Analysis

  • user interaction
    yes
  • max time kernel
    173s
  • max time network
    172s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/10/2026, 22:29

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample261013-2d9yvsvscy
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 19 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 15 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 18 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 50 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3020
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1980
      • C:\Users\Admin\AppData\Local\Temp\7zSCB77FB78\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSCB77FB78\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Enumerates system info in registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:732
        • C:\Users\Admin\AppData\Local\Temp\7zSCB77FB78\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSCB77FB78\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6a71e09d8,0x7ff6a71e09e8,0x7ff6a71e09f8
          4⤵
          • Executes dropped EXE
          PID:404
        • C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:2884
        • C:\Users\Admin\AppData\Local\Temp\7zSCB77FB78\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSCB77FB78\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=732 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_20261013232938" --session-guid=bdd2b8db-604a-4dec-9534-f11b9ddd8599 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=8C08000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:2520
          • C:\Users\Admin\AppData\Local\Temp\7zSCB77FB78\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSCB77FB78\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x2a4,0x2a8,0x2ac,0x270,0x2b0,0x7ff6a71e09d8,0x7ff6a71e09e8,0x7ff6a71e09f8
            5⤵
            • Executes dropped EXE
            PID:2336
          • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe" --backend --initial-pid=732 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381" --session-guid=bdd2b8db-604a-4dec-9534-f11b9ddd8599 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=137.0.6036.39
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:1784
            • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff7ed2d09d8,0x7ff7ed2d09e8,0x7ff7ed2d09f8
              6⤵
              • Executes dropped EXE
              PID:2128
            • C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:2800
              • C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x10ec9cc,0x10ec9d8,0x10ec9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:3404
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:2236
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x109c9cc,0x109c9d8,0x109c9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4752
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:2596
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:3108
                    • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ff8b1811e28,0x7ff8b1811e38,0x7ff8b1811e48
                      10⤵
                      • Executes dropped EXE
                      PID:2708
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:1760
                    • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ff8b1811e28,0x7ff8b1811e38,0x7ff8b1811e48
                      10⤵
                      • Executes dropped EXE
                      PID:3140
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x27c,0x280,0x284,0x254,0x288,0xb07324,0xb07330,0xb0733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:3832
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4880
                      • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ff8b1811e28,0x7ff8b1811e38,0x7ff8b1811e48
                        11⤵
                        • Executes dropped EXE
                        PID:3484
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:1076
                      • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x238,0x240,0x244,0x234,0x248,0x7ff8b1811e28,0x7ff8b1811e38,0x7ff8b1811e48
                        11⤵
                        • Executes dropped EXE
                        PID:4288
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:5248
                      • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x238,0x240,0x244,0x234,0x248,0x7ff8b1811e28,0x7ff8b1811e38,0x7ff8b1811e48
                        11⤵
                        • Executes dropped EXE
                        PID:5532
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:3048
              • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff8b1811e28,0x7ff8b1811e38,0x7ff8b1811e48
                7⤵
                • Executes dropped EXE
                PID:4048
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1704,i,759946094634340281,5571029494568834908,262144 --field-trial-handle=1920,i,11478816757695000961,4760764803640612551,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,2928268005445913240,8035546009474906942,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1916 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5180
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2192,i,10969858838263237644,16057036660144084338,524288 --field-trial-handle=1920,i,11478816757695000961,4760764803640612551,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,2928268005445913240,8035546009474906942,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2196 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                PID:5240
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2496,i,793804155233363767,5320148614215480440,524288 --field-trial-handle=1920,i,11478816757695000961,4760764803640612551,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,2928268005445913240,8035546009474906942,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2400 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5380
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3868,i,15632624213553659951,1325961346296813285,1572864 --field-trial-handle=1920,i,11478816757695000961,4760764803640612551,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,2928268005445913240,8035546009474906942,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3912 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5676
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4164,i,14408836717039525683,1364373202431068413,524288 --field-trial-handle=1920,i,11478816757695000961,4760764803640612551,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,2928268005445913240,8035546009474906942,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4188 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5856
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4412,i,9170791955715075562,8779532470749421050,1572864 --field-trial-handle=1920,i,11478816757695000961,4760764803640612551,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,2928268005445913240,8035546009474906942,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4452 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6024
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4428,i,9795327853574188117,15373378316246127563,524288 --field-trial-handle=1920,i,11478816757695000961,4760764803640612551,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,2928268005445913240,8035546009474906942,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4344 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5832
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4444,i,14268320242403555284,1773944814737381327,524288 --field-trial-handle=1920,i,11478816757695000961,4760764803640612551,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,2928268005445913240,8035546009474906942,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4892 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5788
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4880,i,148041129568287390,12500589064333073023,524288 --field-trial-handle=1920,i,11478816757695000961,4760764803640612551,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,2928268005445913240,8035546009474906942,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5032 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4956
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5156,i,9075285053612883942,6460717314593959470,1572864 --field-trial-handle=1920,i,11478816757695000961,4760764803640612551,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1924,i,2928268005445913240,8035546009474906942,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5196 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:9372
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6356
              • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff8b1811e28,0x7ff8b1811e38,0x7ff8b1811e48
                7⤵
                • Executes dropped EXE
                PID:6368
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1744,i,16388468810666409201,1148350160622563894,262144 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1964 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6496
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2284,i,5138424847961601441,11925834466860741384,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2280 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:4500
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2540,i,5798143033745690903,11927297028513408008,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2740 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7352
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3028,i,4763611462535834916,5924948605367248154,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3532 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7344
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3464,i,15807676819331923164,6767855923249579882,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3552 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:7368
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3504,i,13084422573121305940,15475226731794782921,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3632 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7392
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3516,i,12314700135877713093,9164645686733369504,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3652 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7416
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3476,i,16306221005510022481,12439958988452459702,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3572 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7440
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3492,i,9709242486612846654,4675352863933690190,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3612 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7464
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3480,i,16927310945117065299,8118509626256041300,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3592 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:7488
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3720,i,14095552719834017526,9393659900152268499,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3732 /prefetch:1
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                PID:7500
              • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Executes dropped EXE
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:8328
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4812,i,14398618777053313291,625484254039280571,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4848 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8200
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4856,i,17850149323878757792,12359304242548264935,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5000 /prefetch:1
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8236
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5008,i,4226815331241091911,10996959104139653708,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5248 /prefetch:1
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8628
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5268,i,8066229541211551000,7190491114390784565,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=6104 /prefetch:1
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:8652
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5884,i,17196585252206016458,13693183332886397663,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5540 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:8688
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5992,i,2893067033235349847,3567965072842854895,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6884 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6372
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5512,i,10398565326902303930,18281911695914336730,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6520 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                PID:6472
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6744,i,13955318372346081364,8926935884443960056,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6692 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7252
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6688,i,12735516766514883513,9212578116598244792,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6664 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:6564
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6464,i,431405163290227919,13587942739150924593,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6632 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:7768
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6976,i,8368893966407228234,16120074124543352059,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7016 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:7744
