • MD5 SHA1 SHA512 TLSH

                                        150x150Logo.scale-140_contrast-white.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-140_contrast-white.png
                                        • Size 1KB
                                        • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                        • MD5 SHA1 SHA512 TLSH

                                        150x150Logo.scale-180.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-180.png
                                        • Size 1KB
                                        • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                        • MD5 SHA1 SHA512 TLSH

                                        150x150Logo.scale-180_contrast-white.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-180_contrast-white.png
                                        • Size 1KB
                                        • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                        • MD5 SHA1 SHA512 TLSH

                                        150x150Logo.scale-80.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-80.png
                                        • Size 827B
                                        • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                        • MD5 SHA1 SHA512 TLSH

                                        150x150Logo.scale-80_contrast-white.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-80_contrast-white.png
                                        • Size 799B
                                        • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                        • MD5 SHA1 SHA512 TLSH

                                        70x70Logo.scale-100.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-100.png
                                        • Size 781B
                                        • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                        • MD5 SHA1 SHA512 TLSH

                                        70x70Logo.scale-100_contrast-white.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-100_contrast-white.png
                                        • Size 752B
                                        • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                        • MD5 SHA1 SHA512 TLSH

                                        70x70Logo.scale-140.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-140.png
                                        • Size 991B
                                        • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                        • MD5 SHA1 SHA512 TLSH

                                        70x70Logo.scale-140_contrast-white.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-140_contrast-white.png
                                        • Size 865B
                                        • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                        • MD5 SHA1 SHA512 TLSH

                                        70x70Logo.scale-180.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-180.png
                                        • Size 1KB
                                        • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                        • MD5 SHA1 SHA512 TLSH

                                        70x70Logo.scale-180_contrast-white.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-180_contrast-white.png
                                        • Size 1KB
                                        • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                        • MD5 SHA1 SHA512 TLSH

                                        70x70Logo.scale-80.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-80.png
                                        • Size 590B
                                        • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                        • MD5 SHA1 SHA512 TLSH

                                        70x70Logo.scale-80_contrast-white.png

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-80_contrast-white.png
                                        • Size 519B
                                        • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                        • MD5 SHA1 SHA512 TLSH

                                        assistant_package

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\assistant_package
                                        • Size 3.6MB
                                        • SHA256 48fb4ec141322aa1e753876ce4105ac61735f7c0d744a73ff4a209e09ab2b023
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        d3dcompiler_47.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\d3dcompiler_47.dll
                                        • Size 4.5MB
                                        • SHA256 c0e3f27b85a7717c807d862b7e64b1599a6a8827cc47d671856ce03a3b04fa44
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        dxcompiler.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\dxcompiler.dll
                                        • Size 24.6MB
                                        • SHA256 3d67684140102197b12b6748e24ba4cd33af2e14876eb981bfd0c24a2c6ac569
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        dxil.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\dxil.dll
                                        • Size 1.5MB
                                        • SHA256 ba28de1e6e486ab1ad22e6a2eab96bbb7c34a251134f4aab17013571b1245dfd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        files_list

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\files_list
                                        • Size 6KB
                                        • SHA256 025d2bcd28ea1b90db693e54070ea99536e11ca16933896673db16bf498ece34
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        headless_command_resources.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\headless_command_resources.pak
                                        • Size 2KB
                                        • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                        • MD5 SHA1 SHA512 TLSH

                                        icudtl.dat

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\icudtl.dat
                                        • Size 10.4MB
                                        • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        installer.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
                                        • Size 8.3MB
                                        • SHA256 a49318e66f5c3d66c8e2c09f0879eafb87f8d3c03152db579baafd5e5a744279
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        installer_helper_64.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer_helper_64.exe
                                        • Size 601KB
                                        • SHA256 3701dd526b94855901ed47b4cc0ddd7810af5eac7aceb43fd8a4fef2fac1b4cc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        libEGL.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\libEGL.dll
                                        • Size 460KB
                                        • SHA256 9a596bc1cae71bf1a53d83316a9e23cdf61283f160b227267dc6364ff0f269ce
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        libGLESv2.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\libGLESv2.dll
                                        • Size 460KB
                                        • SHA256 e8eb8bf566654d5d6afb83ecfc99900381a7297d8e45f1c9fcb1a776b82a0b56
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        bg.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\bg.pak
                                        • Size 1021KB
                                        • SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        bn.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\bn.pak
                                        • Size 1.3MB
                                        • SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ca.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\ca.pak
                                        • Size 642KB
                                        • SHA256 0cb115bf30541172098fb7a542713d2a86607e1c9f6c36e459015f0b2cc2876c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        cs.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\cs.pak
                                        • Size 641KB
                                        • SHA256 b8a82ad00c2a033704cf0a9b6a20d4c48f61cab7d6fafd60d5ed7120946d0a64
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        da.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\da.pak
                                        • Size 590KB
                                        • SHA256 1d767d2231eeaf346ee7d5eafceaef5884df41666cafa057ec9784da278a75c1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        de.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\de.pak
                                        • Size 639KB
                                        • SHA256 ed7fd31b1e80c5de13e985a0c15becf8c99f6bc153891c853e144a05b1bf603f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        el.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\el.pak
                                        • Size 1.1MB
                                        • SHA256 fa8f4b42f21b74e386c88f66aa6802076e78da4e442fd74d875cbccd6af00419
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        en-GB.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\en-GB.pak
                                        • Size 518KB
                                        • SHA256 6f735948c21e15f796292e92dda0f4820982774f9b3adfd31a6a3c11284783fc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        en-US.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\en-US.pak
                                        • Size 521KB
                                        • SHA256 43d287ec974b976f98ebc934b980e24628da839fea1fe53f61977420367a7501
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        es-419.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\es-419.pak
                                        • Size 630KB
                                        • SHA256 7f07e8900a74b37f8032067b09648ac9f23d4f70c545411c95a146077fa69b41
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        es.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\es.pak
                                        • Size 624KB
                                        • SHA256 6b27fca44e34f57a258f3e16f53f59bde2604a46874382b314d31a53f1b542ff
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        fi.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\fi.pak
                                        • Size 586KB
                                        • SHA256 483d5fd39ac54057a9fa514982089e6ab36727f17373e5b709b232b1debcd2ed
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        fil.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\fil.pak
                                        • Size 655KB
                                        • SHA256 52f48e2ca2a09da4ae293f4b6b89e7cd356a9a30ba9e6fcab5711c675f5dcccc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        browser_assistant.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                        • Size 5.3MB
                                        • SHA256 f399f3c94ce8b3d6666a8f19a0c33d1e3e0b09ceef4887d323e7c4a35cfbd686
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        opera_autoupdate.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                        • Size 7.4MB
                                        • SHA256 a489b9d34fa948893ed054746ac6bbd7ab8f160f723c6eefbba9226bc3efc699
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        installer_prefs.json.backup

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json.backup
                                        • Size 2KB
                                        • SHA256 0719df68e55aab4badfaec205b7537eaecf1772ac1405cc566214fc450ff3812
                                        • MD5 SHA1 SHA512 TLSH

                                        installer_prefs.json992da835-db08-43eb-bdff-96981afa8ce0.tmp

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json992da835-db08-43eb-bdff-96981afa8ce0.tmp
                                        • Size 2KB
                                        • SHA256 61fe0315879bd91f6759e188700f3365b0cd7e1000afdf94744720aaa24be883
                                        • MD5 SHA1 SHA512 TLSH

                                        opera.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        • Size 3.4MB
                                        • SHA256 0dfe554610f3224f31239479931f1b1a5addac7c3068ab8d39ee72f90b78aa7e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Opera Browser.lnk

                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\Opera Browser.lnk
                                        • Size 1KB
                                        • SHA256 901037cfc998607c22cc417259e6b38a4792530e2916d96782236b13bcc50049
                                        • MD5 SHA1 SHA512 TLSH

                                        additional_file0.tmp

                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\additional_file0.tmp
                                        • Size 2.9MB
                                        • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        assistant_installer.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\assistant_installer.exe
                                        • Size 2.4MB
                                        • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        dbgcore.DLL

                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\dbgcore.DLL
                                        • Size 196KB
                                        • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        dbghelp.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\assistant\dbghelp.dll
                                        • Size 1.8MB
                                        • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        de932af914ba00303d4a2778a383ac9c831101e2.crx

                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                        • Size 4.6MB
                                        • SHA256 e81986014a4fb55c0aa220745d2433c51ad29166b32693de8911784dd3920584
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        installer_prefs_include.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\installer_prefs_include.json
                                        • Size 1015B
                                        • SHA256 3e1594825224f6cb05d2f58e81c72f4ebcf85451ed5ac1b77f74123712a0b5f2
                                        • MD5 SHA1 SHA512 TLSH

                                        installer_prefs_include.json3f323ba6-de21-4823-8dff-00eeb796e6bb.tmp

                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\installer_prefs_include.json3f323ba6-de21-4823-8dff-00eeb796e6bb.tmp
                                        • Size 1KB
                                        • SHA256 e71141ea83e39703fe49b5938fe98caaf697dd3f21f5dd5218cf13fa51d45884
                                        • MD5 SHA1 SHA512 TLSH

                                        installer_prefs_include.jsonfb60456a-9120-4c58-9d91-5f5367f50d29.tmp

                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\9763da99-6af8-4134-a7e4-046be65a6921 Opera Installer Temp\opera_package_202610031359381\installer_prefs_include.jsonfb60456a-9120-4c58-9d91-5f5367f50d29.tmp
                                        • Size 1KB
                                        • SHA256 3eb691cb10839f66c7c1b6701ddc7530fd76522d1f538da73e6cbc305264b7d4
                                        • MD5 SHA1 SHA512 TLSH

                                        0e55c791-0c27-442b-be18-8e78aeadb871.tmp

                                        • Path C:\Users\Admin\AppData\Local\Temp\0e55c791-0c27-442b-be18-8e78aeadb871.tmp
                                        • Size 46KB
                                        • SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        installer.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\7zSCC9684A8\installer.exe
                                        • Size 8.3MB
                                        • SHA256 20b18b3c0b48d9ee2776e3972e1d4215c5b715be7d4d895caa4d3e445d12beb5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        b15f4e6b-646c-4ea7-8694-ad7cb7e219ea.tmp

                                        • Path C:\Users\Admin\AppData\Local\Temp\b15f4e6b-646c-4ea7-8694-ad7cb7e219ea.tmp
                                        • Size 13KB
                                        • SHA256 ce8adf970c3290b7ea94c85727c5abe7eb232e16026a1f8f876ad7f3ec03573d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        e8330b18-f4a4-4acd-89a6-d76fbd50ef39.tmp

                                        • Path C:\Users\Admin\AppData\Local\Temp\e8330b18-f4a4-4acd-89a6-d76fbd50ef39.tmp
                                        • Size 2.6MB
                                        • SHA256 19bc35ca347a6560c0183e56da6bee3353737e78aa9eff9111c5ebd897b0cfd5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        logo_128.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5600_704130693\CRX_INSTALL\public\icons\logo_128.png
                                        • Size 7KB
                                        • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        logo_16.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5600_704130693\CRX_INSTALL\public\icons\logo_16.png
                                        • Size 653B
                                        • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                        • MD5 SHA1 SHA512 TLSH

                                        logo_32.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5600_704130693\CRX_INSTALL\public\icons\logo_32.png
                                        • Size 1KB
                                        • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                        • MD5 SHA1 SHA512 TLSH

                                        logo_48.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5600_704130693\CRX_INSTALL\public\icons\logo_48.png
                                        • Size 2KB
                                        • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                        • MD5 SHA1 SHA512 TLSH

                                        logo_64.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5600_704130693\CRX_INSTALL\public\icons\logo_64.png
                                        • Size 2KB
                                        • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                        • MD5 SHA1 SHA512 TLSH

                                        messages.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5600_898974520\CRX_INSTALL\_locales\en\messages.json
                                        • Size 396B
                                        • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                        • MD5 SHA1 SHA512 TLSH

                                        Icon_Light_Neutral.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5600_898974520\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                        • Size 2KB
                                        • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                        • MD5 SHA1 SHA512 TLSH

                                        Icon_Light_Neutral.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5600_898974520\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                        • Size 962B
                                        • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                        • MD5 SHA1 SHA512 TLSH

                                        1423.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\1423.js
                                        • Size 94KB
                                        • SHA256 083904396c27bacd6f4f5936797b69782ed36d0e94da4bd0f9838f2eeadc8f51
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        1622.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\1622.js
                                        • Size 46KB
                                        • SHA256 327867f94f590c7e1a7933d44dcbb60c11c6b88d23d139e9df2a6c1fc5a27d8a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        1904.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\1904.js
                                        • Size 8KB
                                        • SHA256 180081e934360c9e744f8ac84f9e330d6e63cc498c65d68bd97902ead7caa3ae
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        2343.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\2343.js
                                        • Size 136KB
                                        • SHA256 2952fc8c05a96dc64f53d7070e3fdd5836624ef4f593d198f8ef3949047a6990
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        2667.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\2667.js
                                        • Size 99KB
                                        • SHA256 cf6628ebb254b503b461f360959fd18c521804fb5c92b2d949bd98872faacaff
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        269.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\269.js
                                        • Size 61KB
                                        • SHA256 de24c7e3e2ed1e5b20f5de06c995c71c3cfec0d58daa0168c0f84327ddd4cc91
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        3168.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\3168.js
                                        • Size 54KB
                                        • SHA256 56e67c49e4b5c1b4d208346e4273d7b591cd6d6b84501fdfea1e8ae07f2e7bf3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        326.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\326.js
                                        • Size 89KB
                                        • SHA256 bc72647b15ab6d28f3089c1618826a2f128951725d1688296dd312d9252b5a99
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        3624.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\3624.js
                                        • Size 53KB
                                        • SHA256 4f0ef3d4a4b50dcd10c8faa18bd625a0f1a9a335d18cb01f6956738cbe4714b8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        3642.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\3642.js
                                        • Size 52KB
                                        • SHA256 70ec9671f47f1b9d5dcd3006aecafa9aa6c1534c6303798a858754646c2db6b2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        3937.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\3937.js
                                        • Size 76KB
                                        • SHA256 ddab7b72696808829b8ac208e4e3f741fcb94f63a284f848981296c1ee8662d8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        395.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\395.js
                                        • Size 4KB
                                        • SHA256 4b96d9e55274df2c24dc36a83e0231afab30000f12cd5dbd88ea625da2beadc3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        3995.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\3995.js
                                        • Size 50KB
                                        • SHA256 d2062e46286c9f7cb9178cd44e27bbae98ddf4ba8099922c5fbc83aa73dff8bb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        4294.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\4294.js
                                        • Size 50KB
                                        • SHA256 0d4e0bca17848e6501fa81bec08e21bf46a6e084c8cc0ebefdbbf806d951bed2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        4398.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\4398.js
                                        • Size 52KB
                                        • SHA256 34c1c069e8e2ba29e916b6454f13e5e7ef7493384cdf976339698e6dda333026
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        4583.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\4583.js
                                        • Size 53KB
                                        • SHA256 3f47a32c6f8f3b62a92f0f70c55986597884084ae847d0b63599a70f91e90053
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        4669.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\4669.js
                                        • Size 50KB
                                        • SHA256 ed89774aa6bc29f11dec0f2f435ea0822f0efa0089a8702aeb28e5dc719ae052
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        4688.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\4688.js
                                        • Size 437KB
                                        • SHA256 ac3c358ed6fa24fc05ebbbd370f6b709ff1898f9a2870e75e077cffe219aec65
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        4730.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\4730.js
                                        • Size 85KB
                                        • SHA256 39fa9c90e636fb83305ef126db226cd434f1e3ac6b322fba76bb956059fcdccd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        4829.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\4829.js
                                        • Size 71KB
                                        • SHA256 a012c9fba27b9c530268f68d57cb5b0b868e19cf2c3091aa8a6374c67c7ad4c0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        4958.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\4958.js
                                        • Size 53KB
                                        • SHA256 79c7c11a35e4b87be53893fe79313672641f5723d576cc8db73d61ed4e40f8da
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        511.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\511.js
                                        • Size 86KB
                                        • SHA256 7c1c35ac40261205d10cd582862e797985f3bb212478e9f49a4c6e47be1cda5a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        5336.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\5336.js
                                        • Size 47KB
                                        • SHA256 de93d323013a5ad022b5a1bb4f1645e662cfaf6e8933d55797d7f0559f8e108f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        5428.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\5428.js
                                        • Size 144KB
                                        • SHA256 aae6ae8cceb7a67a58f13ca24ac18080f68b76583d2d9f80a3587455ea533af3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        5570.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\5570.js
                                        • Size 47KB
                                        • SHA256 068d9e0c6db4cb5626e13327107866ac4ad64a5ceb6db5dcea762072307c6229
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        5649.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\5649.js
                                        • Size 60KB
                                        • SHA256 2db1f0ee4cc927e760a07245e9744a1a5c72b58d61cc4faa3d890d8d0fdf5a97
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        5907.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\5907.js
                                        • Size 47KB
                                        • SHA256 337efe9740e934de7c328a7475bf3483fbdb0a68f2a7c42fece34f2bf4530a1f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        6046.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\6046.js
                                        • Size 46KB
                                        • SHA256 bd31e4114feff16810bfbe5883216d4c8f9452e8adcc8d182c166188530c1e6a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        6166.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\6166.js
                                        • Size 71KB
                                        • SHA256 d7f57b12c16fa3cfa4e5f436810ed3e384f02382d61093ac084a596f78dbfdc9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        6214.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\6214.js
                                        • Size 24KB
                                        • SHA256 f1948c19e815bf50f694095c3b936ff50df5253e4bf2e6b40021335b29305800
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        6260.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\6260.js
                                        • Size 51KB
                                        • SHA256 d443d80b7daf79ce8de463e068ee3d6bdae6cc9d41d0d6b08bbc654f90a2fa15
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        630.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\630.js
                                        • Size 56KB
                                        • SHA256 6218781b9f3f268ccd432b3fe9c1f47e351141f225df458bccf0c62714ca8c6f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        6777.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\6777.js
                                        • Size 436KB
                                        • SHA256 c59d66be098733648061f5516c247bf6429503eef769ffad275e00f5eb77bbad
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        685.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\685.js
                                        • Size 52KB
                                        • SHA256 d5b31de8c0ac6a6484a6baa278f02b41e80456ecf10ece34e560f1db4313ea1c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        6980.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\6980.js
                                        • Size 50KB
                                        • SHA256 06b471e061fb36edcaca14e6ae4c5c74a941ca4b8291627abc1279b24b4502dc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        7090.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\7090.js
                                        • Size 53KB
                                        • SHA256 99e9bcd305af11ccade76f90e70b519db2162b3b49f31cd8e7a686dd3eb41ecd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        7103.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\7103.js
                                        • Size 53KB
                                        • SHA256 35f67e939bdf87c12026f04b81d56800ffd6194b4402d10d99dfff1e8c88d586
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        7219.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\7219.js
                                        • Size 58KB
                                        • SHA256 f8fc33e5213a630c07149180b4cabdfd529bfdc5fbc9a2a83956c76c05c42ddc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        7390.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\7390.js
                                        • Size 50KB
                                        • SHA256 addecb14532b0366e19a9a46472ac8e3f2f9a9eb787ca2f03721689caa072f17
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        7946.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\7946.js
                                        • Size 53KB
                                        • SHA256 b9b456694e080ff04f3149f5ff7df605bc344f1eed8d740a81c65a37dbd54874
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        7997.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\7997.js
                                        • Size 53KB
                                        • SHA256 a6229479f430b70dae1e59a22699793a7a4385918c65d489a21c2a5914ef5031
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        8122.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\8122.js
                                        • Size 8KB
                                        • SHA256 88d912861698fc58daf0ce85139701ccc8439f6f728a9f9579a29348e97d775f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        8345.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\8345.js
                                        • Size 54KB
                                        • SHA256 2bce29e57d909d1ea3b0a7b715837afb0be333ee5a193922f98e1fa96ff7ada0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        8395.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\8395.js
                                        • Size 54KB
                                        • SHA256 f5becf9254979cc92e08f160229317c5472e9114c68762ddc4b69fca2e744d97
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        8671.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\8671.js
                                        • Size 53KB
                                        • SHA256 802f6592048204b462286d4cd55f63348b37ad415f54f430dc5d099ba4631de6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9025.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\9025.js
                                        • Size 43KB
                                        • SHA256 7411cc12b8c9871186d6879e49d116b068d53b7bd63796a926cc4cde1627c5e8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9028.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\9028.js
                                        • Size 54KB
                                        • SHA256 6a477869335097bbc7138ceffd95c3ceafe00c806f4a16df03a81f0f11c67e4d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9135.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\9135.js
                                        • Size 23KB
                                        • SHA256 006bbab02591712fa4bc1c01e03700be3b17d11788888361de161d92f63637d3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9432.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\9432.js
                                        • Size 54KB
                                        • SHA256 d874041731004dbf724d8ebf9497cd69b415f920763d233ee34c66bcb3d60feb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        951.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\951.js
                                        • Size 71KB
                                        • SHA256 590680123189045c34ae017ff4dbff5d964bbe2e4cf9e2b0d23b7be145612bf9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9600.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\9600.js
                                        • Size 53KB
                                        • SHA256 2581cdb0ba0f25c66530405c0fde2694920d335d60a8aefed1e6fee1f3c81c24
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9736.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\9736.js
                                        • Size 51KB
                                        • SHA256 a6043ff781f3c7e684a6e6b5f3835813bcf6725c766c9449ddbeec56030c8936
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9794.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\9794.js
                                        • Size 400KB
                                        • SHA256 a50c77ff4198b0b3c9fdbbb31b5e7032f373cb57fc6d15b787d1781a0ef149b0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9844.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\9844.js
                                        • Size 52KB
                                        • SHA256 a7fe2d2717c4bcb4b2d024aca217951344641aad2e639037bb748474fa04faf9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9901.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\9901.js
                                        • Size 52KB
                                        • SHA256 b060a2d5fd2a80ec7ed7841735609799516d45777117bf798cdb4bcfc606beda
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        aria.html