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6988,i,11100537319852170362,13961449572677078567,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7036 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:8840
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7000,i,13851523853847883800,5956194345995630294,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7056 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:9304
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7476,i,5705590705429838881,7829057791631566840,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7292 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:8228
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7504,i,2391862237013281601,8850397680668944667,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7576 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:9280
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7496,i,14975239580806517037,1631748485172937915,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7556 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:8020
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7512,i,14065208808467550210,6690286227226474123,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7596 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:6664
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7520,i,11512755896829327306,12327222327278574065,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7616 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:9232
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7528,i,8456563367479776538,15537189665296594997,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=7636 /prefetch:8
                7⤵
                  PID:6344
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7548,i,691924985387612430,15349717328236025222,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=7660 /prefetch:8
                  7⤵
                    PID:6620
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7724,i,183237222833028471,15810685737271119928,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=7752 /prefetch:8
                    7⤵
                      PID:6604
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=8928,i,7859862429615515256,16066666619235936769,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8980 /prefetch:2
                      7⤵
                      • Checks computer location settings
                      • Enumerates system info in registry
                      PID:8792
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8892,i,15729520913266986395,16710498816740896762,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=7788 /prefetch:8
                      7⤵
                        PID:8756
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7760,i,16124147937676905646,2728082875361188450,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9340 /prefetch:8
                        7⤵
                        • Enumerates system info in registry
                        PID:8432
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9140,i,17996209026905032744,3885681692635810491,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9352 /prefetch:8
                        7⤵
                          PID:8396
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9700,i,8648111017918652224,1597703530866552622,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9736 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          PID:9392
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9876,i,3482136587778204355,3838609080467942208,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9776 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:9696
                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                          7⤵
                          • Reads the TCP/IP host and domain name from the registry
                          • Enumerates system info in registry
                          PID:2904
                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x294,0x298,0x29c,0x26c,0x2a0,0x7ff6a6ff8598,0x7ff6a6ff85a8,0x7ff6a6ff85b8
                            8⤵
                              PID:8604
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10344,i,993314813429511079,6268768337329267928,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10336 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            PID:1528
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10460,i,16037491702938169418,9565626304631749641,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10476 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            PID:7752
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10644,i,9140911342986247193,15589535179770300724,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10512 /prefetch:1
                            7⤵
                            • Checks computer location settings
                            PID:7736
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10704,i,3986023958722774070,17698209521521192073,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10708 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            PID:8760
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10852,i,11611855903528148079,3539162029668933351,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11000 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            PID:9004
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11008,i,759255162211192540,14394645901768616772,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11156 /prefetch:8
                            7⤵
                              PID:9248
                            • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe" --fix-taskbar-pins
                              7⤵
                              • Enumerates system info in registry
                              PID:8736
                              • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff7ed2d09d8,0x7ff7ed2d09e8,0x7ff7ed2d09f8
                                8⤵
                                  PID:9208
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11236,i,7165383535989065659,2698785483067873523,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11208 /prefetch:8
                                7⤵
                                  PID:8732
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11232,i,3176359652812465170,13434205030408901431,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10948 /prefetch:8
                                  7⤵
                                    PID:9292
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10332,i,16322465917765827835,3082429963493733926,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=10420 /prefetch:8
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:7860
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9920,i,11182834983520930924,10744777745146474832,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=9976 /prefetch:8
                                    7⤵
                                    • Enumerates system info in registry
                                    PID:9436
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9524,i,16827493428057717770,13558334964721847807,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8136 /prefetch:8
                                    7⤵
                                      PID:5348
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8012,i,3387112565155103348,12512945982369804863,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=8096 /prefetch:8
                                      7⤵
                                        PID:9564
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=10980,i,3647398392527616886,11472426448333937474,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11284 /prefetch:2
                                        7⤵
                                        • Checks computer location settings
                                        • Enumerates system info in registry
                                        PID:9956
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8624,i,9271906523766535995,16803763212094708925,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8588 /prefetch:8
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:10096
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=8152,i,7577067150750320627,1532875971708363785,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=8744 /prefetch:2
                                        7⤵
                                        • Checks computer location settings
                                        PID:9568
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9272,i,7318807209313583372,3849680713169154017,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=7776 /prefetch:8
                                        7⤵
                                          PID:5616
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=3772,i,15619448122401253766,18061943672958568258,1572864 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8680 /prefetch:2
                                          7⤵
                                          • Checks computer location settings
                                          PID:5340
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8896,i,4770284645948427255,175985044313455747,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10612 /prefetch:8
                                          7⤵
                                            PID:3064
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10452,i,11341409898405851409,2611579900138658644,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=9344 /prefetch:8
                                            7⤵
                                              PID:5660
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6816,i,2845302136352269412,9344247027277086153,524288 --field-trial-handle=1972,i,7160043809276438760,8758335775889661175,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1976,i,6342284382977398907,8026380770213417067,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=6708 /prefetch:8
                                              7⤵
                                              • Enumerates system info in registry
                                              PID:7976
                                      • C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                        "C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                        4⤵
                                        • Executes dropped EXE
                                        • Writes a Windows system DLL name to a user directory
                                        • System Location Discovery: System Language Discovery
                                        PID:4128
                                      • C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\assistant_installer.exe
                                        "C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\assistant_installer.exe" --version
                                        4⤵
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • System Location Discovery: System Language Discovery
                                        • Enumerates system info in registry
                                        • Suspicious use of WriteProcessMemory
                                        PID:4992
                                        • C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\assistant_installer.exe
                                          "C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x10ec9cc,0x10ec9d8,0x10ec9e4
                                          5⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • System Location Discovery: System Language Discovery
                                          PID:3708
                                • C:\Windows\System32\rundll32.exe
                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                  1⤵
                                    PID:2204
                                  • C:\Windows\SysWOW64\DllHost.exe
                                    C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                    1⤵
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious use of SetWindowsHookEx
                                    PID:620
                                  • C:\Windows\system32\wbem\unsecapp.exe
                                    C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                    1⤵
                                      PID:5432
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                      1⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Suspicious use of WriteProcessMemory
                                      PID:6056
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x234,0x238,0x23c,0x230,0x240,0x7ff8b1811e28,0x7ff8b1811e38,0x7ff8b1811e48
                                        2⤵
                                        • Executes dropped EXE
                                        PID:6116
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                      1⤵
                                      • Reads the TCP/IP host and domain name from the registry
                                      • Enumerates system info in registry
                                      PID:3332
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=137.0.6036.39 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff6a6ff8598,0x7ff6a6ff85a8,0x7ff6a6ff85b8
                                        2⤵
                                          PID:6148
                                        • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                          "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                          2⤵
                                            PID:9300

                                        Network

                                              MITRE ATT&CK Enterprise v16

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              verified_contents.json

                                              • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6356_1213298075\_metadata\verified_contents.json
                                              • Size 1KB
                                              • SHA256 7b6a0e35b924a1a8ec78a59d4d5ead7cb73fcfe03d946c3a4a70ba17f81ade03
                                              • MD5 SHA1 SHA512 TLSH

                                              heuristic_regexes.binarypb

                                              • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6356_1213298075\heuristic_regexes.binarypb
                                              • Size 633B
                                              • SHA256 a10f65d7e0d56702d6f08850c8bee9bd51af17f4be051900ff2b88c9217e425f
                                              • MD5 SHA1 SHA512 TLSH

                                              verified_contents.json

                                              • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6356_1654749159\_metadata\verified_contents.json
                                              • Size 1KB
                                              • SHA256 dbe2b9633a846ea9cc53415961df61c97e3c0b39fa92c4374dba9437e48c6947
                                              • MD5 SHA1 SHA512 TLSH

                                              safety_tips.pb

                                              • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6356_1654749159\safety_tips.pb
                                              • Size 174KB
                                              • SHA256 a711ed1b1f043797d9518081fd03212a4ae704963a96d053d795ab84bb344759
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              opera-one-dark.jpg

                                              • Path C:\Program Files\scoped_dir6356_842858072\opera-one-dark.jpg
                                              • Size 349KB
                                              • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              persona.ini

                                              • Path C:\Program Files\scoped_dir6356_842858072\persona.ini
                                              • Size 217B
                                              • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                              • MD5 SHA1 SHA512 TLSH

                                              opera-one.jpg

                                              • Path C:\Program Files\scoped_dir6356_891324005\opera-one.jpg
                                              • Size 194KB
                                              • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              persona.ini

                                              • Path C:\Program Files\scoped_dir6356_891324005\persona.ini
                                              • Size 207B
                                              • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                              • MD5 SHA1 SHA512 TLSH

                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                              • Size 471B
                                              • SHA256 a7c388043208fc063435f0b80680eb5dea6e2e18335c33414bcd89e24000cfca
                                              • MD5 SHA1 SHA512 TLSH

                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                              • Size 416B
                                              • SHA256 ff8dc009d01e99c46aded76ca2ea282d8ad6f949111e3cf3487e31fa40dbf75c
                                              • MD5 SHA1 SHA512 TLSH

                                              snapshot-new.baf

                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                              • Size 20B
                                              • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                              • MD5 SHA1 SHA512

                                              data_0

                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                              • Size 44KB
                                              • SHA256 f2ef8d92416ac560ab0f6277529092818188152d20fd3c33ed19990155f049e9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              data_1

                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_1
                                              • Size 264KB
                                              • SHA256 6d5235572ecfb53255b53062fd24b1615488bd867b0a77f71481895833bbab32
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              data_2

                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                              • Size 8KB
                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                              • MD5 SHA1 SHA512 SSDEEP

                                              data_3

                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                              • Size 8KB
                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                              • MD5 SHA1 SHA512 SSDEEP

                                              f_000001

                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                              • Size 163KB
                                              • SHA256 a842c5c544d59889f98b27d05aaf14ed4a691d0a683abc3feac6e3edaa01ad4d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              137.0.6036.39.manifest

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\137.0.6036.39.manifest
                                              • Size 225B
                                              • SHA256 a63ae0542021b560b1bd4569d8ad5b20cba067e9ea88db7f1e729fd1423bf530
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-100.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-100.png
                                              • Size 1KB
                                              • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-100_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-100_contrast-white.png
                                              • Size 1KB
                                              • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-140.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-140.png
                                              • Size 1KB
                                              • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-140_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-140_contrast-white.png
                                              • Size 1KB
                                              • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-180.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-180.png
                                              • Size 1KB
                                              • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-180_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-180_contrast-white.png
                                              • Size 1KB
                                              • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-80.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-80.png
                                              • Size 827B
                                              • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                              • MD5 SHA1 SHA512 TLSH

                                              150x150Logo.scale-80_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\150x150Logo.scale-80_contrast-white.png
                                              • Size 799B
                                              • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-100.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-100.png
                                              • Size 781B
                                              • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-100_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-100_contrast-white.png
                                              • Size 752B
                                              • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-140.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-140.png
                                              • Size 991B
                                              • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-140_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-140_contrast-white.png
                                              • Size 865B
                                              • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-180.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-180.png
                                              • Size 1KB
                                              • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-180_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-180_contrast-white.png
                                              • Size 1KB
                                              • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-80.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-80.png
                                              • Size 590B
                                              • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                              • MD5 SHA1 SHA512 TLSH

                                              70x70Logo.scale-80_contrast-white.png

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\Assets\70x70Logo.scale-80_contrast-white.png
                                              • Size 519B
                                              • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                              • MD5 SHA1 SHA512 TLSH

                                              assistant_package

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\assistant_package
                                              • Size 4.0MB
                                              • SHA256 94e3084f1b04722c389ccce1c70129dd62190073ebeccf8c9f9114056c76cef0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              d3dcompiler_47.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\d3dcompiler_47.dll
                                              • Size 4.5MB
                                              • SHA256 f7ca62f2dc8e1d509c5ccf46944bc878208afd081705d555e94dd24720f7ba8f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              dxcompiler.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\dxcompiler.dll
                                              • Size 24.6MB
                                              • SHA256 773065b372d128f44d06f28e43cfa8925e9810ae4aa8ceae6fd2dc277fb5004b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              dxil.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\dxil.dll
                                              • Size 1.4MB
                                              • SHA256 9a73346619078ecb692d3d4edf8257d89fb9207be215c1a9130b1f1ac115739a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              files_list

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\files_list
                                              • Size 6KB
                                              • SHA256 e762b48bcb2cd9bae9f05d9899fa9f09a3290ffe6be0a9a81126b2e73fd1e6ce
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              headless_command_resources.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\headless_command_resources.pak
                                              • Size 2KB
                                              • SHA256 e1f2ec7189570bec91b544cd289af7af3dfe03d4694634068d7ae3ce200792f1
                                              • MD5 SHA1 SHA512 TLSH

                                              icudtl.dat

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\icudtl.dat
                                              • Size 10.4MB
                                              • SHA256 7377adaf7f3aa2170098bd2bc144ee5f8b9677a206b54ce93c0ec392b0a6abea
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              installer.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer.exe
                                              • Size 8.4MB
                                              • SHA256 4c6a3941719ed6e11ac4575e57e09b0610effb73c1587dfa41787f47104437e0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              installer_helper_64.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\installer_helper_64.exe
                                              • Size 606KB
                                              • SHA256 93f55ac758cd83c0e36f0a5871c4fe1870113002fed56e8252ef98efa6c245bb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              libEGL.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\libEGL.dll
                                              • Size 454KB
                                              • SHA256 ccb1ebab658f5d7463c20b8f4af77f4e8f33e0119296de65470cd051d04b80b6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              libGLESv2.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\libGLESv2.dll
                                              • Size 454KB
                                              • SHA256 f43971b4da5acda16fd35ca070373f749fa7eb59fd178f86a787575244996152
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              bg.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\bg.pak
                                              • Size 971KB
                                              • SHA256 00ac07cecb13eb09eef53eb291b2b26c0745d0de86a86c731385d0425954f5f4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              bn.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\bn.pak
                                              • Size 1.2MB
                                              • SHA256 75ac9c3a34ccf86c94bdf5a8ca0ae70ebedb9f646e03c7b4f0569d82e57ac15e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              ca.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\ca.pak
                                              • Size 612KB
                                              • SHA256 414771d6719e4ed6fcb91202d81020eafc3fd6a2c53a6dd68bc0bde70c7c740c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              cs.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\cs.pak
                                              • Size 612KB
                                              • SHA256 f439815f547e86b6348290533702843873029a280bd4a1ff71b6912fe3a87eba
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              da.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\da.pak
                                              • Size 562KB
                                              • SHA256 f05479863ca3494edac71f59e6b8a3fcce1e63f4065fbc11c7d77d759279a799
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              de.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\de.pak
                                              • Size 609KB
                                              • SHA256 23219d3dcc9c881c9cc2703eacdb2cc5aeb486a1f04a166e482144ee140513a0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              el.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\el.pak
                                              • Size 1.0MB
                                              • SHA256 b99ca089731382483fd23a8229bb8916e5926a79426892d914feffe750d7d1c7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              en-GB.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\137.0.6036.39\localization\en-GB.pak
                                              • Size 493KB
                                              • SHA256 1f0036af476181b98b5ac9b71072c7474f1f4c922fe05427f97953a00b444c4a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              browser_assistant.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                              • Size 5.3MB
                                              • SHA256 f399f3c94ce8b3d6666a8f19a0c33d1e3e0b09ceef4887d323e7c4a35cfbd686
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              opera_autoupdate.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                              • Size 7.4MB
                                              • SHA256 db6619994b15baaca103364f2aacad365aaadb52d304ec870a5ee3ef071d661e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              installer_prefs.json.backup