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\aria.html
                                        • Size 486B
                                        • SHA256 e7dcbc2e0bbe6de18980b3093dd01930dd54f32a8fceaed8561069c7e83eeacd
                                        • MD5 SHA1 SHA512 TLSH

                                        aria.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\aria.js
                                        • Size 6KB
                                        • SHA256 dafaa4bd8e724888f666f3bcc32afab1ccb4439516fc9374337e456f56519b1a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        018d39b3bdda8041.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\018d39b3bdda8041.png
                                        • Size 402KB
                                        • SHA256 4cba43e087f6ee04c32854e8231da7a487e975cc29788776cac762a9a95a5585
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        045499a2e328133d.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\045499a2e328133d.svg
                                        • Size 861B
                                        • SHA256 70b9447762b68963f066c8de71bae342d4c3734f614d9f6ff4beb74c7b9e29ea
                                        • MD5 SHA1 SHA512 TLSH

                                        0561eac25d821104.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\0561eac25d821104.svg
                                        • Size 779B
                                        • SHA256 446715e6df1a2374bfff30544a99755ad6eca4c499e7311ff51fe68638d6992b
                                        • MD5 SHA1 SHA512 TLSH

                                        059e8a27e58989ac.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\059e8a27e58989ac.svg
                                        • Size 279B
                                        • SHA256 a86f98c3f77841e716fedb8637f74b06892b1920eb868372178c1053029d9406
                                        • MD5 SHA1 SHA512 TLSH

                                        0647aa53f7a1ab03.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\0647aa53f7a1ab03.png
                                        • Size 4KB
                                        • SHA256 9651739b361d80c22490b05e1c370756327ad96a3893ea10b21043c01e1e3d89
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        07e5916f8c42413d.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\07e5916f8c42413d.svg
                                        • Size 346B
                                        • SHA256 316a84549860cd1dd865b4db4fb7403d46f56782738c30788c019b5b8d1505d4
                                        • MD5 SHA1 SHA512 TLSH

                                        0c065981a363e375.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\0c065981a363e375.svg
                                        • Size 2KB
                                        • SHA256 7ac85af03d05ac66458d94ad4442a5b64ce2ef29bc642d42d34237025855b3e2
                                        • MD5 SHA1 SHA512 TLSH

                                        0c31e8f306b5f2d6.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\0c31e8f306b5f2d6.svg
                                        • Size 686B
                                        • SHA256 ae5af18df50e69fd4fa99cdb32e4192524c6ec491e1da5a6496d5bb35bb33b9a
                                        • MD5 SHA1 SHA512 TLSH

                                        0cbcfc6fe4cb443b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\0cbcfc6fe4cb443b.svg
                                        • Size 200B
                                        • SHA256 1edbe3fa1e31ec007617a1eae760cb7fb3c68c4dc7ecac0bb635088763d51c3e
                                        • MD5 SHA1 SHA512 TLSH

                                        0d0d0fdaeacb5e45.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\0d0d0fdaeacb5e45.svg
                                        • Size 670B
                                        • SHA256 0e05484cdf319c42cbcda83f3ab2ec3cee7942079992da158afa0760fc9b6f3f
                                        • MD5 SHA1 SHA512 TLSH

                                        103eff58785ab58b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\103eff58785ab58b.svg
                                        • Size 534B
                                        • SHA256 ea28a57c2b4c803116566db0c483cc910a6ab9c725db874ff12569222b3d340a
                                        • MD5 SHA1 SHA512 TLSH

                                        1046c13174d8b145.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\1046c13174d8b145.svg
                                        • Size 653B
                                        • SHA256 4c2332c75081ae314df7f476041d1b25aa718e7d943e36a31d46333208dcbedf
                                        • MD5 SHA1 SHA512 TLSH

                                        123ab2cc0ee9e515.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\123ab2cc0ee9e515.svg
                                        • Size 22KB
                                        • SHA256 0f0b994c8670200d3c137a916de9601812b414bd75cbad42f136d9f9d0c82bda
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        12e3fff4ce882c02.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\12e3fff4ce882c02.svg
                                        • Size 706B
                                        • SHA256 ca84cea75231be8426df1ddaa5c4902440419b43e92f6d5677ab3e9a919c9596
                                        • MD5 SHA1 SHA512 TLSH

                                        14e91cb3dc3fa6da.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\14e91cb3dc3fa6da.svg
                                        • Size 467B
                                        • SHA256 4c9290c24d3db4812a64e96509a46dced9fe3bb639c25e8882e2e662845332e8
                                        • MD5 SHA1 SHA512 TLSH

                                        1670e5d31a4fbef2.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\1670e5d31a4fbef2.svg
                                        • Size 452B
                                        • SHA256 f9122391c5df2eedd175f993bd89f589384d7b7222ffe0fc642e8fa42793fcc2
                                        • MD5 SHA1 SHA512 TLSH

                                        1688c4091f2a2e26.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\1688c4091f2a2e26.svg
                                        • Size 2KB
                                        • SHA256 f60f4f3a9a21fa2a0937e510ec3b858bff041b0559fa6cdfafe801c43fc8b220
                                        • MD5 SHA1 SHA512 TLSH

                                        17cbd66168518049.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\17cbd66168518049.svg
                                        • Size 308B
                                        • SHA256 9ab7570e0639a79235fa71e3bc496d9bc05dd4a74aae7f5dcd4bff3812623663
                                        • MD5 SHA1 SHA512 TLSH

                                        181d51d89dd58b1c.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\181d51d89dd58b1c.svg
                                        • Size 619B
                                        • SHA256 7022b29d52ca3620157810b76f3fd4665f728d1ede361afb15937c5793f43ac1
                                        • MD5 SHA1 SHA512 TLSH

                                        18b4316285d3185b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\18b4316285d3185b.svg
                                        • Size 6KB
                                        • SHA256 e72e1f02c8cd530c46a4d756f41be3ec41c3c86ae290b73a27c0fdbe72a6a392
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        1c9159e6d6d5b88c.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\1c9159e6d6d5b88c.svg
                                        • Size 1KB
                                        • SHA256 4e6f66ab1e0836fd18a8ff605ec3b4d12a5bfc60062887c3850d434d33aba205
                                        • MD5 SHA1 SHA512 TLSH

                                        1c94572b8a82384e.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\1c94572b8a82384e.png
                                        • Size 6KB
                                        • SHA256 96ee3e674f0fda9b8a73c3c4242738468405aa0d7c04dc1a4d54e9e548a57a32
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        1eb51cb7434ba396.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\1eb51cb7434ba396.svg
                                        • Size 2KB
                                        • SHA256 c569f486ac99a73a4276a731ee171aaef40e27ec821e755faf50d2fe6f47785d
                                        • MD5 SHA1 SHA512 TLSH

                                        1f8c89981dfc2af2.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\1f8c89981dfc2af2.svg
                                        • Size 266B
                                        • SHA256 dd5f359286947d808937b99b2e8e61fe14d96938524cb056ca42fbd05863357a
                                        • MD5 SHA1 SHA512 TLSH

                                        2108d437d813d94a.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\2108d437d813d94a.svg
                                        • Size 322B
                                        • SHA256 6cafb6ce0b52ceaef8798eee7c818cfbee01cf91b1790106038d8500835fe345
                                        • MD5 SHA1 SHA512 TLSH

                                        211b3eed2dc9a97b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\211b3eed2dc9a97b.svg
                                        • Size 196B
                                        • SHA256 bcd78b2da7cecb286b2cbfc6b86cae98d958ad7227f385fe58340a19984114c0
                                        • MD5 SHA1 SHA512 TLSH

                                        22d2121364e44949.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\22d2121364e44949.png
                                        • Size 1KB
                                        • SHA256 a5fce2fb360c19b93d2df2d1cd3adba1dc88c655bc51cbf6639fa0df61e67af6
                                        • MD5 SHA1 SHA512 TLSH

                                        243e789a53847976.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\243e789a53847976.svg
                                        • Size 585B
                                        • SHA256 fce585879f0a3fc6103d7abbb4fe492f9051f47d6bf82fddaea6083748955e3c
                                        • MD5 SHA1 SHA512 TLSH

                                        253f1599e4c715f7.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\253f1599e4c715f7.png
                                        • Size 10KB
                                        • SHA256 944f79c9d166538e47eee1709dc35adceea233beed204491759f35f83b7c0fe4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        2dfdd8918d195c58.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\2dfdd8918d195c58.svg
                                        • Size 6KB
                                        • SHA256 16dc2921e1f5d89c99aac9914dc98eba54ffa2f4fcf7a942fc2356391c7a46b6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        2edf079df2181fc4.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\2edf079df2181fc4.svg
                                        • Size 1KB
                                        • SHA256 10fd7fdec3af7b54ed8ac68ca5f6b2426e00e86a34c12213810f9c3270dccc77
                                        • MD5 SHA1 SHA512 TLSH

                                        2f4d0c616cea0666.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\2f4d0c616cea0666.svg
                                        • Size 589B
                                        • SHA256 32499717ae28339dbbba06154107872c5769810f691d68db46d9409be5365127
                                        • MD5 SHA1 SHA512 TLSH

                                        31ba446b2ad075f0.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\31ba446b2ad075f0.svg
                                        • Size 635B
                                        • SHA256 ad2ef1213f1a7f67e875a5edb473da0879522ba9946fb2ebf53f226fc795da79
                                        • MD5 SHA1 SHA512 TLSH

                                        33bd9ebd264104a0.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\33bd9ebd264104a0.svg
                                        • Size 2KB
                                        • SHA256 978a0ac5cf228e0fcfbdb7f7058bb26f7c7c3183f58fe3b0e1dbf1ac13516e89
                                        • MD5 SHA1 SHA512 TLSH

                                        3607fe7f996c064b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\3607fe7f996c064b.svg
                                        • Size 4KB
                                        • SHA256 37ef05845a8c85f25659be2e12a0143d98e5bc605a954ad3baf1b84744bc51f3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        36bf914fc5de6f1a.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\36bf914fc5de6f1a.svg
                                        • Size 3KB
                                        • SHA256 231ceb827eaeda96d3f47c045ac59e23d40710cdfbde54945cd89ccff412aa12
                                        • MD5 SHA1 SHA512 TLSH

                                        37192a2a129f5ff9.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\37192a2a129f5ff9.svg
                                        • Size 224B
                                        • SHA256 aba7f75c37591227dfec88b8b83fe1e7700271192d2d38350d047a96a609fd8d
                                        • MD5 SHA1 SHA512 TLSH

                                        3a2ea7738b340340.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\3a2ea7738b340340.png
                                        • Size 6KB
                                        • SHA256 fbdb9fe48083d513b0b946b35a95a157c2434e817f0a11cb2d2963ff144b50c9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        3b9545916efb17d9.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\3b9545916efb17d9.png
                                        • Size 3KB
                                        • SHA256 8ba7bd78ad289a668c7d017266888b7fbf978525cfdfccbdba5f90084fee6dda
                                        • MD5 SHA1 SHA512 TLSH

                                        3c91fce8ee8453fd.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\3c91fce8ee8453fd.svg
                                        • Size 3KB
                                        • SHA256 2725c1bf08181aab08cc46e8ed47467dddeafe891e310bf67fbfa148d91e1cdd
                                        • MD5 SHA1 SHA512 TLSH

                                        3c9e7cbca1e6a295.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\3c9e7cbca1e6a295.png
                                        • Size 4KB
                                        • SHA256 fb0b1e92b7017f202702168117ee6e278708a06815294a796acc6cb4f8600558
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        3cc0c6f21a6016be.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\3cc0c6f21a6016be.png
                                        • Size 47KB
                                        • SHA256 c4e06de6de100feb53ef5f43d038bb779b84d3ace33f38ca4d62e64463f34f3c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        3d5e7395e9ffbdbd.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\3d5e7395e9ffbdbd.svg
                                        • Size 537B
                                        • SHA256 c314723545b36fdfd4c9c340095ed4a3c06367e630321b3bad8d61068cfe827e
                                        • MD5 SHA1 SHA512 TLSH

                                        3dad3b5da9993b6c.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\3dad3b5da9993b6c.svg
                                        • Size 767B
                                        • SHA256 b4281b6b31da12dfce039b3c29ead495e4c3d4588b7f49e2d352070b2b80c893
                                        • MD5 SHA1 SHA512 TLSH

                                        40da13d190d51b3d.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\40da13d190d51b3d.svg
                                        • Size 565B
                                        • SHA256 5c62d6a5be206a51368b1a8f92dc7d12614f89306d21c73512bb42f596f5fe31
                                        • MD5 SHA1 SHA512 TLSH

                                        436b779e283e4cec.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\436b779e283e4cec.svg
                                        • Size 304B
                                        • SHA256 5ff297046ceba4068df96fedcd122d47010943085c278c3b1d66559a1dce096e
                                        • MD5 SHA1 SHA512 TLSH

                                        467465eb8fa50b5b.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\467465eb8fa50b5b.png
                                        • Size 4KB
                                        • SHA256 5c427c31f74ac7b88a574c9822c95a75a330fa768ddb8f02b94ad5e3defcf644
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        48d7ceaf46faf1a6.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\48d7ceaf46faf1a6.png
                                        • Size 16KB
                                        • SHA256 1b530b8562aaba7d4c9bca32501696bd0473c1bd2b1281941779f48a9d75ff06
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        49c99c607978a8f1.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\49c99c607978a8f1.svg
                                        • Size 343B
                                        • SHA256 57f9b1c710d6d4e2e333df1ba9f4e285192fff0e7e7facc2e2950deba2da5f24
                                        • MD5 SHA1 SHA512 TLSH

                                        49f7d977039c303e.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\49f7d977039c303e.svg
                                        • Size 1KB
                                        • SHA256 b14c989ba44526446d5259189ad12e7bdd1261a8f7a6c95490ab30b69684de82
                                        • MD5 SHA1 SHA512 TLSH

                                        4a39a099362c32de.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\4a39a099362c32de.svg
                                        • Size 477B
                                        • SHA256 f49cbed3efadd4afb2ce84feb2844c7bca8ebb1388b29b160b2754d7e53d4bc9
                                        • MD5 SHA1 SHA512 TLSH

                                        4a903e15f57d70f2.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\4a903e15f57d70f2.svg
                                        • Size 608B
                                        • SHA256 582e51dbb3ad1f89b5cf9d9e6c0f760fca3c1e5a8684934ded51f819175b178a
                                        • MD5 SHA1 SHA512 TLSH

                                        4cad3768b65a46fe.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\4cad3768b65a46fe.svg
                                        • Size 8KB
                                        • SHA256 83dadcbf80cb980a6a142a7f916305136ff8d44fa2b30444b04dc85bd862b076
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        51f491f244f5f86b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\51f491f244f5f86b.svg
                                        • Size 13KB
                                        • SHA256 50d5932c16de127f00ac4d4e944510798787a7f3cea6f495f0d5f24d9bcbaad7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        52630788a25809fa.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\52630788a25809fa.svg
                                        • Size 503B
                                        • SHA256 2c4eff17d2184891f880027b9bb5eb9158bc69b69c7724085847cf6905fed97a
                                        • MD5 SHA1 SHA512 TLSH

                                        535cb5713fe4ca16.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\535cb5713fe4ca16.svg
                                        • Size 365B
                                        • SHA256 2600be0ed823e560f4c93df470afec7ac95a1efa8898651e0190730695a67dcb
                                        • MD5 SHA1 SHA512 TLSH

                                        53d73708b13075be.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\53d73708b13075be.svg
                                        • Size 1KB
                                        • SHA256 3f95bf152dd430c7dca4f6d3e1c58376731eb3998c49caa567aab2741bf4e4e9
                                        • MD5 SHA1 SHA512 TLSH

                                        578e94e35aa16d97.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\578e94e35aa16d97.svg
                                        • Size 2KB
                                        • SHA256 90ac01ccda1d73a4076858bfdc567bc22a9100c55b83f6f1c411e917cdea0b66
                                        • MD5 SHA1 SHA512 TLSH

                                        581fa70608c7fb8c.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\581fa70608c7fb8c.svg
                                        • Size 2KB
                                        • SHA256 1e9f16d4e00e445a3ffd0c5e83301bea528c169e0dbe4fb2f0a2116f7ec3aba8
                                        • MD5 SHA1 SHA512 TLSH

                                        5bddb929efb23217.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\5bddb929efb23217.svg
                                        • Size 813B
                                        • SHA256 1d1c2f5a54824e3a71f6d31709d4d7cad656c328224a7936b5b67cb6957d1a4c
                                        • MD5 SHA1 SHA512 TLSH

                                        5d5360751452a836.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\5d5360751452a836.svg
                                        • Size 6KB
                                        • SHA256 1305f3b977b3dfd8018798fc496b76909014ff48183bb94710c6417741ed3b42
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        5d690726b5ef06db.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\5d690726b5ef06db.ttf
                                        • Size 97KB
                                        • SHA256 95837e182baeeada83368f7748db28357f0a1b75c6b84ff7065b5edf933c8e18
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        625b924eeceb153e.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\625b924eeceb153e.svg
                                        • Size 3KB
                                        • SHA256 f41e2968b2610bafbd81dff830cdc9f6362ffd14838ec74ce20b52d154af6d77
                                        • MD5 SHA1 SHA512 TLSH

                                        62b733d362f51663.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\62b733d362f51663.svg
                                        • Size 505B
                                        • SHA256 3033a3f8ba457ed2ad317685ed075f38e5ca78a861350f4729c9cb64611d8a48
                                        • MD5 SHA1 SHA512 TLSH

                                        62dc31e3f318054a.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\62dc31e3f318054a.png
                                        • Size 4KB
                                        • SHA256 6342e5e66aaff11a87b88bd2dedd38a1c23405778adb77710f494c83228a7a02
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        6327ab0f8e3c16d7.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\6327ab0f8e3c16d7.svg
                                        • Size 37KB
                                        • SHA256 9b4c1dbe8257876b21d1ec0a6e50b0ad408f1e1bb70cca9c09b7d0ad07ad4ef4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        634f72a779327aba.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\634f72a779327aba.svg
                                        • Size 249B
                                        • SHA256 9a3fbf6fb2d458eae45fbff9e36faede8305a76b1f09aef0123aae918b1504d1
                                        • MD5 SHA1 SHA512 TLSH