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json.backup
                                              • Size 1KB
                                              • SHA256 9e3fcd66e97831911ef089b87fc85ad05b40b81f4ab9ce3f3def7396afa894f3
                                              • MD5 SHA1 SHA512 TLSH

                                              installer_prefs.jsonfd85ddb8-81e6-41e6-80f7-c811a83ccf75.tmp

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.jsonfd85ddb8-81e6-41e6-80f7-c811a83ccf75.tmp
                                              • Size 1KB
                                              • SHA256 c136b2337e74ff5280c06d763765b49b0014bc3f9ed1e435bc2eab9f47e42e5c
                                              • MD5 SHA1 SHA512 TLSH

                                              opera.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              • Size 3.5MB
                                              • SHA256 dfd840a85dba490cca451403adbb75c4a1812153e014c8465a7cb26689395215
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Opera Browser.lnk

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\Opera Browser.lnk
                                              • Size 1KB
                                              • SHA256 7d7d11b7df362ecc4b10371136e74429e295589274b8f06cf17567d909bb91bd
                                              • MD5 SHA1 SHA512 TLSH

                                              additional_file0.tmp

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\additional_file0.tmp
                                              • Size 2.9MB
                                              • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              assistant_installer.exe

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\assistant_installer.exe
                                              • Size 2.4MB
                                              • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              dbgcore.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\dbgcore.dll
                                              • Size 196KB
                                              • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              dbghelp.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\assistant\dbghelp.dll
                                              • Size 1.8MB
                                              • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              de932af914ba00303d4a2778a383ac9c831101e2.crx

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                              • Size 4.6MB
                                              • SHA256 7709b01cae20a411b72b40ce900b0058c6dd03167d05da7e42bf3d95ceffd582
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              installer_prefs_include.json

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\installer_prefs_include.json
                                              • Size 268B
                                              • SHA256 d1944cd03df71d35555059290c6ede679366630737736bdb1be82d5705d7e153
                                              • MD5 SHA1 SHA512 TLSH

                                              installer_prefs_include.json25e6f98d-05b8-4296-9232-e1e02fad75c7.tmp

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\installer_prefs_include.json25e6f98d-05b8-4296-9232-e1e02fad75c7.tmp
                                              • Size 1KB
                                              • SHA256 3beb6ccad46a6fb43272452194991b6eec806ee2dc9197bd420d8e9bf3303be3
                                              • MD5 SHA1 SHA512 TLSH

                                              installer_prefs_include.json84c0e83a-83eb-4e67-8934-a90d41c41d58.tmp

                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\49a2ddb6-3f48-41fe-88a3-d2769ef1c490 Opera Installer Temp\opera_package_202610132329381\installer_prefs_include.json84c0e83a-83eb-4e67-8934-a90d41c41d58.tmp
                                              • Size 283B
                                              • SHA256 71758da65194073379f95785d269f4551ea24acf38f863f0152418ca02c96a3a
                                              • MD5 SHA1 SHA512 TLSH

                                              08c849f9-abba-410f-beb9-7a2b854b34fc.tmp

                                              • Path C:\Users\Admin\AppData\Local\Temp\08c849f9-abba-410f-beb9-7a2b854b34fc.tmp
                                              • Size 2.6MB
                                              • SHA256 19bc35ca347a6560c0183e56da6bee3353737e78aa9eff9111c5ebd897b0cfd5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              installer.exe

                                              • Path C:\Users\Admin\AppData\Local\Temp\7zSCB77FB78\installer.exe
                                              • Size 8.4MB
                                              • SHA256 c2ac35ff3a7e38118be30262da2ba076470c58c10aa7f9a7e5c3b7ce15c73f1b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              981f3ca2-8c64-49be-bb81-948f325db51c.tmp

                                              • Path C:\Users\Admin\AppData\Local\Temp\981f3ca2-8c64-49be-bb81-948f325db51c.tmp
                                              • Size 13KB
                                              • SHA256 ce8adf970c3290b7ea94c85727c5abe7eb232e16026a1f8f876ad7f3ec03573d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              OpInst.exe

                                              • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                              • Size 3.1MB
                                              • SHA256 1781f32d576c158c4d86330b0a5c37aa511bd9d507146c5831d1e44a2d013277
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              b7409072-fd39-49fc-ab06-2e3140a65355.tmp

                                              • Path C:\Users\Admin\AppData\Local\Temp\b7409072-fd39-49fc-ab06-2e3140a65355.tmp
                                              • Size 46KB
                                              • SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              bg.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                              • Size 224KB
                                              • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              1423.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\1423.js
                                              • Size 94KB
                                              • SHA256 b038e919696bf2322233044d6005f77718ed7ffb29fc1a947ec638dc1f49a7c2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              1622.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\1622.js
                                              • Size 46KB
                                              • SHA256 850bdd9d249ec644e5755701155540ea9be2b5d46ef54f1ffc2ebe2645b23c82
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              1904.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\1904.js
                                              • Size 8KB
                                              • SHA256 1d682e1ea26f490e1c04302a2d9bc9f8c5d522b58c5240734eb8231789fd2c82
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              2343.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\2343.js
                                              • Size 136KB
                                              • SHA256 3e02d2014f6bdbe8237217015fc77cad014128f5c0c3546a0078cb7729d0cfab
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              2667.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\2667.js
                                              • Size 99KB
                                              • SHA256 a991541e3b2532c81bcef36328826df7bbd664641541890ed780718465be6a7b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              269.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\269.js
                                              • Size 61KB
                                              • SHA256 5d0cdded151635ec551484304027c5153e932ecd85e24c4c543260dc9f95c1a2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3168.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\3168.js
                                              • Size 54KB
                                              • SHA256 e259b123c3edcbc11fad99f6d36d8a9b3d1aeb278028b867c1600c31d881868f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              326.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\326.js
                                              • Size 89KB
                                              • SHA256 f1722a2b7d7bd74ec11c5733509e95058036f03b276072816602a9fab29ea876
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3624.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\3624.js
                                              • Size 53KB
                                              • SHA256 8ac87f426ae4e69da6b520a1494d95bf893a89a4637f54640dbcc16129bfe437
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3642.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\3642.js
                                              • Size 52KB
                                              • SHA256 ac24196ca4ffe3516c707ee095e44d7ca2797b3083353052dc4f06bb578d5f11
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3937.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\3937.js
                                              • Size 76KB
                                              • SHA256 b502c60ebc5ff41399ac77c90ffb65ab3b8315e7cb7c134e1e4d1948342922b9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              395.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\395.js
                                              • Size 4KB
                                              • SHA256 42070a8098b82826fbdd19638af33b0fbe77dee6d60dd0ce1a49069c505ee75e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3995.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\3995.js
                                              • Size 50KB
                                              • SHA256 6b9741cce7bc378661e28f33d8c7d8aaea9003726c0082e2cc5df661616a2b3b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4294.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\4294.js
                                              • Size 50KB
                                              • SHA256 f1f953151fa271c149059becfac3d827fba318a8eade09f54c96970510800dd1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4398.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\4398.js
                                              • Size 52KB
                                              • SHA256 abf9792d69712e5a5217e4ce0c51988fa152311f850878c5844ff51504641e25
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4583.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\4583.js
                                              • Size 53KB
                                              • SHA256 77e492ab34d66ece3df7dad6f018db0ea6ea1708ea2f21925c0979cbc3698e90
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4669.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\4669.js
                                              • Size 50KB
                                              • SHA256 55859b022cd727ab638afd7c2acb455898e2e5ebed396a2210ce94695f1de9d9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4688.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\4688.js
                                              • Size 437KB
                                              • SHA256 f3f0a6f960645876f91f8932a1966e2ed674f97624cf2e1c1dd777e3b0f4d8dd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4730.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\4730.js
                                              • Size 85KB
                                              • SHA256 f060b545995cf927c5025294254bd6e17244bb5e54b47e5b43ee5ee7c7c514b5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4829.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\4829.js
                                              • Size 71KB
                                              • SHA256 b214516a3f93a2752bc4e3769ca8a729777aa2f0119dc8bb0f3d472fe8f29ea5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              4958.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\4958.js
                                              • Size 53KB
                                              • SHA256 369b78f5521745d7c1bbbda1377799635d94e32c96b936d3470e858e70b5dfa1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              511.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\511.js
                                              • Size 86KB
                                              • SHA256 fe28ad737f6e4a2685594350d33cd915613005a0c7cbd4ec1bc853f2a0c7db4d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              5336.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\5336.js
                                              • Size 47KB
                                              • SHA256 8a09d4494b0d1358f10370bb32dc175211a3ed34ddb3a7a942d5e16e8ac30caa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              5428.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\5428.js
                                              • Size 144KB
                                              • SHA256 b5174db76402d3cd030aaabfc594000aeceeb929cb16d69191a54451926d7b36
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              5570.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\5570.js
                                              • Size 47KB
                                              • SHA256 b36987927bc504ea6f147124c47b23956977af7c6bf14c08df10603382c3c63a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              5649.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\5649.js
                                              • Size 60KB
                                              • SHA256 911e1d9bd57f09b3b74518e0c218304eb6ada8131f475651406ed5e459f10cc8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              5907.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\5907.js
                                              • Size 47KB
                                              • SHA256 683687c2f60ed821f3e2b997a5a4d958ab65713fdc3be27140151a79d02537e7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              6046.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\6046.js
                                              • Size 46KB
                                              • SHA256 f6c89c6fb688826e9087e7478e73ddc53846df8d015709c732fec9b24842812c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              6166.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\6166.js
                                              • Size 71KB
                                              • SHA256 cbf39d4705ef8b5a75dae4cc2e199225ec7ee27caf2dbd1303d15215e39faf03
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              6214.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\6214.js
                                              • Size 24KB
                                              • SHA256 327f0321d86f3b06af9f089bd322bf6e5f62036302b017396b0053b52cf86c29
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              6260.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\6260.js
                                              • Size 51KB
                                              • SHA256 81838ff756ff1d5c39c5d2fc6497ab2dd5d737fdad39a05f24862da16faa52f1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              630.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\630.js
                                              • Size 56KB
                                              • SHA256 f06265d898bbd714df91d449a895b7061af5fcd0914795cdcc6a702ad9ec57b8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              6777.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\6777.js
                                              • Size 436KB
                                              • SHA256 2b2b91be9fc01e9687ef2744e2d9059cff7927a3b9476ce353b52396f4026a0b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              685.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\685.js
                                              • Size 52KB
                                              • SHA256 98dd71665d4aa9ab6bb01903e1e276ee234fad22ba4bb12c306f93b2e9489590
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              6980.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\6980.js
                                              • Size 50KB
                                              • SHA256 ef2a4d06de1248b6674acbff5f5fe00c54cef677c13bb90555fd9cc0fb849a02
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7090.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\7090.js
                                              • Size 53KB
                                              • SHA256 b34345d68ef9beee2eba530d51d337db63f0e62f9ed232baea4b667305371fe3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7103.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\7103.js
                                              • Size 53KB
                                              • SHA256 2c50eef9cca6158ef8341b7ca235cc3fb7d7b78ba11fdea019d9dff159dc9822
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7219.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\7219.js
                                              • Size 58KB
                                              • SHA256 0393adae92aabb58c3e1384e3c2c6c3a6b6c01e68e945c7d2de0121307b2e729
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7390.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\7390.js
                                              • Size 50KB
                                              • SHA256 7557bae0b9dd98da4cee53bffa19a5a0454c196455c425ec4de6179c7e7b8a3f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7946.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\7946.js
                                              • Size 53KB
                                              • SHA256 a76065715282e3a2ee1394f571fc7ab4a42719b9a3c2f7ef2677c05eb8ffeff6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7997.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\7997.js
                                              • Size 53KB
                                              • SHA256 c85d7f3da619c496c2e9fd36039f93e4ff56c1cf9b23877f41a13091607ba92a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              8122.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\8122.js
                                              • Size 8KB
                                              • SHA256 fd3efec531d30294fa1f31184f1e66d952c2326908bb1177aefa2dc318954edb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              8345.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\8345.js
                                              • Size 54KB
                                              • SHA256 59f84295627d886f2996a86ca44780b9a92b207327731ac73ca77769ace448f1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              8395.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\8395.js
                                              • Size 54KB
                                              • SHA256 5399f4645727f1e875f1494334b6ac8624090862fea82ff33afd991bec6fa81f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              8671.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\8671.js
                                              • Size 53KB
                                              • SHA256 7b1782c660f3230bf7315c64dbe3eb040b1236df9b868447b2ae69dc5e85ccb9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9025.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\9025.js
                                              • Size 43KB
                                              • SHA256 901f1fd2a1e2f3098b1681d5d3821b56380c0215de1fdc0859a8b5a4125646d8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9028.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\9028.js
                                              • Size 54KB
                                              • SHA256 c795a3a99f625f5eb6eea4cb212a9c14da5a892f67add801ba48ec6e174a5f45
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9135.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\9135.js
                                              • Size 23KB
                                              • SHA256 28dc4c42d9b0403be8b63b1a662ab37e534b07ebcbd65043b8beb36bc16c11ae
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9432.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\9432.js
                                              • Size 54KB
                                              • SHA256 26ff9456deeac89d6f8a637a3606f94e3f24140bcc99c232653b783929b85482
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              951.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\951.js
                                              • Size 71KB
                                              • SHA256 f22527cdf3dffca0c6f56baeaf0e2b3c22bb1c8674dbe7411059ffb4648aefdd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9600.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\9600.js
                                              • Size 53KB
                                              • SHA256 6e0e1ae8599af91f4e85275e0387bd5833cc0054824e0550387ef08b097686ad
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9736.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\9736.js
                                              • Size 51KB
                                              • SHA256 a56b183410420341a4c64324eb3acb1bca429a5680418aa0c41b69b84c4b8082
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9794.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\9794.js
                                              • Size 400KB
                                              • SHA256 54c4975d86b2a389a842dd82a1a4a7331ce722ce835b2a439f88b49a17ccd0af
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9844.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\9844.js
                                              • Size 52KB
                                              • SHA256 922faeed371d726e12f95f6fa82825aa57ce5ec8e5b5542da9e1b3291f75a1ae
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9901.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\9901.js
                                              • Size 52KB
                                              • SHA256 c7d8e558348281cde03f948f7b9b3a0a595e3229d7521b056b46602e44e92a80
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              aria.html