                                        692666c0b9f55408.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\692666c0b9f55408.svg
                                        • Size 2KB
                                        • SHA256 f24ecd9281c6b917fa5ac620fdbda865cd9989211b64d5e54f24ed3b4f389fda
                                        • MD5 SHA1 SHA512 TLSH

                                        6b1f3d57b04e487d.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\6b1f3d57b04e487d.svg
                                        • Size 3KB
                                        • SHA256 8502e540946b516dd25701f9a9ab2be74f14ab0248b8a381b02499c9e91afb8d
                                        • MD5 SHA1 SHA512 TLSH

                                        6e3ebbcd0a39edc2.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\6e3ebbcd0a39edc2.png
                                        • Size 4KB
                                        • SHA256 dd42d346b5cf1d7174cd49882c035bd4822e4b813e53927e857bab438d66246e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        6e6472b3e10aeb93.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\6e6472b3e10aeb93.svg
                                        • Size 224B
                                        • SHA256 d0c0e652606ab8b51dad6a57141330141fd11a410ee9baa0f0c6033a11502918
                                        • MD5 SHA1 SHA512 TLSH

                                        6ef20e0ce2751205.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\6ef20e0ce2751205.svg
                                        • Size 202B
                                        • SHA256 1ad10d17d3d99d5cdd66aec44133e284f47d9474d76eff04693896e77e673903
                                        • MD5 SHA1 SHA512 TLSH

                                        6f76682df45e26ec.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\6f76682df45e26ec.png
                                        • Size 40KB
                                        • SHA256 9a39a3af854b47b0aa23e3fed83e09f6fd2eeac29d5e5aad160d76e094ddb812
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        700fa70309836a11.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\700fa70309836a11.svg
                                        • Size 804B
                                        • SHA256 91b1c6e46527889d2bdf4c542103f7a9b7f517eba1e5eb6bb18817c51febae74
                                        • MD5 SHA1 SHA512 TLSH

                                        7179a1df5787b209.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\7179a1df5787b209.ttf
                                        • Size 95KB
                                        • SHA256 405e73d41afb7e5906efce206a326af5c956f38e255f35421c260e861e599c59
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        717cc4781a98e1ef.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\717cc4781a98e1ef.svg
                                        • Size 517B
                                        • SHA256 d3a68e1933cef3dde3741fe0a35d3521d731ab4f51781b94d636497b67eb89d9
                                        • MD5 SHA1 SHA512 TLSH

                                        72c1fd3caec7d678.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\72c1fd3caec7d678.png
                                        • Size 4KB
                                        • SHA256 811214139ddf84ffa87833724528d3e109f2fd66fedf8004064ec4b8477c85e5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        72db340eafb58783.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\72db340eafb58783.svg
                                        • Size 515B
                                        • SHA256 d4735286d501aa072cbcc71ef7805d06398da367bbb3d9a884827d7eedf2ac40
                                        • MD5 SHA1 SHA512 TLSH

                                        74ab371d1003b3d3.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\74ab371d1003b3d3.svg
                                        • Size 609B
                                        • SHA256 e0b9e22259671c1d486c4bc77575f3d08c23d2476b5d75525239329498fefd3d
                                        • MD5 SHA1 SHA512 TLSH

                                        74ef97b398a3165f.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\74ef97b398a3165f.svg
                                        • Size 1KB
                                        • SHA256 81d1f973976ed12e6d25c4ea758e88b024083871bc19f774b6fb1df72e153f54
                                        • MD5 SHA1 SHA512 TLSH

                                        77a9dc64dd93830f.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\77a9dc64dd93830f.svg
                                        • Size 568B
                                        • SHA256 1ca557b79f24e093d91478753655bdf9377c0eaa7665e882384c0a168c9a17a3
                                        • MD5 SHA1 SHA512 TLSH

                                        77d97894772b8d2f.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\77d97894772b8d2f.svg
                                        • Size 5KB
                                        • SHA256 2679bf41033c426cdc8260adb99b351b234e8b8de764ad126659dcaee6020278
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        791eead8725e14fa.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\791eead8725e14fa.png
                                        • Size 6KB
                                        • SHA256 6bc5f3f9ca3b409c6124aecc4c3a666c9472f6c769994175870b6b794458b736
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        7bc841d9002787a9.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\7bc841d9002787a9.svg
                                        • Size 573B
                                        • SHA256 d7c91b330a747d8617bc87c8b6217325ffeed7f50fca124d6fe47429cec9aa4b
                                        • MD5 SHA1 SHA512 TLSH

                                        7e16ca1274952ee7.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\7e16ca1274952ee7.svg
                                        • Size 8KB
                                        • SHA256 6531422220b89b50dc51f0c04ca3dc8bb3402c7d89bf63d89119e2b277acf0ed
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        7e28f70725b144c5.webp

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\7e28f70725b144c5.webp
                                        • Size 17KB
                                        • SHA256 f011b0ad31fec9033752f9c406f352a6835b6f2821ef591404ca4a72fa4fbead
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        7fe0482b83201fc0.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\7fe0482b83201fc0.svg
                                        • Size 750B
                                        • SHA256 055bcaae2a14a4d012ea7ec758e2a5171412f7346da52c82e750c76c75f64d77
                                        • MD5 SHA1 SHA512 TLSH

                                        809a1e218234bed0.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\809a1e218234bed0.svg
                                        • Size 1KB
                                        • SHA256 ddf381ed309da6ec689983cac97396bc46ca8bf6895e4caa1ae8297fc3b18a27
                                        • MD5 SHA1 SHA512 TLSH

                                        823861837143cdc9.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\823861837143cdc9.png
                                        • Size 3KB
                                        • SHA256 fd11e4f3442db2eeadaffb5b404dc7fb043e60ff57760edcec2098a01cfe9b48
                                        • MD5 SHA1 SHA512 TLSH

                                        833aa64d0b4e0fae.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\833aa64d0b4e0fae.svg
                                        • Size 25KB
                                        • SHA256 7657944e8398514c563319c54cdbae80c74c07fe258d6d8bc05009ddbcb1ee0f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        83a9049d6e0cae5a.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\83a9049d6e0cae5a.svg
                                        • Size 251B
                                        • SHA256 00ed74d7462e2fd6246acd171f2df6dfc3a434f05136781e9f5cf8fe3a3251ed
                                        • MD5 SHA1 SHA512 TLSH

                                        85004375da840fda.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\85004375da840fda.svg
                                        • Size 694B
                                        • SHA256 b385cd1d778679fc5312217a0ecb1aa70c81b97981f898871c3a0b1d2e950373
                                        • MD5 SHA1 SHA512 TLSH

                                        86235b4464b5fafd.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\86235b4464b5fafd.svg
                                        • Size 2KB
                                        • SHA256 79058973147da9ae959eada5388b205cca8adc13787482267157004018c4e313
                                        • MD5 SHA1 SHA512 TLSH

                                        869ca107851f570d.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\869ca107851f570d.png
                                        • Size 30KB
                                        • SHA256 a8b29679f9ae04c818d8abad257b3de8fcf07924ef5cb14b998eb52fd1f2130f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        86f46fb860e9ed7a.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\86f46fb860e9ed7a.png
                                        • Size 3KB
                                        • SHA256 adef3224e62a8db8a5f0d7b6dd80df3b3ffc4abc03ed51a119fb1fed318c8644
                                        • MD5 SHA1 SHA512 TLSH

                                        878f446ee6de2255.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\878f446ee6de2255.png
                                        • Size 7KB
                                        • SHA256 5515a8451464f22c220ac7beb66bd2cdfb8b60a63ee2921d90e36aca9332bc80
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        87dc241b2c0177c7.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\87dc241b2c0177c7.svg
                                        • Size 42KB
                                        • SHA256 195b7cca25841a9745ece97fb1a20f17379e02f1bbee8df68259aa2578157499
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        881503b944af06d9.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\881503b944af06d9.svg
                                        • Size 1KB
                                        • SHA256 8b8b7b1d850ff7319857ccc9a683229617506f6fb60d9ec478ebdb488d457ae6
                                        • MD5 SHA1 SHA512 TLSH

                                        885856d657cdfb17.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\885856d657cdfb17.svg
                                        • Size 272B
                                        • SHA256 7a0a881ca68c4ede97a7988ea9099ec1663718e1fb2cad856793a776bd94540b
                                        • MD5 SHA1 SHA512 TLSH

                                        896669c7450ccc86.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\896669c7450ccc86.png
                                        • Size 6KB
                                        • SHA256 70327650ac97f7f1eb527848ae31b363f1c49b298b9c2f48abb1c5a0ae3a3015
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        8987293ae7ba4469.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\8987293ae7ba4469.svg
                                        • Size 388B
                                        • SHA256 260c7166ff9dd09523c168413274b0f01f14e09cdc85cd75437fbfd0553d6bc3
                                        • MD5 SHA1 SHA512 TLSH

                                        8a62bca7498ca4cb.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\8a62bca7498ca4cb.svg
                                        • Size 343B
                                        • SHA256 8db5ec0d6a3202d7837433fb51a37f146fe9e17d46d881b9c6166cc223e937aa
                                        • MD5 SHA1 SHA512 TLSH

                                        8bf0bcc9a3301fbb.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\8bf0bcc9a3301fbb.svg
                                        • Size 798B
                                        • SHA256 ca36df9cd20e38a361265a3338d41898397f43ae61bc5953356b2dcb72d7bfe2
                                        • MD5 SHA1 SHA512 TLSH

                                        8bf79756f58263e4.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\8bf79756f58263e4.svg
                                        • Size 3KB
                                        • SHA256 50bd8be39e536e80d0e9cf731857749fa0689dd18fec8a8d6d7b767f6d82c816
                                        • MD5 SHA1 SHA512 TLSH

                                        8e2cf4504754d310.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\8e2cf4504754d310.svg
                                        • Size 272B
                                        • SHA256 178e3bd6928ffbc19687e48fac480e711f147ff2ef9b0e9b39f17fa9e52c97af
                                        • MD5 SHA1 SHA512 TLSH

                                        91ede6982d00ebc1.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\91ede6982d00ebc1.png
                                        • Size 4KB
                                        • SHA256 fddceb3e8f58e36954ec380e301e2653df8315941158262adb295c85ea8c58d4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        931d0abe7a9ac97b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\931d0abe7a9ac97b.svg
                                        • Size 485B
                                        • SHA256 e4f65bc15816d84478fc8e67aaf2ea627fe4a5a6745f671d39e02737706e1730
                                        • MD5 SHA1 SHA512 TLSH

                                        96cc5bea8cfdcdd1.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\96cc5bea8cfdcdd1.svg
                                        • Size 1KB
                                        • SHA256 36488700d3357641fdce4ef5ddd0b0e8a70ea92d997e7899c97ec977022f333b
                                        • MD5 SHA1 SHA512 TLSH

                                        96fa9a8683ad0a32.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\96fa9a8683ad0a32.svg
                                        • Size 534B
                                        • SHA256 ef4b7e503a3ebbbe173c71e57a7873602194dd5c1687a424b98f6b36516174aa
                                        • MD5 SHA1 SHA512 TLSH

                                        97e3abd934c12f4e.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\97e3abd934c12f4e.svg
                                        • Size 2KB
                                        • SHA256 d881de46dd3e77af8549f8ff60e826d0e8a41d2f598aba698ec595e58b974837
                                        • MD5 SHA1 SHA512 TLSH

                                        982d29750cf2efe8.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\982d29750cf2efe8.svg
                                        • Size 1KB
                                        • SHA256 276e3c7721aaa1a451ac87c0c75aaba7636725710742d78993c64e946c77084b
                                        • MD5 SHA1 SHA512 TLSH

                                        9a23d988229f3c4f.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\9a23d988229f3c4f.svg
                                        • Size 501B
                                        • SHA256 ea91ccb62f0ffc02e271e6a5318aa82b69ef61177b8f56b965966c90d012cbbd
                                        • MD5 SHA1 SHA512 TLSH

                                        9b5ed63ba06f1f6e.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\9b5ed63ba06f1f6e.png
                                        • Size 56KB
                                        • SHA256 9e2e79522c519aaf36d004285ead45ac7b8e5fe7c06ad0e51ade5e00f2e8a3a6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9b8afed344c17eb7.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\9b8afed344c17eb7.svg
                                        • Size 196B
                                        • SHA256 24cf5aed7c4d57067744a9785c0dad71155d1090b8de8ce44b9c1506d87280df
                                        • MD5 SHA1 SHA512 TLSH

                                        9fc4cb3c560c02fe.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\9fc4cb3c560c02fe.svg
                                        • Size 190B
                                        • SHA256 3d851f03777a7ef958c15b38eba255ad44e654275a9e594a328840cccee99f5f
                                        • MD5 SHA1 SHA512 TLSH

                                        9fd27840422642a9.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\9fd27840422642a9.svg
                                        • Size 365B
                                        • SHA256 7c1dd95fae58b545a40ff1ee264a97dc41428554d4259ff901d7a7ee4008c515
                                        • MD5 SHA1 SHA512 TLSH

                                        9fe4e4ead173d4dd.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\9fe4e4ead173d4dd.svg
                                        • Size 643B
                                        • SHA256 032a838269d065fc262c6156b2c132fc0d234d473021112d96ce78ac97aa8924
                                        • MD5 SHA1 SHA512 TLSH

                                        a0ee19f03b9940aa.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\a0ee19f03b9940aa.svg
                                        • Size 227B
                                        • SHA256 39938a98231b768d985fbe5abdea560bb2b5f31d7011e84be730d92d796d9542
                                        • MD5 SHA1 SHA512 TLSH

                                        a1a3ecb5c68b205c.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\a1a3ecb5c68b205c.svg
                                        • Size 166B
                                        • SHA256 1c90e13a94cb36e3061af78bba58216843b9511c9712d1b4b4b4517a24eec840
                                        • MD5 SHA1 SHA512 TLSH

                                        a49ea8daf7467bb0.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\a49ea8daf7467bb0.svg
                                        • Size 599B
                                        • SHA256 a9a5d95e4cc0a0e0ec5cdc8f986308cdda7d1d80992412f8881cfff65143e4d9
                                        • MD5 SHA1 SHA512 TLSH

                                        a58a2e93a4b54988.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\a58a2e93a4b54988.svg
                                        • Size 304B
                                        • SHA256 11f8d51df24951971552bcf6317d592b2920f73dcba177caa272b70b0627e5de
                                        • MD5 SHA1 SHA512 TLSH

                                        a658c46672ad28f5.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\a658c46672ad28f5.svg
                                        • Size 198B
                                        • SHA256 c7fd1566d975fd06461e0b3dc308e0d06a76f1f08f497670d7c6908a6b58d820
                                        • MD5 SHA1 SHA512 TLSH

                                        a7a18b10642bfd5f.webp

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\a7a18b10642bfd5f.webp
                                        • Size 7KB
                                        • SHA256 a3cbb2fe889c660e3c2031f36e41dc48fa201b9345ecb62dc78317fe4e1131fe
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        a7dbf1405144b262.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\a7dbf1405144b262.svg
                                        • Size 1KB
                                        • SHA256 cc91055c156950e590c3484782daf4fd82da79a36c568739c7af88f7cc4793aa
                                        • MD5 SHA1 SHA512 TLSH

                                        ac28779d03531772.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\ac28779d03531772.svg
                                        • Size 452B
                                        • SHA256 22bd354a581ff101fd23929bd9b9d4f95e4e78ee7b61b02934c76d036bd8d215
                                        • MD5 SHA1 SHA512 TLSH

                                        ad827c7ddb8dd0cb.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\ad827c7ddb8dd0cb.svg
                                        • Size 324B
                                        • SHA256 689f991b5bfc36e706928b329f1c36cc51464bcb367b555f388cabac16ac7c91
                                        • MD5 SHA1 SHA512 TLSH

                                        ae846f7eddd04278.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\ae846f7eddd04278.svg
                                        • Size 1KB
                                        • SHA256 b29819aa59d21fdc24b45cf3546cce9c3b5a4151d970b1efe94f6d49ea9299b8
                                        • MD5 SHA1 SHA512 TLSH

                                        aeba9f15ecf7f43b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\aeba9f15ecf7f43b.svg
                                        • Size 224B
                                        • SHA256 2e1900037f584a61efd75d74176733ec9722d9409bafbf8db37df79508ea11d6
                                        • MD5 SHA1 SHA512 TLSH

                                        af5f97cd7e418012.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\af5f97cd7e418012.svg
                                        • Size 973B
                                        • SHA256 05f47fb3ffb7323bdbf6b397330229a7f32a3a1f2d17365e748f8777a82dd6c0
                                        • MD5 SHA1 SHA512 TLSH

                                        b294d3d2f70d508c.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\b294d3d2f70d508c.svg
                                        • Size 515B
                                        • SHA256 e593d97979df385b1c6e2270af9a87bee796d70e7c84099ea449839bcba81008
                                        • MD5 SHA1 SHA512 TLSH

                                        b37bf551ac569d00.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\b37bf551ac569d00.svg
                                        • Size 939B
                                        • SHA256 55369f30e6b56ea039d0e71e55aa81d85264efb57b231163c72060670fad713a
                                        • MD5 SHA1 SHA512 TLSH

                                        b4e5db2f8e466503.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\b4e5db2f8e466503.svg
                                        • Size 534B
                                        • SHA256 1278a6c6c37a0745eb9d3f919dc5aa19078b021a7360046cbfb7d3195f82bae0
                                        • MD5 SHA1 SHA512 TLSH

                                        b631c209ab478391.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\b631c209ab478391.svg
                                        • Size 913B
                                        • SHA256 90e0f9b6b878cc11b47456104b02bffab635964bf58260f693356af8f680be7e
                                        • MD5 SHA1 SHA512 TLSH

                                        b80fc20fe385bc09.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\b80fc20fe385bc09.svg
                                        • Size 870B
                                        • SHA256 b8c1bd8dc96665c3656cc96cc02f5b91954d4b19d8016a0fd17badab678c4fbd
                                        • MD5 SHA1 SHA512 TLSH

                                        b87ddd7d399ff7d2.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\b87ddd7d399ff7d2.svg
                                        • Size 795B
                                        • SHA256 ef2c417a4822198f775e6a043e815068d50597dab195a20c361f892ef453db87
                                        • MD5 SHA1 SHA512 TLSH

                                        b8ddd3b0a5acfb1f.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\b8ddd3b0a5acfb1f.svg
                                        • Size 916B
                                        • SHA256 9fa8322e2025b75254a164876192790e0b99b33e1b8907c7f10852100909a642
                                        • MD5 SHA1 SHA512 TLSH

                                        b970e42cf2658a8e.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\b970e42cf2658a8e.png
                                        • Size 40KB
                                        • SHA256 537116744d70532b6eb89d605ca4a503300a34d1d88471636542715d86f509d0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        b9e2526d946fd3cd.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\b9e2526d946fd3cd.svg
                                        • Size 2KB
                                        • SHA256 048bee5d83dae709f1ec6053ed1f37d2baeb3fbd81e471ae4c7416a492ccb166
                                        • MD5 SHA1 SHA512 TLSH

                                        ba9bf1c3957e59f0.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\ba9bf1c3957e59f0.png
                                        • Size 10KB
                                        • SHA256 d88cfe3f564100986936c848d6b7b3830942901c908b7a5a5c39150547af8753
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        bc4e54d6f0276d36.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\bc4e54d6f0276d36.svg
                                        • Size 8KB
                                        • SHA256 2a886f41916a813d93a2a17f230c10f6a714b92c85d2109eb0c5fd5c43c8364b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        bccd629ae7cb011d.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\bccd629ae7cb011d.svg
                                        • Size 217B
                                        • SHA256 f6dedb2e1102582c17b6a4424b86fe6181ae22f7c4a09015f1a1d2360830a831
                                        • MD5 SHA1 SHA512 TLSH