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\aria.html
                                              • Size 486B
                                              • SHA256 e7dcbc2e0bbe6de18980b3093dd01930dd54f32a8fceaed8561069c7e83eeacd
                                              • MD5 SHA1 SHA512 TLSH

                                              aria.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\aria.js
                                              • Size 6KB
                                              • SHA256 c577486a20a4ea862ead50d8fcde0c294fbdc1d1fac1d3993d0ecba13f7873c3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              018d39b3bdda8041.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\018d39b3bdda8041.png
                                              • Size 402KB
                                              • SHA256 4cba43e087f6ee04c32854e8231da7a487e975cc29788776cac762a9a95a5585
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              045499a2e328133d.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\045499a2e328133d.svg
                                              • Size 861B
                                              • SHA256 70b9447762b68963f066c8de71bae342d4c3734f614d9f6ff4beb74c7b9e29ea
                                              • MD5 SHA1 SHA512 TLSH

                                              0561eac25d821104.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\0561eac25d821104.svg
                                              • Size 779B
                                              • SHA256 446715e6df1a2374bfff30544a99755ad6eca4c499e7311ff51fe68638d6992b
                                              • MD5 SHA1 SHA512 TLSH

                                              059e8a27e58989ac.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\059e8a27e58989ac.svg
                                              • Size 279B
                                              • SHA256 a86f98c3f77841e716fedb8637f74b06892b1920eb868372178c1053029d9406
                                              • MD5 SHA1 SHA512 TLSH

                                              0647aa53f7a1ab03.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\0647aa53f7a1ab03.png
                                              • Size 4KB
                                              • SHA256 9651739b361d80c22490b05e1c370756327ad96a3893ea10b21043c01e1e3d89
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              07e5916f8c42413d.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\07e5916f8c42413d.svg
                                              • Size 346B
                                              • SHA256 316a84549860cd1dd865b4db4fb7403d46f56782738c30788c019b5b8d1505d4
                                              • MD5 SHA1 SHA512 TLSH

                                              0c065981a363e375.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\0c065981a363e375.svg
                                              • Size 2KB
                                              • SHA256 7ac85af03d05ac66458d94ad4442a5b64ce2ef29bc642d42d34237025855b3e2
                                              • MD5 SHA1 SHA512 TLSH

                                              0c31e8f306b5f2d6.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\0c31e8f306b5f2d6.svg
                                              • Size 686B
                                              • SHA256 ae5af18df50e69fd4fa99cdb32e4192524c6ec491e1da5a6496d5bb35bb33b9a
                                              • MD5 SHA1 SHA512 TLSH

                                              0cbcfc6fe4cb443b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\0cbcfc6fe4cb443b.svg
                                              • Size 200B
                                              • SHA256 1edbe3fa1e31ec007617a1eae760cb7fb3c68c4dc7ecac0bb635088763d51c3e
                                              • MD5 SHA1 SHA512 TLSH

                                              0d0d0fdaeacb5e45.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\0d0d0fdaeacb5e45.svg
                                              • Size 670B
                                              • SHA256 0e05484cdf319c42cbcda83f3ab2ec3cee7942079992da158afa0760fc9b6f3f
                                              • MD5 SHA1 SHA512 TLSH

                                              103eff58785ab58b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\103eff58785ab58b.svg
                                              • Size 534B
                                              • SHA256 ea28a57c2b4c803116566db0c483cc910a6ab9c725db874ff12569222b3d340a
                                              • MD5 SHA1 SHA512 TLSH

                                              1046c13174d8b145.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\1046c13174d8b145.svg
                                              • Size 653B
                                              • SHA256 4c2332c75081ae314df7f476041d1b25aa718e7d943e36a31d46333208dcbedf
                                              • MD5 SHA1 SHA512 TLSH

                                              123ab2cc0ee9e515.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\123ab2cc0ee9e515.svg
                                              • Size 22KB
                                              • SHA256 0f0b994c8670200d3c137a916de9601812b414bd75cbad42f136d9f9d0c82bda
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              12e3fff4ce882c02.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\12e3fff4ce882c02.svg
                                              • Size 706B
                                              • SHA256 ca84cea75231be8426df1ddaa5c4902440419b43e92f6d5677ab3e9a919c9596
                                              • MD5 SHA1 SHA512 TLSH

                                              14e91cb3dc3fa6da.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\14e91cb3dc3fa6da.svg
                                              • Size 467B
                                              • SHA256 4c9290c24d3db4812a64e96509a46dced9fe3bb639c25e8882e2e662845332e8
                                              • MD5 SHA1 SHA512 TLSH

                                              1670e5d31a4fbef2.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\1670e5d31a4fbef2.svg
                                              • Size 452B
                                              • SHA256 f9122391c5df2eedd175f993bd89f589384d7b7222ffe0fc642e8fa42793fcc2
                                              • MD5 SHA1 SHA512 TLSH

                                              1688c4091f2a2e26.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\1688c4091f2a2e26.svg
                                              • Size 2KB
                                              • SHA256 f60f4f3a9a21fa2a0937e510ec3b858bff041b0559fa6cdfafe801c43fc8b220
                                              • MD5 SHA1 SHA512 TLSH

                                              17cbd66168518049.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\17cbd66168518049.svg
                                              • Size 308B
                                              • SHA256 9ab7570e0639a79235fa71e3bc496d9bc05dd4a74aae7f5dcd4bff3812623663
                                              • MD5 SHA1 SHA512 TLSH

                                              181d51d89dd58b1c.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\181d51d89dd58b1c.svg
                                              • Size 619B
                                              • SHA256 7022b29d52ca3620157810b76f3fd4665f728d1ede361afb15937c5793f43ac1
                                              • MD5 SHA1 SHA512 TLSH

                                              18b4316285d3185b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\18b4316285d3185b.svg
                                              • Size 6KB
                                              • SHA256 e72e1f02c8cd530c46a4d756f41be3ec41c3c86ae290b73a27c0fdbe72a6a392
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              1c9159e6d6d5b88c.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\1c9159e6d6d5b88c.svg
                                              • Size 1KB
                                              • SHA256 4e6f66ab1e0836fd18a8ff605ec3b4d12a5bfc60062887c3850d434d33aba205
                                              • MD5 SHA1 SHA512 TLSH

                                              1c94572b8a82384e.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\1c94572b8a82384e.png
                                              • Size 6KB
                                              • SHA256 96ee3e674f0fda9b8a73c3c4242738468405aa0d7c04dc1a4d54e9e548a57a32
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              1eb51cb7434ba396.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\1eb51cb7434ba396.svg
                                              • Size 2KB
                                              • SHA256 c569f486ac99a73a4276a731ee171aaef40e27ec821e755faf50d2fe6f47785d
                                              • MD5 SHA1 SHA512 TLSH

                                              1f8c89981dfc2af2.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\1f8c89981dfc2af2.svg
                                              • Size 266B
                                              • SHA256 dd5f359286947d808937b99b2e8e61fe14d96938524cb056ca42fbd05863357a
                                              • MD5 SHA1 SHA512 TLSH

                                              2108d437d813d94a.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\2108d437d813d94a.svg
                                              • Size 322B
                                              • SHA256 6cafb6ce0b52ceaef8798eee7c818cfbee01cf91b1790106038d8500835fe345
                                              • MD5 SHA1 SHA512 TLSH

                                              211b3eed2dc9a97b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\211b3eed2dc9a97b.svg
                                              • Size 196B
                                              • SHA256 bcd78b2da7cecb286b2cbfc6b86cae98d958ad7227f385fe58340a19984114c0
                                              • MD5 SHA1 SHA512 TLSH

                                              22d2121364e44949.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\22d2121364e44949.png
                                              • Size 1KB
                                              • SHA256 a5fce2fb360c19b93d2df2d1cd3adba1dc88c655bc51cbf6639fa0df61e67af6
                                              • MD5 SHA1 SHA512 TLSH

                                              243e789a53847976.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\243e789a53847976.svg
                                              • Size 585B
                                              • SHA256 fce585879f0a3fc6103d7abbb4fe492f9051f47d6bf82fddaea6083748955e3c
                                              • MD5 SHA1 SHA512 TLSH

                                              253f1599e4c715f7.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\253f1599e4c715f7.png
                                              • Size 10KB
                                              • SHA256 944f79c9d166538e47eee1709dc35adceea233beed204491759f35f83b7c0fe4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              2dfdd8918d195c58.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\2dfdd8918d195c58.svg
                                              • Size 6KB
                                              • SHA256 16dc2921e1f5d89c99aac9914dc98eba54ffa2f4fcf7a942fc2356391c7a46b6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              2edf079df2181fc4.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\2edf079df2181fc4.svg
                                              • Size 1KB
                                              • SHA256 10fd7fdec3af7b54ed8ac68ca5f6b2426e00e86a34c12213810f9c3270dccc77
                                              • MD5 SHA1 SHA512 TLSH

                                              2f4d0c616cea0666.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\2f4d0c616cea0666.svg
                                              • Size 589B
                                              • SHA256 32499717ae28339dbbba06154107872c5769810f691d68db46d9409be5365127
                                              • MD5 SHA1 SHA512 TLSH

                                              31ba446b2ad075f0.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\31ba446b2ad075f0.svg
                                              • Size 635B
                                              • SHA256 ad2ef1213f1a7f67e875a5edb473da0879522ba9946fb2ebf53f226fc795da79
                                              • MD5 SHA1 SHA512 TLSH

                                              33bd9ebd264104a0.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\33bd9ebd264104a0.svg
                                              • Size 2KB
                                              • SHA256 978a0ac5cf228e0fcfbdb7f7058bb26f7c7c3183f58fe3b0e1dbf1ac13516e89
                                              • MD5 SHA1 SHA512 TLSH

                                              3607fe7f996c064b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\3607fe7f996c064b.svg
                                              • Size 4KB
                                              • SHA256 37ef05845a8c85f25659be2e12a0143d98e5bc605a954ad3baf1b84744bc51f3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              36bf914fc5de6f1a.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\36bf914fc5de6f1a.svg
                                              • Size 3KB
                                              • SHA256 231ceb827eaeda96d3f47c045ac59e23d40710cdfbde54945cd89ccff412aa12
                                              • MD5 SHA1 SHA512 TLSH

                                              37192a2a129f5ff9.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\37192a2a129f5ff9.svg
                                              • Size 224B
                                              • SHA256 aba7f75c37591227dfec88b8b83fe1e7700271192d2d38350d047a96a609fd8d
                                              • MD5 SHA1 SHA512 TLSH

                                              3a2ea7738b340340.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\3a2ea7738b340340.png
                                              • Size 6KB
                                              • SHA256 fbdb9fe48083d513b0b946b35a95a157c2434e817f0a11cb2d2963ff144b50c9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3b9545916efb17d9.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\3b9545916efb17d9.png
                                              • Size 3KB
                                              • SHA256 8ba7bd78ad289a668c7d017266888b7fbf978525cfdfccbdba5f90084fee6dda
                                              • MD5 SHA1 SHA512 TLSH

                                              3c91fce8ee8453fd.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\3c91fce8ee8453fd.svg
                                              • Size 3KB
                                              • SHA256 2725c1bf08181aab08cc46e8ed47467dddeafe891e310bf67fbfa148d91e1cdd
                                              • MD5 SHA1 SHA512 TLSH

                                              3c9e7cbca1e6a295.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\3c9e7cbca1e6a295.png
                                              • Size 4KB
                                              • SHA256 fb0b1e92b7017f202702168117ee6e278708a06815294a796acc6cb4f8600558
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3cc0c6f21a6016be.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\3cc0c6f21a6016be.png
                                              • Size 47KB
                                              • SHA256 c4e06de6de100feb53ef5f43d038bb779b84d3ace33f38ca4d62e64463f34f3c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3d5e7395e9ffbdbd.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\3d5e7395e9ffbdbd.svg
                                              • Size 537B
                                              • SHA256 c314723545b36fdfd4c9c340095ed4a3c06367e630321b3bad8d61068cfe827e
                                              • MD5 SHA1 SHA512 TLSH

                                              3dad3b5da9993b6c.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\3dad3b5da9993b6c.svg
                                              • Size 767B
                                              • SHA256 b4281b6b31da12dfce039b3c29ead495e4c3d4588b7f49e2d352070b2b80c893
                                              • MD5 SHA1 SHA512 TLSH

                                              40da13d190d51b3d.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\40da13d190d51b3d.svg
                                              • Size 565B
                                              • SHA256 5c62d6a5be206a51368b1a8f92dc7d12614f89306d21c73512bb42f596f5fe31
                                              • MD5 SHA1 SHA512 TLSH

                                              436b779e283e4cec.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\436b779e283e4cec.svg
                                              • Size 304B
                                              • SHA256 5ff297046ceba4068df96fedcd122d47010943085c278c3b1d66559a1dce096e
                                              • MD5 SHA1 SHA512 TLSH

                                              467465eb8fa50b5b.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\467465eb8fa50b5b.png
                                              • Size 4KB
                                              • SHA256 5c427c31f74ac7b88a574c9822c95a75a330fa768ddb8f02b94ad5e3defcf644
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              48d7ceaf46faf1a6.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\48d7ceaf46faf1a6.png
                                              • Size 16KB
                                              • SHA256 1b530b8562aaba7d4c9bca32501696bd0473c1bd2b1281941779f48a9d75ff06
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              49c99c607978a8f1.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\49c99c607978a8f1.svg
                                              • Size 343B
                                              • SHA256 57f9b1c710d6d4e2e333df1ba9f4e285192fff0e7e7facc2e2950deba2da5f24
                                              • MD5 SHA1 SHA512 TLSH

                                              49f7d977039c303e.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\49f7d977039c303e.svg
                                              • Size 1KB
                                              • SHA256 b14c989ba44526446d5259189ad12e7bdd1261a8f7a6c95490ab30b69684de82
                                              • MD5 SHA1 SHA512 TLSH