                                        be50ce6d9253a5a9.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\be50ce6d9253a5a9.png
                                        • Size 30KB
                                        • SHA256 41aa6176ec702cc098347a51403f0299c0209c8722999af957a04d6115517903
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        befe724adae4279e.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\befe724adae4279e.svg
                                        • Size 297B
                                        • SHA256 8cad02aaee30ae0131cf45f0c2127e4ffbd9e99a5a5877c5a23c3372c35ac6e1
                                        • MD5 SHA1 SHA512 TLSH

                                        c01afd7dfd61f804.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\c01afd7dfd61f804.svg
                                        • Size 198B
                                        • SHA256 ec4d631df4fa2114ffd8d9be28067aa58c8314e7efa6e9d4a6458b10e7e243cf
                                        • MD5 SHA1 SHA512 TLSH

                                        c2975b0d0a40a4fd.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\c2975b0d0a40a4fd.png
                                        • Size 2KB
                                        • SHA256 f6a35bdbdd9251aea9aaa2ef7e15ba466c39169b940424110bc0676de2d9ba7e
                                        • MD5 SHA1 SHA512 TLSH

                                        c3c4018a4fd62a9a.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\c3c4018a4fd62a9a.svg
                                        • Size 520B
                                        • SHA256 78c13a1cabf0d0caab6c5dedcf2c0de5737a3fbeb14391d2e32366c19da3195d
                                        • MD5 SHA1 SHA512 TLSH

                                        c57ac42a27678f77.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\c57ac42a27678f77.png
                                        • Size 1KB
                                        • SHA256 3a5d63fc899063db5eb8a48e421f52dead3e10031e1c8093425449df8ca32bbb
                                        • MD5 SHA1 SHA512 TLSH

                                        c5e2e5518ff4a597.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\c5e2e5518ff4a597.svg
                                        • Size 884B
                                        • SHA256 f144a22baba0ebd9eb2e0b8f9ec4203bb48f8d35a2e533994c427f9e90a463ad
                                        • MD5 SHA1 SHA512 TLSH

                                        c5ed42bd4f1a6974.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\c5ed42bd4f1a6974.svg
                                        • Size 394B
                                        • SHA256 d93b470b2fe89d945653c2bb3ae0a6c3b80164bdfd4774664e6260d599b790c9
                                        • MD5 SHA1 SHA512 TLSH

                                        c6b3624b8cf9684a.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\c6b3624b8cf9684a.png
                                        • Size 3KB
                                        • SHA256 f9658376f26164948ab72dca9692ac812d3420d8b7ec0dadd1fb09aff809653d
                                        • MD5 SHA1 SHA512 TLSH

                                        c7c6749d23d7b7f6.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\c7c6749d23d7b7f6.svg
                                        • Size 221B
                                        • SHA256 201cb9465adedd0fd56784d027ece0b539ba644ec0ed515de4b5a3c54cb5d112
                                        • MD5 SHA1 SHA512 TLSH

                                        ccdd22e861d21d30.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\ccdd22e861d21d30.svg
                                        • Size 936B
                                        • SHA256 a9026d4e66a703b1576160f9ac407d382c3301575c7f699bd6e78d46a4063253
                                        • MD5 SHA1 SHA512 TLSH

                                        cf9e121c611b5d0e.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\cf9e121c611b5d0e.svg
                                        • Size 2KB
                                        • SHA256 8eba6969e00d42f30a2b31881b43d6219f73288c381adf9d09659189d63bcfe3
                                        • MD5 SHA1 SHA512 TLSH

                                        d05dd34996b64d16.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d05dd34996b64d16.svg
                                        • Size 16KB
                                        • SHA256 7d4c4169954fe742a59cd5c390f8fb362a82c7c4bc42942f8c8ef0eb29eda5b4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        d065dd41270e47f7.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d065dd41270e47f7.png
                                        • Size 4KB
                                        • SHA256 356c07a3cf412098080594e9faf780f09581eb2ffd6bf2254405af8074651614
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        d28440c6dc230bf9.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d28440c6dc230bf9.svg
                                        • Size 290B
                                        • SHA256 ec9362b2f09d1fd635057a48910bde5d75971169c9c4e3abdc8f7c21c16828bc
                                        • MD5 SHA1 SHA512 TLSH

                                        d2cf554ccc93ffff.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d2cf554ccc93ffff.svg
                                        • Size 263B
                                        • SHA256 95c04a4a17f3b696b617a0b3bc222d85410f10349bc7ee616cb6b937c9006718
                                        • MD5 SHA1 SHA512 TLSH

                                        d2e19878110efee6.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d2e19878110efee6.png
                                        • Size 3KB
                                        • SHA256 6c0b3e2a8ba624f2a859c4fd9939b89dfa37699cb6d92f1393881ecc74760c1b
                                        • MD5 SHA1 SHA512 TLSH

                                        d46d147daa1d2f79.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d46d147daa1d2f79.svg
                                        • Size 945B
                                        • SHA256 6d10f336af16d43cef3b98c2506fadcbb2e4a96131433aaf1c0f782e93826324
                                        • MD5 SHA1 SHA512 TLSH

                                        d59a1307c364439b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d59a1307c364439b.svg
                                        • Size 674B
                                        • SHA256 572e8b100f61e6802e561dc255c0cf5c7e7882cb2fad418e851838410ed68fc4
                                        • MD5 SHA1 SHA512 TLSH

                                        d78ba875312ee059.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d78ba875312ee059.png
                                        • Size 17KB
                                        • SHA256 cd09040e73647aa8edfb60dbd4c50b2bd462aa2fd0b0e8df205190a070051de6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        d7dc8f3dc0f234e6.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d7dc8f3dc0f234e6.svg
                                        • Size 1KB
                                        • SHA256 4147c78e34a2c7eba0d21dc26a45bc74d7459e73da4d18ee0d707acec09fff06
                                        • MD5 SHA1 SHA512 TLSH

                                        d841f4bcced2e8bc.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d841f4bcced2e8bc.svg
                                        • Size 614B
                                        • SHA256 bf1516f759e2e0a845425060a511e7fbf01b434e6ea7b52aeb0a2559ce34b0a8
                                        • MD5 SHA1 SHA512 TLSH

                                        d897a6873296312d.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d897a6873296312d.svg
                                        • Size 234B
                                        • SHA256 74def5cf4975a6c055fe5550dedaa0fe6c54e465d12b27f7dbc8aa2a7bb32aac
                                        • MD5 SHA1 SHA512 TLSH

                                        d9b97322b3dc4aee.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\d9b97322b3dc4aee.png
                                        • Size 6KB
                                        • SHA256 779291157f20990ddb9c6cfdd6181550cc7a31ae5ac25292d590eb20d2efa110
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        dcbb2fc627b41963.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\dcbb2fc627b41963.png
                                        • Size 36KB
                                        • SHA256 60884a555dcd360aef6f7ce8f8dcb66815376195ffd67740c7c239d87fe49424
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        defebccb46e071fb.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\defebccb46e071fb.svg
                                        • Size 6KB
                                        • SHA256 fbaa12b93ee17014b7c724abfa62545bf05e1dd805dfa6e5c1f51588142ac8d8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        df04cc6b3471fe0f.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\df04cc6b3471fe0f.svg
                                        • Size 494B
                                        • SHA256 5b67a74696b0cf0d76c60192825453971991441b6a5b6ad62d4c5366815e2dff
                                        • MD5 SHA1 SHA512 TLSH

                                        dfcd56774003574f.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\dfcd56774003574f.svg
                                        • Size 587B
                                        • SHA256 2d26d211cd091e758241941a40d1eb57711712fcc3eb1d705eef32547d9a282b
                                        • MD5 SHA1 SHA512 TLSH

                                        e0355e3bf0f86483.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\e0355e3bf0f86483.svg
                                        • Size 318B
                                        • SHA256 e71096281ca6c7c1abb7c50e6fa2c3486f78b1dd4b5f5f5537f38bfefee317cb
                                        • MD5 SHA1 SHA512 TLSH

                                        e0753f4e4fd1f172.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\e0753f4e4fd1f172.svg
                                        • Size 2KB
                                        • SHA256 644b2a34a99a01eb62f923c483545c8ada2348ce5a0154dfecb8ebddd93dc7fc
                                        • MD5 SHA1 SHA512 TLSH

                                        e117838d3c5eda37.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\e117838d3c5eda37.svg
                                        • Size 271B
                                        • SHA256 b8adf2f0aeee2f2cc4cda4fecba7ba04db0043814c660d32c8ea92641d446762
                                        • MD5 SHA1 SHA512 TLSH

                                        e337c07cfdb9efce.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\e337c07cfdb9efce.svg
                                        • Size 352B
                                        • SHA256 405fb48c2c04f011f040a13623c3dd39a1905aab12b7070df47dfcfa70ec422a
                                        • MD5 SHA1 SHA512 TLSH

                                        e8a8ba696fae21e8.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\e8a8ba696fae21e8.png
                                        • Size 7KB
                                        • SHA256 a9b90f8084a5ac0cbb4136dbb53eb6c163051046f06c61ca911cf67e24c9a462
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        e8bb6bfbe58f9668.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\e8bb6bfbe58f9668.svg
                                        • Size 10KB
                                        • SHA256 f195773404e0283872b84c104951749d80e678eefa8620bf91a72c8a15ce574a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        e95ff90adab8dab9.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\e95ff90adab8dab9.png
                                        • Size 5KB
                                        • SHA256 0eab88dde1bb6297c4da1fe29780391aed05f32b2d52bdd5cd02161ec061dec0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ecc19831f5fd7269.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\ecc19831f5fd7269.svg
                                        • Size 891B
                                        • SHA256 34ffafd6aed516226f8d012ebe517067f3e4a5d1c29a44adc63c64645e3b4bda
                                        • MD5 SHA1 SHA512 TLSH

                                        ee302686425de6d1.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\ee302686425de6d1.svg
                                        • Size 1KB
                                        • SHA256 d3010106cff7fc076de4f24f77aca90cd29ee94fd3675bb23f1107fe1817e88e
                                        • MD5 SHA1 SHA512 TLSH

                                        f0c9814d841afa42.webp

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\f0c9814d841afa42.webp
                                        • Size 18KB
                                        • SHA256 4fe7d9933cfc5daf877acb90887ae5e039209a7dd7e6be78cb67358734bc93cd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        f156fe54a5a79b77.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\f156fe54a5a79b77.svg
                                        • Size 514B
                                        • SHA256 511c586eb88a9c206735e3e3fba7aa46f07cbcd1b6e99be5eb885d803a05610d
                                        • MD5 SHA1 SHA512 TLSH

                                        f3bcc22345312f8d.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\f3bcc22345312f8d.svg
                                        • Size 3KB
                                        • SHA256 6614961bc63bed06c36336bbf9e319036b57fde7bba1120d6a6f3efe16aafe48
                                        • MD5 SHA1 SHA512 TLSH

                                        f45cbb00d6bb82cc.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\f45cbb00d6bb82cc.svg
                                        • Size 322B
                                        • SHA256 d32b690b0525b4fa227dc01328f12cf5d6bf07bd2e8886cb839fde079e247419
                                        • MD5 SHA1 SHA512 TLSH

                                        f515140b598dd3f7.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\f515140b598dd3f7.svg
                                        • Size 481B
                                        • SHA256 133df0cdeb44eecd6381f3f97c7edacba9956d9ae6de1902f7c5a988b9e8f123
                                        • MD5 SHA1 SHA512 TLSH

                                        f7b78d9433c9d476.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\f7b78d9433c9d476.svg
                                        • Size 406B
                                        • SHA256 c3f7cbe95b88ab96679037aecc2a6fc59286b2f047d0b56b5777de5f27d7bbf3
                                        • MD5 SHA1 SHA512 TLSH

                                        f7fc539ce7a13719.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\f7fc539ce7a13719.svg
                                        • Size 1KB
                                        • SHA256 65d27f13b9a522ee5e6f21058684445eef0791866ef29fd0bd34d1f82c5ac538
                                        • MD5 SHA1 SHA512 TLSH

                                        f8695cbe3a95268b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\f8695cbe3a95268b.svg
                                        • Size 870B
                                        • SHA256 8f9307e7950595d6edd6b89f898ff848a6d95b8f37d39849b6faa31ae45f9dc8
                                        • MD5 SHA1 SHA512 TLSH

                                        f907caea9dc5c5af.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\f907caea9dc5c5af.svg
                                        • Size 1KB
                                        • SHA256 6b250c1857cae345f3fb6c64f9a43302c86eb99e2e77941003398db5af0477d3
                                        • MD5 SHA1 SHA512 TLSH

                                        f95f5a575299231b.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\f95f5a575299231b.svg
                                        • Size 402B
                                        • SHA256 306ed4c0b1c53e5fa313a3396dafda9ba506e3cc69e29f270b76affee5ae2e94
                                        • MD5 SHA1 SHA512 TLSH

                                        fc431416b1024934.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\fc431416b1024934.svg
                                        • Size 2KB
                                        • SHA256 31a2447cb28df6dd58aea512fcc054b455b4d1cb7a70a71eac4989aaa1d4e240
                                        • MD5 SHA1 SHA512 TLSH

                                        ff8d935c2abdcdac.svg

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\assets\ff8d935c2abdcdac.svg
                                        • Size 2KB
                                        • SHA256 2e62797f1b6c866bd2c2a5d27889bf0fb093bd8a25bab5f9dc2690861994b767
                                        • MD5 SHA1 SHA512 TLSH

                                        blacklist.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\blacklist.js
                                        • Size 76KB
                                        • SHA256 e3e78decce09ec484dd9028a01c14f3cda2681744abb17af695f9561a5e44f16
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        common.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\common.js
                                        • Size 2.1MB
                                        • SHA256 5340c156a8608502f0f8cb4dfba427c210d62fb31a29a2b7bdafb9ff3a98ee23
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        devtools.html

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\devtools.html
                                        • Size 489B
                                        • SHA256 fb9993c641b228e488b55001e611f05767f98674c16c5a4530d01327b1a24de0
                                        • MD5 SHA1 SHA512 TLSH

                                        devtools.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\devtools.js
                                        • Size 287KB
                                        • SHA256 fc952f379fa15e68d882999f565871416319fd3b3862b2b2558341fb39b9ce35
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        favicon_opera_one.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\favicon_opera_one.png
                                        • Size 2KB
                                        • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                        • MD5 SHA1 SHA512 TLSH

                                        favicon_opera_one.png

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\favicon_opera_one.png
                                        • Size 2KB
                                        • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                        • MD5 SHA1 SHA512 TLSH

                                        KaTeX_AMS-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_AMS-Regular.ttf
                                        • Size 62KB
                                        • SHA256 68534840bcfdd2bffb6f0e8deb48684dd01e7f04ea2813267577afb906de1d13
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_AMS-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_AMS-Regular.woff
                                        • Size 32KB
                                        • SHA256 30da91e84c893f875e252689faebdc590b2871145e8adc7f9a9d4dbd8ce0b251
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_AMS-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_AMS-Regular.woff2
                                        • Size 27KB
                                        • SHA256 0cdd387c9590a1a9f9794560022dbb59654a7d86f187aa0c81495ad42d3a7308
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Caligraphic-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Caligraphic-Bold.ttf
                                        • Size 12KB
                                        • SHA256 07d8e303ce4fc12b4bb54f1004170dd190a1f3db45d400fe68060df3e0897268
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Caligraphic-Bold.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Caligraphic-Bold.woff
                                        • Size 7KB
                                        • SHA256 1ae6bd7475590e97e7f145a89e09ccde322f7a6bc0b91607b1c8b8ee28290fed
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Caligraphic-Bold.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Caligraphic-Bold.woff2
                                        • Size 6KB
                                        • SHA256 de7701e42cf1f4cf0b766c03fb27977207eee2f4fd5d76fa82188406da43ea4c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Caligraphic-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Caligraphic-Regular.ttf
                                        • Size 12KB
                                        • SHA256 ed0b74372feefcbb9c0666b2e210da37b7e49fa7fbbf3eeb11db5f693dacfbb7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Caligraphic-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Caligraphic-Regular.woff
                                        • Size 7KB
                                        • SHA256 3398dd02302557a793f2863f88e02d96ce10df2abffa07c8e9fa90775116e65c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Caligraphic-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Caligraphic-Regular.woff2
                                        • Size 6KB
                                        • SHA256 5d53e70ad607c2352162dec9e0923fb54ecdafaccbf604cd8dcf7d00facb989b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Fraktur-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Fraktur-Bold.ttf
                                        • Size 19KB
                                        • SHA256 9163df9c7122432e6495b4229fa9071cf9ae86a758ae5efc4924ec2e1a6dbce1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Fraktur-Bold.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Fraktur-Bold.woff
                                        • Size 12KB
                                        • SHA256 9be7ceb88004ab8ad124082246fbfcca4091e36385d4ec6ed1df67375dad50fb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Fraktur-Bold.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Fraktur-Bold.woff2
                                        • Size 11KB
                                        • SHA256 74444efd593c005e3f4573b44524704c0af0a937fe911cca9e94068d0d140d3f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Fraktur-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Fraktur-Regular.ttf
                                        • Size 19KB
                                        • SHA256 1e6f9579e90e2cac37f8f60a597c436e075c114385652b7cbeb0dec0421291b3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Fraktur-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Fraktur-Regular.woff
                                        • Size 12KB
                                        • SHA256 5e28753be717dac97f559f49bc10be9cf3c124ddcabda6659d11cb68febc6463
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Fraktur-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Fraktur-Regular.woff2
                                        • Size 11KB
                                        • SHA256 51814d270d06ff0255dba0799994fa4d8c84d11f09951d47595f4abb1f3602dc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-Bold.ttf
                                        • Size 50KB
                                        • SHA256 138ac28d1663b3037e9c5f52371fa5c63d8324f4a38d22cd573e6ea3a3fd0cf8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-Bold.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-Bold.woff
                                        • Size 29KB
                                        • SHA256 c76c5d696297d51b9cb1639c7da4334f0e7dec81b42b11213b5e25ef671bb822
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-Bold.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-Bold.woff2
                                        • Size 24KB
                                        • SHA256 0f60d1b897938ec918c8ce073092411baf9438f6739465693ff18b0f9d20b021
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-BoldItalic.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-BoldItalic.ttf
                                        • Size 32KB
                                        • SHA256 70ee1f64a20f2048c21940ef46d0144fd215baa953ca69afd1e31e98544f708f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-BoldItalic.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-BoldItalic.woff
                                        • Size 18KB
                                        • SHA256 a6f7ec0d846ac7ad975adb8959c37ed49b94acbc4ae436db9ce9e20287e4a64c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-BoldItalic.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-BoldItalic.woff2
                                        • Size 16KB
                                        • SHA256 99cd42a3c072d918f2f44984a807cf7aa16e13545fd0875fc07c6c65f99e715b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-Italic.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-Italic.ttf
                                        • Size 32KB
                                        • SHA256 0d85ae7cc30f23790a7f1a58c4a112fdca8aae769b6ba11429af1d98b1b6cb3a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-Italic.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-Italic.woff
                                        • Size 19KB
                                        • SHA256 f1d6ef86f3b11a528bd5185199bd2443ecb2b0dead96d88674b5a2c12be24bdf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-Italic.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-Italic.woff2
                                        • Size 16KB
                                        • SHA256 97479ca6cce906abc961ecac96faa5f9ca2e61b8e7670d475826bcdee9a7c267
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-Regular.ttf
                                        • Size 52KB
                                        • SHA256 d0332f52868370fd83ae7fa46470f90c8f2eab2fcf12bc4f88080b340c95a830
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-Regular.woff
                                        • Size 30KB
                                        • SHA256 c6368d87e8a1a3a5d337623d83d8dc4b868f242a9ad476237d6f8d1e0f168cdc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Main-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Main-Regular.woff2
                                        • Size 25KB
                                        • SHA256 c2342cd8b869e01752a9321dc17213fc40d4d04c79688c1d43f2cf316abd7866
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Math-BoldItalic.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Math-BoldItalic.ttf
                                        • Size 30KB
                                        • SHA256 f9377ab0271cda59af24bcffbd46a4d0c8a3572ffafdbb38de2ad5ea7b0d5ee5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Math-BoldItalic.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Math-BoldItalic.woff
                                        • Size 18KB
                                        • SHA256 850c0af5c2238497febaf5e461d880bf458c341f42f4f330f1b1ab5698b1998e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Math-BoldItalic.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Math-BoldItalic.woff2
                                        • Size 16KB
                                        • SHA256 dc47344dbb6cb5b655c8460d561f4df5f501b90c804ad3c6cec65fe322351ab1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Math-Italic.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Math-Italic.ttf
                                        • Size 30KB
                                        • SHA256 08ce98e51b04d58945a301e639e02b6998af29fdfd61a7b8afdd07bbfc479d4a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Math-Italic.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Math-Italic.woff
                                        • Size 18KB
                                        • SHA256 8a8d244581371912b8f3f5a23e2437cb2a59cd9bcaebb0346e722c05737a2571
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Math-Italic.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Math-Italic.woff2
                                        • Size 16KB
                                        • SHA256 7af58c5ec8f132a2ddde9027c6d7814decce4d3b822a11192a42a20e2e973264
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_SansSerif-Bold.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_SansSerif-Bold.ttf
                                        • Size 23KB
                                        • SHA256 1ece03f79f95277d57dc7f6b435a74e1379b0d46104a8530286b60ff49369ea0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_SansSerif-Bold.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_SansSerif-Bold.woff
                                        • Size 14KB
                                        • SHA256 ece03cfd83e22c212cdef66feb8442d25a083beb988db3f1883f3f9738d750ba
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_SansSerif-Bold.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_SansSerif-Bold.woff2
                                        • Size 11KB
                                        • SHA256 e99ae51144bf1232efcc1bfe5add36262c6866b0faab24fa75740e1b98577a62
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_SansSerif-Italic.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_SansSerif-Italic.ttf
                                        • Size 21KB
                                        • SHA256 3931dd81faed86ba021bb2bbdc36f5bed9a38d6b4f4077aca59b265aa1b02083
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_SansSerif-Italic.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_SansSerif-Italic.woff
                                        • Size 13KB
                                        • SHA256 91ee67500cc0129aa0ace3ac5c61ff1692102f0f31d02b69347fba35dcb75bf2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_SansSerif-Italic.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_SansSerif-Italic.woff2
                                        • Size 11KB
                                        • SHA256 00b26ac825e2095056396e0553b8ac26d3f8ad158c3826e28b4c45b385c4714a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_SansSerif-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_SansSerif-Regular.ttf
                                        • Size 18KB
                                        • SHA256 f36ea897e19f4a2e571d1e900e4e3710e438deb05a842486045ba0a3e616a4ad
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_SansSerif-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_SansSerif-Regular.woff
                                        • Size 12KB
                                        • SHA256 11e4dc8a6471ff6d6ee561d53d10fde8f7489e798257ff449c5d37c197435605
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_SansSerif-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_SansSerif-Regular.woff2
                                        • Size 10KB
                                        • SHA256 68e8c73ef42afd3ccec58bf0fba302cce448938e7fc020a5e31f8a952eee1342
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Script-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Script-Regular.ttf
                                        • Size 16KB
                                        • SHA256 1c67f068fea8bb09bf099c088b1cf64bd27516a6e07f4684344873564bb66a67
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Script-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Script-Regular.woff
                                        • Size 10KB
                                        • SHA256 d96cdf2b3bdd4d64a8fd5f74a4c467f123a8a73931cd435889f08ffaf9bf947a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Script-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Script-Regular.woff2
                                        • Size 9KB
                                        • SHA256 036d4e95149b69ff9bcc0cd55771efeb25ffa3947293e69acd78d5ac328c684b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size1-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size1-Regular.ttf
                                        • Size 11KB
                                        • SHA256 95b6d2f1a50173bfedb8c63e1d1c99b10427d0a4df4201cb44513b226951a22b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size1-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size1-Regular.woff
                                        • Size 6KB
                                        • SHA256 c943cc986384f59e86bea5fd7dc50a9c4dfe567a7c05eb40d6790720dead97c9
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size1-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size1-Regular.woff2
                                        • Size 5KB
                                        • SHA256 6b47c40166b6dbe21a5dfca7718413f2147fd2399be1ba605d8ad39cedf25dfe
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size2-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size2-Regular.ttf
                                        • Size 11KB
                                        • SHA256 a6b2099fb555c60e3a0db3a08842ebf1d732c6eb4e4bf44913613bed4fc4e39b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size2-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size2-Regular.woff
                                        • Size 6KB
                                        • SHA256 2014c523c3210bcc166648c4d4cc57f05b747df07a24277bf71c51e67dc79e3d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size2-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size2-Regular.woff2
                                        • Size 5KB
                                        • SHA256 d04c54219f9eaec6d4d4fd42dfb28785975a4794d6b2fc71e566b9cd6db842dd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size3-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size3-Regular.ttf
                                        • Size 7KB
                                        • SHA256 500e04d54f0d51666332c9d2089aa803be22aa878eca539e59fa53c6e522b082
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size3-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size3-Regular.woff
                                        • Size 4KB
                                        • SHA256 6ab6b62e9b62dae2c00dd90f791bd10950be0ecc3490d7d6045f51c2e8fe0949
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size3-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size3-Regular.woff2
                                        • Size 3KB
                                        • SHA256 73d591271b1604960cb10bb90fee021670af7297017e0e98480b332d11f51995
                                        • MD5 SHA1 SHA512 TLSH

                                        KaTeX_Size4-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size4-Regular.ttf
                                        • Size 10KB
                                        • SHA256 c647367d1dd4e162468717d020e1fc0f1dc5c26ebfdffbe55261713bf88c5877
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size4-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size4-Regular.woff
                                        • Size 5KB
                                        • SHA256 99f9c6750b489c9462bf04900bd3f939df9b829339daaaaa99ef5495cdddea58
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Size4-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Size4-Regular.woff2
                                        • Size 4KB
                                        • SHA256 a4af7d414440a1c1790825cfb700cf9cf43b0f2c4b04f0ebc523011ad9853ec0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Typewriter-Regular.ttf

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Typewriter-Regular.ttf
                                        • Size 26KB
                                        • SHA256 f01f3e87d9c6a61c0c081ceb577abd864eb00a612f7ac1620dd6915fad2ef5aa
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Typewriter-Regular.woff

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Typewriter-Regular.woff
                                        • Size 15KB
                                        • SHA256 e14fed02b1aba7ce9f5afd5844b5d0321b22351febc720e0de8b8723527609f7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        KaTeX_Typewriter-Regular.woff2

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\fonts\KaTeX_Typewriter-Regular.woff2
                                        • Size 13KB
                                        • SHA256 71d517d67827787cfabdf186914cc3358eda539e37931941f2b2fd4a21f68c0b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        handleReloadUI.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\handleReloadUI.js
                                        • Size 4KB
                                        • SHA256 80f9422a1a5447d8665d824185b40ede4cbdea1501abc6ed16220619519dd254
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        html_preview_sandbox.html

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\html_preview_sandbox.html
                                        • Size 3KB
                                        • SHA256 84ef907a752006e3f061a3bf2afac9eba4522db4ef7a86d27265049e2f2b4c7c
                                        • MD5 SHA1 SHA512 TLSH

                                        neon_tab_update.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\neon_tab_update.js
                                        • Size 6KB
                                        • SHA256 753ae04e50f855889b5008c7b857778b0efb176006f9ab5b9314f616fb5bf655
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        operator_animations.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\operator_animations.js
                                        • Size 8KB
                                        • SHA256 28b4cc8379330065a64ab8294a1a5e339ca0f3e7ba0c6132d8321c8bdc07e506
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        operator_startpage.html

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\operator_startpage.html
                                        • Size 844B
                                        • SHA256 e11105c10babb037790554298c492ba4c84ccb93f327d4cb1fcc477d54d31da5
                                        • MD5 SHA1 SHA512 TLSH

                                        operator_startpage.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\operator_startpage.js
                                        • Size 356KB
                                        • SHA256 5bfdac7ee56a81d07de862a882b12be65191ec5fdaee068178eb94e1102f9bc0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        prevent_new_tab_opening.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\prevent_new_tab_opening.js
                                        • Size 7KB
                                        • SHA256 9afa2913bcc87696544fc3052a6fdd1996d55e22dfbc582ca7766ba7b7592eaf
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        prompt.html

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\prompt.html
                                        • Size 443B
                                        • SHA256 f54f339837e1b29646d56733bfa7945f10fd5372424a0055c5f8ae0504281815
                                        • MD5 SHA1 SHA512 TLSH

                                        prompt.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\prompt.js
                                        • Size 11KB
                                        • SHA256 cb3d385ecd27b7064c2e1c465c3d7bcaffa33bd8a1918df9a75dae9245912372
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        reader_mode.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\reader_mode.js
                                        • Size 112KB
                                        • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        operator-scan.glsl

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\shaders\operator-scan.glsl
                                        • Size 6KB
                                        • SHA256 d5d880f6f3cd7180c2e97c5da22b59b11e01682f8af0d8b44e691da40f4b57e2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        spotify_frame_interceptor.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\spotify_frame_interceptor.js
                                        • Size 5KB
                                        • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        vendors.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\vendors.js
                                        • Size 2.1MB
                                        • SHA256 dba9f37ed80e6883cc0157a229108d28e5cf8ded8e486cb799f9a8764afc843d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        voice_capture_worklet.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir860_1874131383\CRX_INSTALL\voice_capture_worklet.js
                                        • Size 9KB
                                        • SHA256 515553810238f409e5288d7c9da339e08eaea3e85defe87e31c3137123090846
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        LKJXQSENSEWCBW2WDD1Z.temp

                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\LKJXQSENSEWCBW2WDD1Z.temp
                                        • Size 24KB
                                        • SHA256 387498e768e0a3a277f9fc882fd50d76b9986316ab407031f3566281329cc3f8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        a9dce5072b7ab3a.customDestinations-ms

                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\a9dce5072b7ab3a.customDestinations-ms
                                        • Size 24KB
                                        • SHA256 f396eca25d1969a3d7f05aa301ae6c646375147016b2bd5b3e6f974457b8f5de
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        settings.dat

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                        • Size 40B
                                        • SHA256 73d3c591818b3c2293da6ff23db17c1545760f69a1b17e18b10a2824d5d37d47
                                        • MD5 SHA1 SHA512

                                        BookmarkMergedSurfaceOrdering79fb30a4-fb2c-46d0-abed-cc44eb9d7918.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering79fb30a4-fb2c-46d0-abed-cc44eb9d7918.tmp
                                        • Size 6B
                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                        • MD5 SHA1 SHA512

                                        Bookmarks.bak

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks.bak
                                        • Size 3KB
                                        • SHA256 49c82bc4e3573d3568dab00a530e06b08b923cc2126d02da79c562d46306515e
                                        • MD5 SHA1 SHA512 TLSH

                                        BookmarksExtras63e0966c-e149-4df5-a185-638b917ac8a2.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras63e0966c-e149-4df5-a185-638b917ac8a2.tmp
                                        • Size 239KB
                                        • SHA256 458873d140b63e896aba14deb88d84d3f050b0562a3ebdf0a3de763ad5b76d98
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Bookmarksd7d54147-5ba2-416d-be17-acdbdacb1fcf.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarksd7d54147-5ba2-416d-be17-acdbdacb1fcf.tmp
                                        • Size 30KB
                                        • SHA256 a9f1605389d1df5f08be0c1cd6f842ee92b0e8b4ebf50f8e7a42861a74c2e2c7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        temp-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                        • Size 48B
                                        • SHA256 2fd666154c6d3668375084edb7733e184e704bb0264ad82daecb82330c6bf438
                                        • MD5 SHA1 SHA512

                                        temp-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                        • Size 336B
                                        • SHA256 c11e456e0b182c70421ae4f52ed8e44d09c4d6c94e891ed27589c835d506cd61
                                        • MD5 SHA1 SHA512 TLSH

                                        temp-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                        • Size 1KB
                                        • SHA256 0e41d0e69715d5e4e375fdb6034dbfacbb5febe6c1111ae68b90adf97f93fd8c
                                        • MD5 SHA1 SHA512 TLSH

                                        data_0

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
                                        • Size 8KB
                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        data_1

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_1
                                        • Size 264KB
                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        data_2

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_2
                                        • Size 8KB
                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        data_3

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_3
                                        • Size 8KB
                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        CURRENT

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
                                        • Size 16B
                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                        • MD5 SHA1 SHA512

                                        manifest.json

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir860_1000753108\CRX_INSTALL\manifest.json
                                        • Size 3KB
                                        • SHA256 edf3f7c95ebed10cfa1c14b63a306a176d05ca454a0c334064e13bbdbb9c919c
                                        • MD5 SHA1 SHA512 TLSH

                                        service_worker.js

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir860_1000753108\CRX_INSTALL\service_worker.js
                                        • Size 92KB
                                        • SHA256 e4a71cc9098780c7cd5ba8a5ebfdf9d3d281a5710ed3b596b6c751d2886cd8eb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        main.js

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                        • Size 47KB
                                        • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        scraping-method-Dq4mm50p.js

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                        • Size 6KB
                                        • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        service-worker.ts-fle0M1Xd.js

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                        • Size 13KB
                                        • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        service-worker-loader.js

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                        • Size 49B
                                        • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                        • MD5 SHA1 SHA512

                                        messages.json

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\_locales\en\messages.json
                                        • Size 429B
                                        • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                        • MD5 SHA1 SHA512 TLSH

                                        background.js

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                        • Size 87KB
                                        • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        content.js.LICENSE.txt

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\content.js.LICENSE.txt
                                        • Size 1KB
                                        • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                        • MD5 SHA1 SHA512 TLSH

                                        Icon_Light_Active.png

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Active.png
                                        • Size 2KB
                                        • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                        • MD5 SHA1 SHA512 TLSH

                                        Icon_Light_Available_Red.png

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Red.png
                                        • Size 2KB
                                        • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                        • MD5 SHA1 SHA512 TLSH

                                        Icon_Light_Available_Yellow.png

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Yellow.png
                                        • Size 2KB
                                        • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                        • MD5 SHA1 SHA512 TLSH

                                        Icon_Light_Neutral.png

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                        • Size 2KB
                                        • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                        • MD5 SHA1 SHA512 TLSH

                                        Icon_Light_Active.png

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Active.png
                                        • Size 883B
                                        • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                        • MD5 SHA1 SHA512 TLSH

                                        Icon_Light_Available_Red.png

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Red.png
                                        • Size 895B
                                        • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                        • MD5 SHA1 SHA512 TLSH

                                        Icon_Light_Available_Yellow.png

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Yellow.png
                                        • Size 895B
                                        • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                        • MD5 SHA1 SHA512 TLSH

                                        Icon_Light_Neutral.png

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Neutral.png
                                        • Size 932B
                                        • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                        • MD5 SHA1 SHA512 TLSH

                                        index.html

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\index.html
                                        • Size 222B
                                        • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                        • MD5 SHA1 SHA512 TLSH

                                        rules.json

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                        • Size 839B
                                        • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                        • MD5 SHA1 SHA512 TLSH

                                        window.html

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\window.html
                                        • Size 223B
                                        • SHA256 48ead89755412349d4d261b8fd347282e52c1cdbffce846fa674d28a58ba3c35
                                        • MD5 SHA1 SHA512 TLSH

                                        window.js

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\window.js
                                        • Size 2.0MB
                                        • SHA256 79f8215d03832cf14283a73901e5419dd3a4442259282f4619bf82883c0e71ef
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\index
                                        • Size 256KB
                                        • SHA256 aa9bf41b0c8d1c546bfdf8a83805f1c3e4a32014fc2b95181348a1e021b75b04
                                        • MD5 SHA1 SHA512 SSDEEP

                                        MANIFEST-000001

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\IndexedDB\https_www.temu.com_0.indexeddb.leveldb\MANIFEST-000001
                                        • Size 23B
                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                        • MD5 SHA1 SHA512

                                        06ed604a-e6b7-4d9c-b3dc-3dbe4064200f.tmp25966715-c4e6-4c3d-b736-f7ae1356961f.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\06ed604a-e6b7-4d9c-b3dc-3dbe4064200f.tmp25966715-c4e6-4c3d-b736-f7ae1356961f.tmp
                                        • Size 27KB
                                        • SHA256 96092642177bb660dd55afcb6f5ac91a4facb6b88067958b5580b3a1d5cb53b2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        405a8b2b-e503-49da-ba20-818d40f4b526.tmp50488c24-5789-4abc-b657-24732ea2f03f.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\405a8b2b-e503-49da-ba20-818d40f4b526.tmp50488c24-5789-4abc-b657-24732ea2f03f.tmp
                                        • Size 27KB
                                        • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        9f2ef7d0-3960-401c-8cd8-e24799ec64e1.tmpcee33914-735b-414f-b616-272eef8d16ea.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9f2ef7d0-3960-401c-8cd8-e24799ec64e1.tmpcee33914-735b-414f-b616-272eef8d16ea.tmp
                                        • Size 27KB
                                        • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        bfc16632-f4b3-4919-8532-5b3e36122a3b.tmpfc457729-bc81-464c-8ae1-41d87a31a043.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\bfc16632-f4b3-4919-8532-5b3e36122a3b.tmpfc457729-bc81-464c-8ae1-41d87a31a043.tmp
                                        • Size 27KB
                                        • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        cdda4c77-f6cb-4cf4-976d-0af0d325c7d3.tmpf8766e20-5e50-402c-8062-c2f8e9c36214.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\cdda4c77-f6cb-4cf4-976d-0af0d325c7d3.tmpf8766e20-5e50-402c-8062-c2f8e9c36214.tmp
                                        • Size 27KB
                                        • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        e6a41b2b-2713-40bf-b87f-730c1862aedf.tmp29e500a7-ff3a-411a-8e81-935b5e277437.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e6a41b2b-2713-40bf-b87f-730c1862aedf.tmp29e500a7-ff3a-411a-8e81-935b5e277437.tmp
                                        • Size 27KB
                                        • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Network Persistent State.backup

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State.backup
                                        • Size 111B
                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                        • MD5 SHA1 SHA512 TLSH

                                        SCT Auditing Pending Reports

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
                                        • Size 2B
                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                        • MD5 SHA1 SHA512

                                        Preferences3470d27f-b8e8-4145-a70e-057b8b649048.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences3470d27f-b8e8-4145-a70e-057b8b649048.tmp
                                        • Size 15KB
                                        • SHA256 ec3f9af3a110ff241060696c2c25eabe405bf6f468da994163e1186926a67fd3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferencesd0799375-9084-481d-a074-e3bc83b1d75f.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesd0799375-9084-481d-a074-e3bc83b1d75f.tmp
                                        • Size 10KB
                                        • SHA256 aed9374199609cc1bc710127fc67f437106b7453fce9dee874fc06382417a92f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferencesd158a21d-3357-4513-91fd-1c8951892c29.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesd158a21d-3357-4513-91fd-1c8951892c29.tmp
                                        • Size 15KB
                                        • SHA256 0392bb2aac33737c5b17874da6d962cd1bd865defecf9f3235d0e3f92610e362
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Preferencesec8f4773-ff34-4300-bc8d-a6b2ccf34d8e.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesec8f4773-ff34-4300-bc8d-a6b2ccf34d8e.tmp
                                        • Size 16KB
                                        • SHA256 37abd05ce184b5bf8e9898fd2887a92d08b33e7112cb873ffaaba3d3087e28dd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Secure Preferences.backup

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences.backup
                                        • Size 82KB
                                        • SHA256 e1cf8946d1c14031bb896bd1896107127e9d325b618e24f5f039595017340d1c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Secure Preferences07420d27-47be-4eb2-8f83-2231dac676d5.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences07420d27-47be-4eb2-8f83-2231dac676d5.tmp
                                        • Size 108KB
                                        • SHA256 2853bf9a95a714b9805565cb5197b74a12ae3e192f0c528e883ca7ffe43cb573
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Secure Preferencesecad1936-dc66-4573-838c-d6954c01ff6e.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencesecad1936-dc66-4573-838c-d6954c01ff6e.tmp
                                        • Size 82KB
                                        • SHA256 c89844e882675795a5ab4f78819f461a7215815ec8916d52732d594e0d2b3d5f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        temp-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\bfaeb59486396eed9d92017d1b603e59ce130a62\4acae276-7588-48a9-ad29-91b2eace6384\index-dir\temp-index
                                        • Size 96B
                                        • SHA256 655fb402aa5830ef6315dfe22e8f3944cf5e46c75c368a6ca3bcc960c1273efa
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\bfaeb59486396eed9d92017d1b603e59ce130a62\4acae276-7588-48a9-ad29-91b2eace6384\index-dir\the-real-index
                                        • Size 48B
                                        • SHA256 8f611714447c7b21ba7b63cdcfe55531a6fe1bc070870bae0e7efdaed34b4dfe
                                        • MD5 SHA1 SHA512

                                        temp-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\bfaeb59486396eed9d92017d1b603e59ce130a62\91f9ec24-d732-4987-8510-7e9b984156fd\index-dir\temp-index
                                        • Size 72B
                                        • SHA256 c3ee5d8ce6afd4c31f98474cae084fbdfd11ea0ee68b02354db06f781f46ffc4
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\bfaeb59486396eed9d92017d1b603e59ce130a62\91f9ec24-d732-4987-8510-7e9b984156fd\index-dir\the-real-index
                                        • Size 48B
                                        • SHA256 34f136d525b83d65c3da70a0bffbc7366b301304bede297404e161ca454c7499
                                        • MD5 SHA1 SHA512

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\bfaeb59486396eed9d92017d1b603e59ce130a62\index.txt
                                        • Size 149B
                                        • SHA256 bfb2597c8523b39f78bd28808acb4014476511fe180e72dd26c01ecfe4c629e5
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\bfaeb59486396eed9d92017d1b603e59ce130a62\index.txt.tmp
                                        • Size 323B
                                        • SHA256 0cf9cb3a1b6437d7f6f2bf909baee2a63dd2c95180adc0fd865df3e6b030f606
                                        • MD5 SHA1 SHA512 TLSH

                                        index.txt.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\bfaeb59486396eed9d92017d1b603e59ce130a62\index.txt.tmp
                                        • Size 320B
                                        • SHA256 1cdf34571aab72d7b613a295a20ad383444a709fb57a35d45f97b089898defe4
                                        • MD5 SHA1 SHA512 TLSH

                                        index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index
                                        • Size 24B
                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                        • MD5 SHA1 SHA512

                                        temp-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                        • Size 120B
                                        • SHA256 edeee0b668dc24f58937cba0c4e1b32c40261372aa3f6b240d2b0ee0288732a3
                                        • MD5 SHA1 SHA512 TLSH

                                        temp-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                        • Size 384B
                                        • SHA256 4327924d7c5f19b301c92d7e8b9da595c5bae121e4829d5935c89c44b7a80459
                                        • MD5 SHA1 SHA512 TLSH

                                        temp-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                        • Size 360B
                                        • SHA256 a15714c5d05ee28250c3f341a92a651e565af93211832ff1835606537275f95a
                                        • MD5 SHA1 SHA512 TLSH

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                        • Size 48B
                                        • SHA256 cadef1104d6c308bd82b2ae8d6b69104ce67152f54553d33fe20a26d5c208dc2
                                        • MD5 SHA1 SHA512

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw
                                        • Size 477B
                                        • SHA256 0b893cf058a063a2f94be56785e2f67600ad6b18c476774f7f9d102ca48005e6
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw13771758-51c8-422d-8fcc-271345c4b745.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw13771758-51c8-422d-8fcc-271345c4b745.tmp
                                        • Size 1KB
                                        • SHA256 5e7d4baa7905ce224b4cc9b45bda39a29cc9a4bc27405332a52ffa623ac550f0
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw3bd8eb7b-d47b-43e6-867d-902625684881.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw3bd8eb7b-d47b-43e6-867d-902625684881.tmp
                                        • Size 861B
                                        • SHA256 1d06f3cb2b4bd9676575c1701685acd4288b7ee0cb2619bffd71855d0d87bc54
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw41cb14b4-6a2b-481c-be15-ef93e02eb034.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw41cb14b4-6a2b-481c-be15-ef93e02eb034.tmp
                                        • Size 701B
                                        • SHA256 fee5efa1011c0e04d2b5a4c546ad6325f876dade229ee59c57c5f6360440db6e
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw4fc3a78c-1f96-4628-85b1-010be5cd992a.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw4fc3a78c-1f96-4628-85b1-010be5cd992a.tmp
                                        • Size 1KB
                                        • SHA256 7beac179994e979a72eb19032cddb525f715bf125a0d727b56b4928a0c29185b
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw5518059c-158d-4c13-83ae-2a740342cc8d.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw5518059c-158d-4c13-83ae-2a740342cc8d.tmp
                                        • Size 1KB
                                        • SHA256 e0d429f8c5ee4140f2246131131647e9c811d35566109c81cf77263032c1e6d8
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw7367b671-6b50-423f-a500-10aa8acfdf61.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw7367b671-6b50-423f-a500-10aa8acfdf61.tmp
                                        • Size 1KB
                                        • SHA256 77eda04d46778ffcfe9f56eb5bb8b6455d181dd5aa7d1587eaac4562540390cf
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw8e383c62-436d-4e06-9166-72f79111a15c.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.raw8e383c62-436d-4e06-9166-72f79111a15c.tmp
                                        • Size 1KB
                                        • SHA256 6cc1eef8014bf4743268654f693f320be03a4fe09f540cd65f4a3b97a8b199f8
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.rawbcc2d73c-5ef8-4172-9ba0-9fca048b486b.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.rawbcc2d73c-5ef8-4172-9ba0-9fca048b486b.tmp
                                        • Size 573B
                                        • SHA256 3583507b6cc7f04657647927390c9bf2c052a44df1c65cb80a12aa6bd93c5c8d
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.rawcabb6443-b300-410f-b1ef-c77e9ddf2327.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.rawcabb6443-b300-410f-b1ef-c77e9ddf2327.tmp
                                        • Size 1KB
                                        • SHA256 692422f9459f6a49e9778a61dd89639493e6e214fb21708d809369141a7a33b7
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.rawded619fc-f0fb-459b-8663-a296b98a3610.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.rawded619fc-f0fb-459b-8663-a296b98a3610.tmp
                                        • Size 1KB
                                        • SHA256 08e34354740763ae4944f138947aef20353f4a21eb66d191d5cbb67df89022bf
                                        • MD5 SHA1 SHA512 TLSH

                                        session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.rawf4c7f2b7-c9f2-490b-89db-87edc8b126f3.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0e213c9b-ab47-40ba-9a54-8c6475421ef9.rawf4c7f2b7-c9f2-490b-89db-87edc8b126f3.tmp
                                        • Size 1KB
                                        • SHA256 8eab6414e388cce444e0a5bd11b3d9fa60d28a819d61f1a3114f9267f6208dc5
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw
                                        • Size 477B
                                        • SHA256 ed13d25952bad3871322cf33e2855616fc071a39b9d706c1649037c8923f1580
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw
                                        • Size 15KB
                                        • SHA256 045f1ce24393458ea75322da08fbad1009dc71bbb5a7468a139483116452eeae
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw003d694e-5c25-4a84-b0bd-78d988f6eb12.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw003d694e-5c25-4a84-b0bd-78d988f6eb12.tmp
                                        • Size 573B
                                        • SHA256 3020c54491c3a098b26de010ec3b72d60ead2dd988b871db60e8ccaa567c6b32
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0178ac3e-ba04-4969-bd94-71bbffec5461.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0178ac3e-ba04-4969-bd94-71bbffec5461.tmp
                                        • Size 11KB
                                        • SHA256 3df4bdb908f426012336cbcd9b499205bc58847560efa6809e76eb61f46b01aa
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw03689505-9050-4d45-95cf-cdede5724977.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw03689505-9050-4d45-95cf-cdede5724977.tmp
                                        • Size 12KB
                                        • SHA256 08df888ff23db17748f5b7a917bf1558c54f0b5d692c969a409f956dcb3f06f2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw03b174fe-bebe-4b5b-819d-b19f279a4697.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw03b174fe-bebe-4b5b-819d-b19f279a4697.tmp
                                        • Size 10KB
                                        • SHA256 776467c2dbb21382dca4a8c36003d8df1c46055bb9ba21e644ac10285c18be09
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw05da1c7b-12f4-4a7d-a959-af8c093b0de4.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw05da1c7b-12f4-4a7d-a959-af8c093b0de4.tmp
                                        • Size 10KB
                                        • SHA256 eb7a2c9d045ca9c4f2a013891cab1138d34fc4a3f3040bd9d88d54aa1959eab6
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw05f2020d-19ea-41cd-b6ab-0e5911f14449.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw05f2020d-19ea-41cd-b6ab-0e5911f14449.tmp
                                        • Size 1KB
                                        • SHA256 51856f4fef52ee9ae32ba26409e3da4a9e6ec50a33a4d5c48bb73d3b9877a6b2
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw07339d5f-ff5c-4eb8-af51-c7d40197b3d6.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw07339d5f-ff5c-4eb8-af51-c7d40197b3d6.tmp
                                        • Size 1KB
                                        • SHA256 7d0bbd027e81a3b6a1fdcdeb255ea6f3191931b19246b4a9427fd54c29f9825f
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0d17a822-ea4d-4d6d-a2d5-06df891c4d84.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0d17a822-ea4d-4d6d-a2d5-06df891c4d84.tmp
                                        • Size 14KB
                                        • SHA256 68b95f705eef5337667180755097f6bfaefe99a5cef2568c221d692f03ddb17e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0dc1558f-dd98-4408-910e-2d2afef99f2a.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0dc1558f-dd98-4408-910e-2d2afef99f2a.tmp
                                        • Size 9KB
                                        • SHA256 c2a0280998156ee3b5016d6444016b74c59cea81aa8d9bfbd36028ab46fd9b7e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0e01f916-7dfc-4a25-b712-87c201f25ae5.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0e01f916-7dfc-4a25-b712-87c201f25ae5.tmp
                                        • Size 9KB
                                        • SHA256 3c6969e40ec5e62bfd7956b5685390c1dd09ce6e6eea5a7f7068498d3e94eaea
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0e1133d9-f806-46be-bc48-a88e0400eaaf.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0e1133d9-f806-46be-bc48-a88e0400eaaf.tmp
                                        • Size 10KB
                                        • SHA256 b03535d5f66ef12aecd4f01e857f0a26e0063cec913911bd0cc5e864600c8ad7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0f3d8029-005f-4907-8017-88a019b14e1c.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw0f3d8029-005f-4907-8017-88a019b14e1c.tmp
                                        • Size 11KB
                                        • SHA256 0aa203cb4b5fbb9b8ba4111f3bb81e02c0479363ed6833c22d73afda950e1b60
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw10368721-05c3-4070-9c5a-83cb9bcf0b3c.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw10368721-05c3-4070-9c5a-83cb9bcf0b3c.tmp
                                        • Size 11KB
                                        • SHA256 db8ce13d92bff10875e9dd924a0d767aa1db4d259a57f20ba9477900aaec9450
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw14c47bf6-b919-436d-a55b-048b468302af.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw14c47bf6-b919-436d-a55b-048b468302af.tmp
                                        • Size 16KB
                                        • SHA256 5aa0c53dc730fea77b3d9855f1bfe483efe1fe2b41cd0da58535a35030f2713e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw165c6331-4e2f-4cff-9fda-b7da75471bce.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw165c6331-4e2f-4cff-9fda-b7da75471bce.tmp
                                        • Size 14KB
                                        • SHA256 42e585514f9f532a9c9c99e3bc791edc8353284524f66ae6f63c13b03df170c0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw172ee667-9c52-4869-bd41-cce1eae0d59e.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw172ee667-9c52-4869-bd41-cce1eae0d59e.tmp
                                        • Size 10KB
                                        • SHA256 30bb3df07efd724e688682041f933099d9c3bc50df2f453de90a450f9c63efb3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw1837896f-e1e1-4add-9161-c3614b38a72f.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw1837896f-e1e1-4add-9161-c3614b38a72f.tmp
                                        • Size 9KB
                                        • SHA256 75d5739bfc18c34c45097b67fa6b432373fb56cb98ced6717165afaf388914f1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw1f992a5b-f2de-4dea-8feb-a5e9c2eca10c.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw1f992a5b-f2de-4dea-8feb-a5e9c2eca10c.tmp
                                        • Size 1KB
                                        • SHA256 2401c59347d58775aaccbf30a48200219e66954bcb5f968925e422bdf39a164d
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw1f9cb801-08b4-4c29-93c2-90d00910ccc8.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw1f9cb801-08b4-4c29-93c2-90d00910ccc8.tmp
                                        • Size 12KB
                                        • SHA256 e8efdab844cd3a054cd545117bb05bad30bed91d15be51cbc17ec85369caa8d5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw20714bef-767b-4365-8a0b-026992cd9b17.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw20714bef-767b-4365-8a0b-026992cd9b17.tmp
                                        • Size 9KB
                                        • SHA256 27505007dde86be581efc760dc2295ad28bc60e2d73d5d2728282a388d6a3ef2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw2377fc83-f3ac-4767-bf54-fdf973d93c6e.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw2377fc83-f3ac-4767-bf54-fdf973d93c6e.tmp
                                        • Size 9KB
                                        • SHA256 bd068fb593a57efd599233ebcd54fb1638b762928435cf6b2fa11f6052bc864d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw27c4fab8-8759-47e8-a411-97c5ffdae109.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw27c4fab8-8759-47e8-a411-97c5ffdae109.tmp
                                        • Size 13KB
                                        • SHA256 421e532bc3fc4a692a495a79f293bc473952890675f4fa57468fdc5dcd5e3120
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw282ceb9f-7be0-4972-9aba-b9aad31fa5bc.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw282ceb9f-7be0-4972-9aba-b9aad31fa5bc.tmp
                                        • Size 17KB
                                        • SHA256 25b4784622b08dc91b5ceb63067158677053108b590fe81f5d9eb0d218713d27
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw2aafec62-eab2-4723-a5b6-49f1a5f0c9d6.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw2aafec62-eab2-4723-a5b6-49f1a5f0c9d6.tmp
                                        • Size 14KB
                                        • SHA256 176644bef78ddc348a2fe4d6f8de128af09e6d5eb40586e57a39a9a142f4043d
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw2b161fa7-eab8-4c5a-81ed-8b55a893973d.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw2b161fa7-eab8-4c5a-81ed-8b55a893973d.tmp
                                        • Size 10KB
                                        • SHA256 8f0dd2f7e32951c10ace97262a0ae8938f8442383399e6a5b1827f11faa22946
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw2e26cf09-27c8-4f07-b172-98d87815624f.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw2e26cf09-27c8-4f07-b172-98d87815624f.tmp
                                        • Size 9KB
                                        • SHA256 d6e24c6ecd81bd4965781376aa4bbc7206e5b9874cfc740ff6c16603ac07b894
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw2e98d38a-a4cf-4536-89e8-ae95c16a0838.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw2e98d38a-a4cf-4536-89e8-ae95c16a0838.tmp
                                        • Size 2KB
                                        • SHA256 11c10033cebefa3a2dde28f2521f69f01bf5c3f91b8dc0ae2586cd35a8fc5266
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw3244b7f4-721d-4d60-b0a2-ce1acdaa6140.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw3244b7f4-721d-4d60-b0a2-ce1acdaa6140.tmp
                                        • Size 2KB
                                        • SHA256 db2c334845a19a69a7e916beb75d8cc09d9ce9b2e39ff51e147efc1d5e972897
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw366822cf-7244-42c2-bd11-6cae0ea5faf6.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw366822cf-7244-42c2-bd11-6cae0ea5faf6.tmp
                                        • Size 14KB
                                        • SHA256 fdc3d80bf94438d2cb2fc0567c72e0ea91d6014f4fff93c43bc27fc9483f21c4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw369f3c7e-9062-4f91-8199-e269539a4767.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw369f3c7e-9062-4f91-8199-e269539a4767.tmp
                                        • Size 9KB
                                        • SHA256 065cd2de247b1911d07aa39928a8b03b63900ba7310f0d9a6e7fdfb300581a6c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw39576f92-3134-48c0-ae1f-c6ffe02d25fe.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw39576f92-3134-48c0-ae1f-c6ffe02d25fe.tmp
                                        • Size 14KB
                                        • SHA256 dda82af3463df5b71cfcd0434ef91635d03e0c1b594d3a1f52803e7855528441
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw395dfdab-0ffe-450b-84ac-6a83ac61cd02.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw395dfdab-0ffe-450b-84ac-6a83ac61cd02.tmp
                                        • Size 10KB
                                        • SHA256 697384c54530ccad9200a78fdc39016f3931f166f26f5fea1c1a5444de683721
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw3a910f3f-085d-473b-8151-5e8ba191a145.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw3a910f3f-085d-473b-8151-5e8ba191a145.tmp
                                        • Size 717B
                                        • SHA256 abe2ab8bcb02c15446dcc2cae97aea6557c3189e4d7fe17448500688e6f0a0bf
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw3b82a203-1417-4126-be0d-412ee7040f29.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw3b82a203-1417-4126-be0d-412ee7040f29.tmp
                                        • Size 14KB
                                        • SHA256 ef6d3d99614843e0ae712bb34f590da31dc72bde2e4a97c48d3db4a04ec61fee
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw400f05a3-500d-4abf-9558-1f36ef9c0a91.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw400f05a3-500d-4abf-9558-1f36ef9c0a91.tmp
                                        • Size 14KB
                                        • SHA256 8a7267163e569ff9aee59e928901ecafe3ee71dd5ef4f4d5cfbaca0910f642fd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4159dc1c-fed4-4268-ac40-9a71e90df11e.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4159dc1c-fed4-4268-ac40-9a71e90df11e.tmp
                                        • Size 14KB
                                        • SHA256 8aea2bafc425c1367618bc7ee137ab61ba68abf68d1cacada658dec2500ae224
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw420789ea-ac97-4dc1-8b7d-660b9db3ab57.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw420789ea-ac97-4dc1-8b7d-660b9db3ab57.tmp
                                        • Size 11KB
                                        • SHA256 51575af0d18a036e2c816a42daed45b2b02876959dde5912aab80aa4f308bc89
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw42b89c2c-4826-4e62-9efb-afb1523167cf.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw42b89c2c-4826-4e62-9efb-afb1523167cf.tmp
                                        • Size 14KB
                                        • SHA256 836960288034713637ad7442e6e3352adb86fcd34e249260b5bd0b85c7cb2f4e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw43bda76c-0de5-4dae-87dd-4b114e4d2e44.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw43bda76c-0de5-4dae-87dd-4b114e4d2e44.tmp
                                        • Size 14KB
                                        • SHA256 c434f36b4a35fa65178747f2a76f189dc62832b3e63e06b1ea854b08177066dd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw441d6856-2305-407e-afa2-017d874c6070.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw441d6856-2305-407e-afa2-017d874c6070.tmp
                                        • Size 9KB
                                        • SHA256 ad00c9a11eb7606e7c0cbdeb1026c7f4f37462ea4610f8357811d2fb97755a6b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4504f7a6-ed81-414c-ab42-ccf66ce20540.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4504f7a6-ed81-414c-ab42-ccf66ce20540.tmp
                                        • Size 14KB
                                        • SHA256 da70a6e1091de77346fdbc38aa66e8de61127a05ba024e1f5b4376e512fec3f2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw46ca2bde-23f8-4796-8c96-1f8c96907695.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw46ca2bde-23f8-4796-8c96-1f8c96907695.tmp
                                        • Size 10KB
                                        • SHA256 9b2fc1a45b4437ce5153effd8046465655bdf4a97b699040d09fe015329cd6a4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4801ac24-6f9d-4a70-91c3-6fda755d2897.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4801ac24-6f9d-4a70-91c3-6fda755d2897.tmp
                                        • Size 14KB
                                        • SHA256 c0abfda64f3b600c4876ea296f68014b2e16e4ffd913dbc5eb4cd2bedba4dbeb
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4ab082f5-cb11-43e0-a0ef-1c2ee3b026ed.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4ab082f5-cb11-43e0-a0ef-1c2ee3b026ed.tmp
                                        • Size 16KB
                                        • SHA256 b8b1945908563f7bd3c35a08c1f9d7d2b1317cc085c1399e879add8482401a10
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4b17dbb4-cca9-4df6-80ce-c56f5d811fef.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4b17dbb4-cca9-4df6-80ce-c56f5d811fef.tmp
                                        • Size 14KB
                                        • SHA256 65b365dc7c915111230819af4779bae4f9eec6c235fe6a7083bb9fb893a33751
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4c79e08f-b542-4504-9f0c-305d383318dc.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4c79e08f-b542-4504-9f0c-305d383318dc.tmp
                                        • Size 9KB
                                        • SHA256 a806e4d74e288ba048443079aba50020d4939b9db793a476f24b76d730061abc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4cff9fd2-7eb2-47ee-9760-14ff72efdcef.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw4cff9fd2-7eb2-47ee-9760-14ff72efdcef.tmp
                                        • Size 17KB
                                        • SHA256 5ba46414321bc7289ab0994e85b26c77625d16170da7fa8887909ae5e95753ac
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw53f39020-40b4-41f0-aba0-4d97336874a9.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw53f39020-40b4-41f0-aba0-4d97336874a9.tmp
                                        • Size 12KB
                                        • SHA256 a90e070e6a81e939b62dc800a2a6e0024b7601d062075bbee4450ba5f4dcd2bd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw56fb4a67-42ed-4e09-a2f3-9fabb315570f.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw56fb4a67-42ed-4e09-a2f3-9fabb315570f.tmp
                                        • Size 14KB
                                        • SHA256 0b3739504e95cc0c70a57df0b746c873648fbc9c81dfb2108b399e7e80fcfd19
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw5774de52-0ddf-43fe-b316-182fab228bb6.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw5774de52-0ddf-43fe-b316-182fab228bb6.tmp
                                        • Size 16KB
                                        • SHA256 75206649bca2c213da8772604cf7e90af1a52c561c23fca083701bc1f2f23b51
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw589d3171-92a3-40bd-bc56-b720c79a85e4.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw589d3171-92a3-40bd-bc56-b720c79a85e4.tmp
                                        • Size 13KB
                                        • SHA256 379fbbf0591e217b14cf1239cdc9eb319962dfbd72f98381b85620a89bf69aed
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw5c9dfded-58bb-420b-b708-031f9cb49b28.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw5c9dfded-58bb-420b-b708-031f9cb49b28.tmp
                                        • Size 8KB
                                        • SHA256 678a8b84f5ad4f5b0ce607bed42620e36cb5687c099527d1b2ac1c9b49f352aa
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw630c71c6-21fe-47f9-9089-0a7e9a084b08.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw630c71c6-21fe-47f9-9089-0a7e9a084b08.tmp
                                        • Size 15KB
                                        • SHA256 b2c4f7856b9b8710458878c76b6e2702c8046e8bfee2a9f549e8af1517f6880c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw66b254f1-29c1-4479-8f0c-e9f67b92ec79.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw66b254f1-29c1-4479-8f0c-e9f67b92ec79.tmp
                                        • Size 9KB
                                        • SHA256 d6c20041d7483136503897da2b02518f5ed0927d388e913391c2ec3a821a0d7a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw6849d0a3-67af-4c4a-8f1a-415aa2a5be51.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw6849d0a3-67af-4c4a-8f1a-415aa2a5be51.tmp
                                        • Size 3KB
                                        • SHA256 2b31b996fe41724d17a61238ec73ee5a9d8eb562645fc6c4362beb8a725d2a8a
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw69f78717-04e9-4ce4-8ba3-6c6f01eb7bfe.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw69f78717-04e9-4ce4-8ba3-6c6f01eb7bfe.tmp
                                        • Size 14KB
                                        • SHA256 bbb7dda2fe86bff6d52060664a68517c80f503609f33df900ad1a8acc14cacf5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw73e9416c-ea7c-4319-b3cb-f90d652cdebe.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw73e9416c-ea7c-4319-b3cb-f90d652cdebe.tmp
                                        • Size 13KB
                                        • SHA256 25abbc37502dd6db366951fa09c6d59c436f10e80681cd75ed4b0d61494ac1e2
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw780f6a50-83ed-4f9d-9435-a71e38d10d28.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw780f6a50-83ed-4f9d-9435-a71e38d10d28.tmp
                                        • Size 14KB
                                        • SHA256 c84561628f6755b6cee140f58766b1351b490d1ef461febaf4cf588cb232d87e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw7fe10cc3-814a-4be9-b3bb-80522a9d71f8.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw7fe10cc3-814a-4be9-b3bb-80522a9d71f8.tmp
                                        • Size 9KB
                                        • SHA256 783b7d368ef79ffdca43879c0fa1a06c8bbdb7186168753238573bf7093b0151
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw7fe2bc19-6268-47ef-a618-7766bac7bb8c.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw7fe2bc19-6268-47ef-a618-7766bac7bb8c.tmp
                                        • Size 14KB
                                        • SHA256 b510fca5e1ae577d4bc4f6d905b00733eb939a7e73b743b2f29c8ea49726fd37
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8176799f-c999-4377-b43b-9a8b497a8cad.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8176799f-c999-4377-b43b-9a8b497a8cad.tmp
                                        • Size 829B
                                        • SHA256 1427d5242015efd4dc367712d364150eaf00e5cfc79af94b55d63c6b10f99bde
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw833c8872-e525-4d7e-ae38-f5d1f72e8214.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw833c8872-e525-4d7e-ae38-f5d1f72e8214.tmp
                                        • Size 11KB
                                        • SHA256 80deb433a8d95ca0456f456050f246247171726dafafa09ca4c2bc42df037ccd
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8746fb89-5843-43c6-af3d-6cba1f31bb88.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8746fb89-5843-43c6-af3d-6cba1f31bb88.tmp
                                        • Size 2KB
                                        • SHA256 e4b0584d104986c65d2d2cd71ad8b7a16e2a2dd43c6cc02ae8d7fa78f10d0a61
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8752d68a-adcd-463f-ba55-a697848ea3a3.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8752d68a-adcd-463f-ba55-a697848ea3a3.tmp
                                        • Size 15KB
                                        • SHA256 6812e06b8c71923558bf57dc3e8e67d9e510dbc02cc572a707cf5b153ecf3060
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw87c60e68-22bd-4c83-a2e4-4c61281e3862.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw87c60e68-22bd-4c83-a2e4-4c61281e3862.tmp
                                        • Size 13KB
                                        • SHA256 068eb6d06d1210e15c5f54cf85fdc369851b885d6d8d9c8c69bad2d93b28a0c3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8851e83c-18a6-43e0-932b-86a9c3f4d552.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8851e83c-18a6-43e0-932b-86a9c3f4d552.tmp
                                        • Size 2KB
                                        • SHA256 990ac73f62e463c25143adb19922129080e767555c6343296c6535e2f9e9c84d
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw89623047-e5ab-4994-b337-1a39ec1f4527.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw89623047-e5ab-4994-b337-1a39ec1f4527.tmp
                                        • Size 1KB
                                        • SHA256 8b0fbf78bf09ac83638a4fb9faf078146d645b5b7ddeb73f1d96b8644cdd1e16
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw89922da2-71b4-449c-82e7-53d82bf7a744.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw89922da2-71b4-449c-82e7-53d82bf7a744.tmp
                                        • Size 14KB
                                        • SHA256 1dd2e29bffa2c0f0ebe3cd24a3e99142c939ba6e083923e0ee94728da148afcc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8b081990-e390-4a33-8fb3-c64861b6b7b9.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8b081990-e390-4a33-8fb3-c64861b6b7b9.tmp
                                        • Size 12KB
                                        • SHA256 470e61d4b55d4ec322c5f62e3da3ece8153a58f2a4a3196280553d0ba25bc38c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8c5b6c42-5eaf-477e-8a72-1d5b03d0da5d.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8c5b6c42-5eaf-477e-8a72-1d5b03d0da5d.tmp
                                        • Size 11KB
                                        • SHA256 8da3b49148bf8a4b7ea0068965163ec5226e87c25f4f21c37ac1a2edf68a04ce
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8dcd2694-e545-4e1d-a58a-6cb95896e97d.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8dcd2694-e545-4e1d-a58a-6cb95896e97d.tmp
                                        • Size 14KB
                                        • SHA256 190cb339dc22d7ca824566a50d55b2bb8e0cae244a2305bb6dfa27abf8e59f4c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8e1d79f9-1795-4563-85ba-8891f037b732.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw8e1d79f9-1795-4563-85ba-8891f037b732.tmp
                                        • Size 10KB
                                        • SHA256 c579517909253b546d74816411827131d9a4e8a7682837cc553df03f4be01e0f
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw90492855-6e6b-489b-80d2-502438179e7e.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw90492855-6e6b-489b-80d2-502438179e7e.tmp
                                        • Size 16KB
                                        • SHA256 d86521c260bf859ab4cd5f86e9926820b46eb7307d3d385b5fce5a6272ddacca
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw94f28c88-2767-4ac4-849a-434a5c409e76.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw94f28c88-2767-4ac4-849a-434a5c409e76.tmp
                                        • Size 15KB
                                        • SHA256 d3f7feb7dd94254e511b70c142c414b90a35c14b9bac7fda9867bc63de28e6ea
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw952c0ae6-1e5d-447e-80f7-3310510cacdb.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw952c0ae6-1e5d-447e-80f7-3310510cacdb.tmp
                                        • Size 17KB
                                        • SHA256 0adfb565eebecc4439c6db552722210ddb440f5a9123399d3cf97cc0a22ee8e5
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw98a6a9eb-0271-443b-9223-710b50b40655.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw98a6a9eb-0271-443b-9223-710b50b40655.tmp
                                        • Size 14KB
                                        • SHA256 6a205576b314885e6adb47b25cfe703d11354b3b99e086245ea52a0262be0923
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9bf18eab-4151-43ea-bb1f-8b24ce782c1b.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9bf18eab-4151-43ea-bb1f-8b24ce782c1b.tmp
                                        • Size 2KB
                                        • SHA256 9a1330e677b8248b30a0f4dd2a1f552d86e9f1086a2fbda05923e0e160e5608b
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9c180f7b-3ae1-45cc-a09d-da198870a243.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9c180f7b-3ae1-45cc-a09d-da198870a243.tmp
                                        • Size 13KB
                                        • SHA256 5ebc6e09d8ed18341cc004afc1bc438b2775ac601225a11c37befa2dd5c5cd00
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9d697b90-1e0f-4809-9573-03142c26fad1.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9d697b90-1e0f-4809-9573-03142c26fad1.tmp
                                        • Size 17KB
                                        • SHA256 d3c4a74db6eb6b4ed5e4c031c6afb994382eba11ef7b15fef01132ff73bec10b
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9d807215-643e-48f9-ab52-05419d30331e.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9d807215-643e-48f9-ab52-05419d30331e.tmp
                                        • Size 14KB
                                        • SHA256 ddbca70f1f81cdd4ccb586018c92e187493755143c2e5530634927eace84a6c3
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9d9ddddb-cdc3-4100-b260-02244de38f6c.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9d9ddddb-cdc3-4100-b260-02244de38f6c.tmp
                                        • Size 7KB
                                        • SHA256 e904c4352f4870494c2599d78c84638485d441b97d230e7e9b609a21d0a6126a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9f5ea6ab-cb5b-4d7e-83eb-a7b36df264c9.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.raw9f5ea6ab-cb5b-4d7e-83eb-a7b36df264c9.tmp
                                        • Size 14KB
                                        • SHA256 b14685d66bd2286828456ca181343caa275fafe5f14884ea3e6868416e9f4001
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawa2f92199-7f8f-4286-9b2b-2a4e9162ae37.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawa2f92199-7f8f-4286-9b2b-2a4e9162ae37.tmp
                                        • Size 9KB
                                        • SHA256 7d6bdbdb77abd03e2fecf604aca5637ce09e8b7b8ef6011e277a59a42c29c510
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawa598e65f-b263-4a28-b198-76e30543c92b.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawa598e65f-b263-4a28-b198-76e30543c92b.tmp
                                        • Size 10KB
                                        • SHA256 1b79b9a6f38b7724ee293ff56b2bd888ed655f1f4b4e12b1803e27fc5b5e3fd4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawaa9b8a5c-7388-46f9-80a2-e64b8ed2c457.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawaa9b8a5c-7388-46f9-80a2-e64b8ed2c457.tmp
                                        • Size 1021B
                                        • SHA256 fce3a1901a5827b40c755d797165895f5397f2a0839f72371bcdae12163004c1
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawb1927589-a390-4c78-a427-d7ab8837dc5b.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawb1927589-a390-4c78-a427-d7ab8837dc5b.tmp
                                        • Size 15KB
                                        • SHA256 ed4206c4946ac261be83d666a79569ef7ddb696956fc29db91c4184d7ee0939a
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawb26efe60-4e11-49a1-9d33-1411fd79f670.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawb26efe60-4e11-49a1-9d33-1411fd79f670.tmp
                                        • Size 15KB
                                        • SHA256 3549903fb44049dbe014773f6601f549cab63a8c555044e23d33350ed3f1d93c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawb4fe11a7-0cb5-4e98-ae1e-57b4a4dea533.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawb4fe11a7-0cb5-4e98-ae1e-57b4a4dea533.tmp
                                        • Size 11KB
                                        • SHA256 060faeba7b91b67115efb58f32999882c95195834e442b18595981290afa52af
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawb7b29f28-7d5a-4390-ae30-b8809b46aeaf.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawb7b29f28-7d5a-4390-ae30-b8809b46aeaf.tmp
                                        • Size 1KB
                                        • SHA256 3f2b170676ab237c8b4f2ca55a82f6458ea9b8423665eacfbd673e74d0642ea4
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawbf06acbe-bc35-42f9-b2e7-c6ce26582aeb.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawbf06acbe-bc35-42f9-b2e7-c6ce26582aeb.tmp
                                        • Size 1KB
                                        • SHA256 ddc7e25f94b2f6df20c22fbdf446a0a45c6fb75ca35fac3925c519f5cb17993e
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawc1ff9ab7-2759-4da9-9655-b13f523ec0ea.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawc1ff9ab7-2759-4da9-9655-b13f523ec0ea.tmp
                                        • Size 10KB
                                        • SHA256 3e5c65a7eece12cfb2c68ab37dd675e42d3f2e96bb9c13e123009c361151c168
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawc581be9e-50f2-4747-93a6-decd254e0501.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawc581be9e-50f2-4747-93a6-decd254e0501.tmp
                                        • Size 11KB
                                        • SHA256 e6787013ebd0a66eccee1887b67675f291b3342c2032673905d2a3f586dc33e7
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawc6e6afeb-1d00-4893-a576-3c43ac600daf.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawc6e6afeb-1d00-4893-a576-3c43ac600daf.tmp
                                        • Size 12KB
                                        • SHA256 c40816ce42cfd061c0ead1a8d1cba4736a40ecdb6a7fef90b51deb72aefa3a79
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawc842583f-9b76-4f05-9cbe-1022993b51f2.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawc842583f-9b76-4f05-9cbe-1022993b51f2.tmp
                                        • Size 8KB
                                        • SHA256 609e3c8b003421e2c477cf8d03d395361be7d51264a586c2c1aa40cf58b8e9fc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawcb6acd97-aedd-4a16-96a0-1b0a5bf2ad69.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawcb6acd97-aedd-4a16-96a0-1b0a5bf2ad69.tmp
                                        • Size 13KB
                                        • SHA256 b566cc999a65d0979fe740fe6db64a420210bc10e3a89ccdd0cc2b292d723ef8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawcc11ba41-e438-4717-9575-925f41d4eb6f.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawcc11ba41-e438-4717-9575-925f41d4eb6f.tmp
                                        • Size 8KB
                                        • SHA256 1caa6e5985c62660f26617eba1e28b8393daba9f2c87735f4f786bfacb85deff
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawcf551033-519e-4dc2-b7a0-c24deb548490.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawcf551033-519e-4dc2-b7a0-c24deb548490.tmp
                                        • Size 10KB
                                        • SHA256 016bd55519dab139dbed8471a75330d72f1b9b5b220df14619d3ad53b5eef9e1
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawcf6b31ba-dc42-4a08-ada2-45cc7f7b5d5f.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawcf6b31ba-dc42-4a08-ada2-45cc7f7b5d5f.tmp
                                        • Size 2KB
                                        • SHA256 611c844c3040239cdf39296703d51511d2803ebfd63e808c00038387d31ecb28
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawd1362364-6cfe-4245-91f1-4a44e2ee4d7d.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawd1362364-6cfe-4245-91f1-4a44e2ee4d7d.tmp
                                        • Size 12KB
                                        • SHA256 a0e59ff2716fe19fa879e811eeff53e2fbb50ee0fb7e696a86adff9c5f7257c0
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawd1aa1704-893f-43e7-a11c-abe7b22207b9.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawd1aa1704-893f-43e7-a11c-abe7b22207b9.tmp
                                        • Size 2KB
                                        • SHA256 a5b86e3afb58e6a8097ccdbf1480e6a3a909812fe7844ec40cdf8492b947cbc1
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawd3dd9f4e-ee5c-4721-9e1e-9c62c218be4e.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawd3dd9f4e-ee5c-4721-9e1e-9c62c218be4e.tmp
                                        • Size 14KB
                                        • SHA256 eeec9133179a21a95290f9c80ba272281b4ce5aacd9b6492d3e1e32cee0d2703
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawd51d5565-73fe-48b5-83ae-9371588afb43.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawd51d5565-73fe-48b5-83ae-9371588afb43.tmp
                                        • Size 14KB
                                        • SHA256 4db2fe428839d3e4da1f42683d7971df6d5566a72def2f9bb7030faa63455280
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawda4874c8-ca12-47ef-a329-d95cbf8eadd4.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawda4874c8-ca12-47ef-a329-d95cbf8eadd4.tmp
                                        • Size 1KB
                                        • SHA256 231147511660147326a1ac07c8c553e4f79308f4e5052c9f97a6822eb223b613
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawdbdb516b-07c8-456e-91c5-14136e3458c6.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawdbdb516b-07c8-456e-91c5-14136e3458c6.tmp
                                        • Size 14KB
                                        • SHA256 de386b92604bf56655ce21d805e8869d35f1c956d0f7349ba322d439ef5c7e13
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawde4fec31-48a2-42e0-a9e7-efe4bd0c3f42.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawde4fec31-48a2-42e0-a9e7-efe4bd0c3f42.tmp
                                        • Size 10KB
                                        • SHA256 a86564761bf964e9d30c2e2fd951247350bd322c9c8b531ec697489c96b46471
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawdfc8e461-0678-4926-9de5-d1d0afd1da9e.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawdfc8e461-0678-4926-9de5-d1d0afd1da9e.tmp
                                        • Size 2KB
                                        • SHA256 fd1b6c9a5cdda275ff5e1fe03831d5c98b988d4689805b0be8e1f648d025062d
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawe0338750-31a0-457d-a5f3-902774d8f9b7.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawe0338750-31a0-457d-a5f3-902774d8f9b7.tmp
                                        • Size 14KB
                                        • SHA256 c49df7fd46909aeafe4047fe7d31f383b2d9d1f42d38a43fabe3e471f656ea42
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawe14b6372-919f-4cef-b4c2-13b9f1fcfaea.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawe14b6372-919f-4cef-b4c2-13b9f1fcfaea.tmp
                                        • Size 2KB
                                        • SHA256 885af86cbe8afa8ee521d40f7db46e10094d62dcc732882d7c218369a795f8cf
                                        • MD5 SHA1 SHA512 TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawe17b5db0-8042-45ba-86da-3501f458d4ce.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawe17b5db0-8042-45ba-86da-3501f458d4ce.tmp
                                        • Size 14KB
                                        • SHA256 8f12c13d5264e8b324a36e9ea93e4efbf26ae752be2d3817ceabdf78d8ebaf79
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawe197d8eb-7381-4b13-8e8c-d35df079497e.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawe197d8eb-7381-4b13-8e8c-d35df079497e.tmp
                                        • Size 17KB
                                        • SHA256 8fdbe160baf38a67f72ec187057706ab0a0680aa36115c8a799e374c102b56ce
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawe9890fcb-6f3e-4310-933e-9be7a667cf4a.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawe9890fcb-6f3e-4310-933e-9be7a667cf4a.tmp
                                        • Size 14KB
                                        • SHA256 c0b01beb5b8d61a67fd8ce2161798d7a72068294e5c171684dc744fd44dfb464
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawed7748c6-5b3c-40b5-af16-4ff99a37d1d7.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawed7748c6-5b3c-40b5-af16-4ff99a37d1d7.tmp
                                        • Size 10KB
                                        • SHA256 5c8110286825eb64c7d37f2574716eb9e915b522956239072c7892d3e069f180
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawed7ff432-31c3-4221-befe-c1eeb2266fac.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawed7ff432-31c3-4221-befe-c1eeb2266fac.tmp
                                        • Size 9KB
                                        • SHA256 1ca3eebb94c98c10c615450b3956944954d4231d369ac97240f8ba709bb9aa8c
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawed89c04d-4165-48e5-8c6a-d3e729917baa.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawed89c04d-4165-48e5-8c6a-d3e729917baa.tmp
                                        • Size 14KB
                                        • SHA256 420bfaed7a791d2149830ff92c38f77fc66e672e232ad2db4ac156de950a5b81
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawee003041-47ad-41a8-aa43-dc7577504dbc.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawee003041-47ad-41a8-aa43-dc7577504dbc.tmp
                                        • Size 12KB
                                        • SHA256 4125270e8dca6c5645939f6f20000796d6afde044fc1fa2984feb9cd88c8cf30
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawee15dafb-630d-43fa-a093-5e4df71b2d2a.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawee15dafb-630d-43fa-a093-5e4df71b2d2a.tmp
                                        • Size 9KB
                                        • SHA256 32c680fbbafae267a5c75b09238dc17c5ed3eaed0d10dfcfa832f67b11e11de4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawee2910d8-317b-463d-a167-9526e1970fe7.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawee2910d8-317b-463d-a167-9526e1970fe7.tmp
                                        • Size 14KB
                                        • SHA256 eacc7b2f94480f913acb5dc0c8112ff0c0344a4eb1fe454979941b82f2743ab4
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawf0e61fc3-2086-407b-adb7-78d00a72171a.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawf0e61fc3-2086-407b-adb7-78d00a72171a.tmp
                                        • Size 10KB
                                        • SHA256 e63a4e219ff64c2ebf2e4dadf0b1e9c6f9d095657b135ad31136c3d1978d0c53
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawf38cd9d7-ed2c-49a5-b115-9051919330a5.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawf38cd9d7-ed2c-49a5-b115-9051919330a5.tmp
                                        • Size 17KB
                                        • SHA256 695c21347fc2f5d4ea030ba8ec6fc05e7226488ffb69e58efe803857c0864568
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawf66816c0-6bbe-45ee-a32c-a97ef431cf1c.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawf66816c0-6bbe-45ee-a32c-a97ef431cf1c.tmp
                                        • Size 9KB
                                        • SHA256 505d088e66c4196a6202e32243cf7d22af9f31aa747be045be3947e3e70291cc
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawfbbf764e-30e1-4a15-bec0-827e9df9ed72.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawfbbf764e-30e1-4a15-bec0-827e9df9ed72.tmp
                                        • Size 10KB
                                        • SHA256 fcfa0168219ec678f7345c78283f7ba796a3c2bdf1f3e50d98a60b6ad22c7f52
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawfce78e63-fead-4248-8015-29d3f6343d60.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawfce78e63-fead-4248-8015-29d3f6343d60.tmp
                                        • Size 16KB
                                        • SHA256 546ad3387e62654a234c7eae0eeff5deba740c1d8263abd1b7b5711ea2a019b8
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawfe819500-6710-470d-85d8-ad0c5c07000d.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9383f82f-a8ee-4471-9ed9-765c26501f9b.rawfe819500-6710-470d-85d8-ad0c5c07000d.tmp
                                        • Size 14KB
                                        • SHA256 054ab737e23bab1dfd1ddaec6ae2e16ee6b7989b03d9adce3a96803a0dcd685e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        MANIFEST-000001

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\MANIFEST-000001
                                        • Size 41B
                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                        • MD5 SHA1 SHA512

                                        rhs.dat

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\rhs.dat
                                        • Size 113KB
                                        • SHA256 3cd8a5c7b333ea72b91c79163f48c987332bdd82dec6683dea512e8a77003162
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        ssdfp5600.0.1465554592

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592
                                        • Size 412B
                                        • SHA256 9e1f12035c9b73326c1e8113ec55a5eac43815f4950afe9e672b4eba505eb4b9
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592099cc2c5-e7c2-4fc9-b003-875339b823df.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592099cc2c5-e7c2-4fc9-b003-875339b823df.tmp
                                        • Size 1KB
                                        • SHA256 aa75695e22d9a89ab96f79184b7a9781d9210d006a1a46f53410b14cf3823227
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.14655545920a473699-85c2-4cb1-bf54-a715dc558906.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.14655545920a473699-85c2-4cb1-bf54-a715dc558906.tmp
                                        • Size 1KB
                                        • SHA256 15501dbb7009e7a8cd2eb1a8350531d26614aa03b4f19cafb9c33146e3b86e52
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.14655545921d8ba3da-3492-4779-a803-f77b7aba50fd.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.14655545921d8ba3da-3492-4779-a803-f77b7aba50fd.tmp
                                        • Size 2KB
                                        • SHA256 730898b1b7837cb10768531b953dd1ff40e9ee9baa9d58f67ab3bb978f5c85b4
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.14655545922c5b1a8c-1d9a-4e9c-90cf-983b11b3201f.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.14655545922c5b1a8c-1d9a-4e9c-90cf-983b11b3201f.tmp
                                        • Size 3KB
                                        • SHA256 4995bcd56d3739c99a77ab0f9247641e70cbf430b086e37ffd272e68f25b4090
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.146555459243290f9e-284c-44fd-b4b9-236ed049e220.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.146555459243290f9e-284c-44fd-b4b9-236ed049e220.tmp
                                        • Size 1KB
                                        • SHA256 02f3044bf4ff909209b7dd347ebc40f140130cff7857a8a6f219073031266724
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592483b5d16-3d09-4aad-95dd-0a8bc1d05a67.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592483b5d16-3d09-4aad-95dd-0a8bc1d05a67.tmp
                                        • Size 1KB
                                        • SHA256 761559d858e6aa6d70a2168db434ecae4e896c08c441aa7f6456f042f055e213
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.14655545928e7b27e2-e502-4f9d-93f7-e2ededb1467d.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.14655545928e7b27e2-e502-4f9d-93f7-e2ededb1467d.tmp
                                        • Size 603B
                                        • SHA256 e4ecf5e4825d770397e03c04dd0dd369a993bbca3c4a2cfb371e5d4dfedef4c2
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.146555459293c965f8-df5b-43e1-a209-6ef364319cdf.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.146555459293c965f8-df5b-43e1-a209-6ef364319cdf.tmp
                                        • Size 3KB
                                        • SHA256 3960557b8e78d391a128880c3dcceebf8fc67fc037b243eb48dbf4d223b7a222
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.14655545929999b218-3fb0-462b-81b8-bc8e55632740.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.14655545929999b218-3fb0-462b-81b8-bc8e55632740.tmp
                                        • Size 693B
                                        • SHA256 bda0003acb87c8367dd606dd4cd1468c08818478fe00027fb3136583078d4894
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592a02671c4-c637-4a47-9f69-41ae84659969.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592a02671c4-c637-4a47-9f69-41ae84659969.tmp
                                        • Size 1KB
                                        • SHA256 73894b6bcc106363cf81036309e6722e6174e83a03d11e4269ca40449b7e4e4d
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592a217e4fa-2d89-46f7-8a0f-bb4c776cb698.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592a217e4fa-2d89-46f7-8a0f-bb4c776cb698.tmp
                                        • Size 874B
                                        • SHA256 30463e0b272744e0a3f2bc710e82ccafe5070ff6f7fdfb0c1444d68ee9fea5f5
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592be85f496-f670-4855-99cb-b2a323b667e1.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592be85f496-f670-4855-99cb-b2a323b667e1.tmp
                                        • Size 970B
                                        • SHA256 812384ee307b1643202226a66f671db7802956bd16acd6ea9bd07767ac321a55
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592c32a01ce-6829-413f-9902-e41eeed69135.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592c32a01ce-6829-413f-9902-e41eeed69135.tmp
                                        • Size 3KB
                                        • SHA256 97452cbfc56ed34422c1126d957d98dbe2f253f0cf5548bc5f3b730bcd208685
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592c4e4ca64-de2e-40bc-89b1-1cc87280029d.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592c4e4ca64-de2e-40bc-89b1-1cc87280029d.tmp
                                        • Size 3KB
                                        • SHA256 f2c840fa10412492bdfc145ccd40a1ed7a3d1b9241a3718dc70c2ef6b296939e
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592ca3a842c-e861-4d14-9caf-f2e4e5f99ac7.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592ca3a842c-e861-4d14-9caf-f2e4e5f99ac7.tmp
                                        • Size 3KB
                                        • SHA256 ccfc52744db78815235975d900ed40d32d0b502551aef7260de440ea0d34fabc
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592d44d88c4-c9dc-4970-a180-6f678284711a.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592d44d88c4-c9dc-4970-a180-6f678284711a.tmp
                                        • Size 505B
                                        • SHA256 9782a0fdc91e0236c97b3c1a4236f572bf20e9ce31013fa86d3d6ea7581b6ff2
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592d53e46a9-19b5-4760-ba02-c224a6864bc2.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592d53e46a9-19b5-4760-ba02-c224a6864bc2.tmp
                                        • Size 3KB
                                        • SHA256 447cd02bdeabecd872e13b88b62c2390199c0da7d73a993167cf703a82caf68f
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592d5f837be-2e6d-4e7a-a67f-5151e046507b.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592d5f837be-2e6d-4e7a-a67f-5151e046507b.tmp
                                        • Size 1KB
                                        • SHA256 eac790f6e2b56eeaf9244af60224e0f062dd2bedb4a7a6b2549946f934a57474
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592e5f6ec80-8a0d-4dd2-af76-614d22c143e6.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592e5f6ec80-8a0d-4dd2-af76-614d22c143e6.tmp
                                        • Size 3KB
                                        • SHA256 c2748343c59fe4c91bf689c399f6bc2182d955b4893e8a75e3d4e63837428832
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592e8946953-15bb-4a64-a8ae-df1b3ce1739a.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592e8946953-15bb-4a64-a8ae-df1b3ce1739a.tmp
                                        • Size 780B
                                        • SHA256 d70973644d70ec4cfe58e65d8935898523d918e82b27da5e6a156aa2d3be9074
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592ea71aa63-ab2d-4e38-9f9b-1696d3835032.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592ea71aa63-ab2d-4e38-9f9b-1696d3835032.tmp
                                        • Size 1KB
                                        • SHA256 9f6741f393dc85303a596822d3c318d21d9fb4b57d54a8a6eb7c5ee089aca4fe
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.0.1465554592ff6bf2a6-9169-4e68-9491-862a7bdd5008.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.0.1465554592ff6bf2a6-9169-4e68-9491-862a7bdd5008.tmp
                                        • Size 3KB
                                        • SHA256 d28df699028d2f35208b81f8b0256a5c0ec0411a7534d7d6e15f861dd8555963
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.1325237681

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.1325237681
                                        • Size 171B
                                        • SHA256 8188e2869e069eccb32d017e96d1940384cc36e311a78562fa2c7317c2f9edeb
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.13252376810424bf93-5a94-401b-a101-ca73695f1b74.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.13252376810424bf93-5a94-401b-a101-ca73695f1b74.tmp
                                        • Size 779B
                                        • SHA256 a4c313cbd7f885e52c0fe8d3fb48d60324dc104d6d5815c7cf7ec170ed645e47
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.13252376810f9e3373-3019-48b1-a3e3-ecc81d2e3815.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.13252376810f9e3373-3019-48b1-a3e3-ecc81d2e3815.tmp
                                        • Size 692B
                                        • SHA256 3f09b816c6fb9a5adb6c0948f32c7387ef9080f7d2d2def917c9342b2748fb22
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.132523768115db1cad-f818-4b76-ad6b-ea019ba35c29.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.132523768115db1cad-f818-4b76-ad6b-ea019ba35c29.tmp
                                        • Size 1KB
                                        • SHA256 38dba48c07857b3a26ff85ed568be41a4e86380cdecb1b0d8937ba0226c4cc63
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.1325237681296a3291-a038-4e19-ba11-27508aeb3e39.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.1325237681296a3291-a038-4e19-ba11-27508aeb3e39.tmp
                                        • Size 1KB
                                        • SHA256 18c043b8e181c2a279554fcfaf15d00468c893e49470d1882b18baedc565cb45
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.13252376814000a807-ec14-4580-b991-5fc29e85de54.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.13252376814000a807-ec14-4580-b991-5fc29e85de54.tmp
                                        • Size 873B
                                        • SHA256 ad40e5b19c58f88caef0d823b4000088b6c222a82720bc26cb061a51cb4fdb9f
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.132523768142d34d94-3221-45e2-a0f9-1e26caed5eb4.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.132523768142d34d94-3221-45e2-a0f9-1e26caed5eb4.tmp
                                        • Size 969B
                                        • SHA256 de476793ee809efbc41a82e0695184378759da46af422e5f356cb0741aee9419
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.1325237681481c8958-f303-43e6-9c7a-c967f4ab39a5.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.1325237681481c8958-f303-43e6-9c7a-c967f4ab39a5.tmp
                                        • Size 1KB
                                        • SHA256 34aaf9fc2faf5bcfe1d29447c31a9e8c8981a90684bd80e13e8f6b837d75cf60
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.132523768160766eb0-2927-461a-808d-0333d5abe47b.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.132523768160766eb0-2927-461a-808d-0333d5abe47b.tmp
                                        • Size 411B
                                        • SHA256 0790ed24fa4f3635e4f05e82d511424607941c6f917ef2d966d59420fff65798
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.132523768162472d2a-620e-4111-90fb-566608dd2c50.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.132523768162472d2a-620e-4111-90fb-566608dd2c50.tmp
                                        • Size 200B
                                        • SHA256 11694291f0273de2ebed7c949fcec1d83ecdcd669eee5f8765c0317b91a04845
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.1325237681663b5622-bcc8-4757-8358-0d7e51b9fd98.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.1325237681663b5622-bcc8-4757-8358-0d7e51b9fd98.tmp
                                        • Size 602B
                                        • SHA256 ae2f4dbee841e55bb17a043c4642bee073bc447a9035a85a1402a5e40145f852
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.132523768167d99a80-473e-492b-a87d-11facd66340c.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.132523768167d99a80-473e-492b-a87d-11facd66340c.tmp
                                        • Size 504B
                                        • SHA256 00c23729fbd2ae407defe7f1e5b563af6a1c6752957f2c6cf1b98d83d8cbe576
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.1325237681735f5ce1-18f2-4f40-aaa7-b35bbb676db5.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.1325237681735f5ce1-18f2-4f40-aaa7-b35bbb676db5.tmp
                                        • Size 1KB
                                        • SHA256 c8312e4e5ec15f9a363012905e1a2244ee270e1387f0c9e796b0f0c82f603c5f
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp5600.1.132523768183dd5bd8-a615-46f6-8229-cdd17824f1d1.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5600.1.132523768183dd5bd8-a615-46f6-8229-cdd17824f1d1.tmp
                                        • Size 1KB
                                        • SHA256 6d3f7eb342d4ecd1d62c59197cca927a95cf4fcb4a6f9a1d2adc2bf6c38750de
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp860.0.1617335373

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp860.0.1617335373
                                        • Size 203B
                                        • SHA256 49ad5f7acb548da25f36dca32580d388532ff908b2ca63ede5d6e8735e2e02c6
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp860.0.16173353732071bdc9-182b-44a8-a9c0-ed2a0d0ba134.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp860.0.16173353732071bdc9-182b-44a8-a9c0-ed2a0d0ba134.tmp
                                        • Size 265B
                                        • SHA256 9873ab545fc143c585c68b6022f6525d84150d6c582cd982b7be9dc09df42951
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp860.0.16173353733b6c4054-463e-4f19-bd38-ee9b7e72d03c.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp860.0.16173353733b6c4054-463e-4f19-bd38-ee9b7e72d03c.tmp
                                        • Size 2KB
                                        • SHA256 1c3061dcf91dcb29d5f8ec4779fa04b94e408116f6eec8a8d74f0cce675bdcf5
                                        • MD5 SHA1 SHA512 TLSH

                                        ssdfp860.0.1617335373755730c8-661b-4541-883f-f83fe15c6544.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp860.0.1617335373755730c8-661b-4541-883f-f83fe15c6544.tmp
                                        • Size 1KB
                                        • SHA256 130977264bd931b6b0ac6fd2393ceba701204fb1720df91a1accd15b99842aff
                                        • MD5 SHA1 SHA512 TLSH

                                        suggestions_cache.jsonac9a6b02-89c1-40bf-80d6-7dd0f792311c.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsonac9a6b02-89c1-40bf-80d6-7dd0f792311c.tmp
                                        • Size 652KB
                                        • SHA256 dd2225024771d3aa1384b4c32816e6039d2a224af767b68ae0a03c775d17c02e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State29fa2311-7031-4a92-8e4b-c7e0c9e7b752.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State29fa2311-7031-4a92-8e4b-c7e0c9e7b752.tmp
                                        • Size 3KB
                                        • SHA256 07b39cc2f9cfc1d22e98aa10d3bdec7b1d3420a389de1e785801a3c1b8147438
                                        • MD5 SHA1 SHA512 TLSH

                                        Local State5b2c3005-62b0-4c97-89f2-2e5ec0e6ff1a.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State5b2c3005-62b0-4c97-89f2-2e5ec0e6ff1a.tmp
                                        • Size 5KB
                                        • SHA256 d9c0c9673c0dc501d6bed7a57dd84c3bc77086592986c924c1dd292c85d0b58e
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        Local State601235b6-7a5a-4f7e-9d28-595df5e1534f.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State601235b6-7a5a-4f7e-9d28-595df5e1534f.tmp
                                        • Size 3KB
                                        • SHA256 51e1b08b22e0d73e1f0af4d55619c179ac36a1cd19b7f78318bd4d1e6444c3ce
                                        • MD5 SHA1 SHA512 TLSH

                                        VariationsSeedV232b90a14-3831-47e4-bc3f-259ce901b099.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV232b90a14-3831-47e4-bc3f-259ce901b099.tmp
                                        • Size 11B
                                        • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                        • MD5 SHA1 SHA512

                                        VariationsSeedV2a66a4347-a75e-4c22-9bd8-10efed40c762.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2a66a4347-a75e-4c22-9bd8-10efed40c762.tmp
                                        • Size 19B
                                        • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                        • MD5 SHA1 SHA512

                                        clipboard_injection_guard_rules.json

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\clipboard_injection_guard_rules.json
                                        • Size 6KB
                                        • SHA256 b8d84b82da3d90323de6cf1b4e3594bf7acb99101c72379b10f4b982f82bd487
                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                        metadata.json50fed1ad-f325-4a6e-b861-de7aa4efd1d8.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.json50fed1ad-f325-4a6e-b861-de7aa4efd1d8.tmp
                                        • Size 13B
                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                        • MD5 SHA1 SHA512

                                        memory/5252-469-0x00007FFA2FD60000-0x00007FFA2FD61000-memory.dmp

                                        memory/5252-470-0x00007FFA2FC70000-0x00007FFA2FC71000-memory.dmp