                                              4a39a099362c32de.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\4a39a099362c32de.svg
                                              • Size 477B
                                              • SHA256 f49cbed3efadd4afb2ce84feb2844c7bca8ebb1388b29b160b2754d7e53d4bc9
                                              • MD5 SHA1 SHA512 TLSH

                                              4a903e15f57d70f2.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\4a903e15f57d70f2.svg
                                              • Size 608B
                                              • SHA256 582e51dbb3ad1f89b5cf9d9e6c0f760fca3c1e5a8684934ded51f819175b178a
                                              • MD5 SHA1 SHA512 TLSH

                                              4cad3768b65a46fe.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\4cad3768b65a46fe.svg
                                              • Size 8KB
                                              • SHA256 83dadcbf80cb980a6a142a7f916305136ff8d44fa2b30444b04dc85bd862b076
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              51f491f244f5f86b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\51f491f244f5f86b.svg
                                              • Size 13KB
                                              • SHA256 50d5932c16de127f00ac4d4e944510798787a7f3cea6f495f0d5f24d9bcbaad7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              52630788a25809fa.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\52630788a25809fa.svg
                                              • Size 503B
                                              • SHA256 2c4eff17d2184891f880027b9bb5eb9158bc69b69c7724085847cf6905fed97a
                                              • MD5 SHA1 SHA512 TLSH

                                              535cb5713fe4ca16.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\535cb5713fe4ca16.svg
                                              • Size 365B
                                              • SHA256 2600be0ed823e560f4c93df470afec7ac95a1efa8898651e0190730695a67dcb
                                              • MD5 SHA1 SHA512 TLSH

                                              53d73708b13075be.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\53d73708b13075be.svg
                                              • Size 1KB
                                              • SHA256 3f95bf152dd430c7dca4f6d3e1c58376731eb3998c49caa567aab2741bf4e4e9
                                              • MD5 SHA1 SHA512 TLSH

                                              578e94e35aa16d97.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\578e94e35aa16d97.svg
                                              • Size 2KB
                                              • SHA256 90ac01ccda1d73a4076858bfdc567bc22a9100c55b83f6f1c411e917cdea0b66
                                              • MD5 SHA1 SHA512 TLSH

                                              581fa70608c7fb8c.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\581fa70608c7fb8c.svg
                                              • Size 2KB
                                              • SHA256 1e9f16d4e00e445a3ffd0c5e83301bea528c169e0dbe4fb2f0a2116f7ec3aba8
                                              • MD5 SHA1 SHA512 TLSH

                                              5bddb929efb23217.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\5bddb929efb23217.svg
                                              • Size 813B
                                              • SHA256 1d1c2f5a54824e3a71f6d31709d4d7cad656c328224a7936b5b67cb6957d1a4c
                                              • MD5 SHA1 SHA512 TLSH

                                              5d5360751452a836.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\5d5360751452a836.svg
                                              • Size 6KB
                                              • SHA256 1305f3b977b3dfd8018798fc496b76909014ff48183bb94710c6417741ed3b42
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              5d690726b5ef06db.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\5d690726b5ef06db.ttf
                                              • Size 97KB
                                              • SHA256 95837e182baeeada83368f7748db28357f0a1b75c6b84ff7065b5edf933c8e18
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              625b924eeceb153e.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\625b924eeceb153e.svg
                                              • Size 3KB
                                              • SHA256 f41e2968b2610bafbd81dff830cdc9f6362ffd14838ec74ce20b52d154af6d77
                                              • MD5 SHA1 SHA512 TLSH

                                              62b733d362f51663.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\62b733d362f51663.svg
                                              • Size 505B
                                              • SHA256 3033a3f8ba457ed2ad317685ed075f38e5ca78a861350f4729c9cb64611d8a48
                                              • MD5 SHA1 SHA512 TLSH

                                              62dc31e3f318054a.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\62dc31e3f318054a.png
                                              • Size 4KB
                                              • SHA256 6342e5e66aaff11a87b88bd2dedd38a1c23405778adb77710f494c83228a7a02
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              6327ab0f8e3c16d7.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\6327ab0f8e3c16d7.svg
                                              • Size 37KB
                                              • SHA256 9b4c1dbe8257876b21d1ec0a6e50b0ad408f1e1bb70cca9c09b7d0ad07ad4ef4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              634f72a779327aba.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\634f72a779327aba.svg
                                              • Size 249B
                                              • SHA256 9a3fbf6fb2d458eae45fbff9e36faede8305a76b1f09aef0123aae918b1504d1
                                              • MD5 SHA1 SHA512 TLSH

                                              692666c0b9f55408.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\692666c0b9f55408.svg
                                              • Size 2KB
                                              • SHA256 f24ecd9281c6b917fa5ac620fdbda865cd9989211b64d5e54f24ed3b4f389fda
                                              • MD5 SHA1 SHA512 TLSH

                                              6b1f3d57b04e487d.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\6b1f3d57b04e487d.svg
                                              • Size 3KB
                                              • SHA256 8502e540946b516dd25701f9a9ab2be74f14ab0248b8a381b02499c9e91afb8d
                                              • MD5 SHA1 SHA512 TLSH

                                              6e3ebbcd0a39edc2.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\6e3ebbcd0a39edc2.png
                                              • Size 4KB
                                              • SHA256 dd42d346b5cf1d7174cd49882c035bd4822e4b813e53927e857bab438d66246e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              6e6472b3e10aeb93.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\6e6472b3e10aeb93.svg
                                              • Size 224B
                                              • SHA256 d0c0e652606ab8b51dad6a57141330141fd11a410ee9baa0f0c6033a11502918
                                              • MD5 SHA1 SHA512 TLSH

                                              6ef20e0ce2751205.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\6ef20e0ce2751205.svg
                                              • Size 202B
                                              • SHA256 1ad10d17d3d99d5cdd66aec44133e284f47d9474d76eff04693896e77e673903
                                              • MD5 SHA1 SHA512 TLSH

                                              6f76682df45e26ec.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\6f76682df45e26ec.png
                                              • Size 40KB
                                              • SHA256 9a39a3af854b47b0aa23e3fed83e09f6fd2eeac29d5e5aad160d76e094ddb812
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              700fa70309836a11.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\700fa70309836a11.svg
                                              • Size 804B
                                              • SHA256 91b1c6e46527889d2bdf4c542103f7a9b7f517eba1e5eb6bb18817c51febae74
                                              • MD5 SHA1 SHA512 TLSH

                                              7179a1df5787b209.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\7179a1df5787b209.ttf
                                              • Size 95KB
                                              • SHA256 405e73d41afb7e5906efce206a326af5c956f38e255f35421c260e861e599c59
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              717cc4781a98e1ef.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\717cc4781a98e1ef.svg
                                              • Size 517B
                                              • SHA256 d3a68e1933cef3dde3741fe0a35d3521d731ab4f51781b94d636497b67eb89d9
                                              • MD5 SHA1 SHA512 TLSH

                                              72c1fd3caec7d678.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\72c1fd3caec7d678.png
                                              • Size 4KB
                                              • SHA256 811214139ddf84ffa87833724528d3e109f2fd66fedf8004064ec4b8477c85e5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              72db340eafb58783.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\72db340eafb58783.svg
                                              • Size 515B
                                              • SHA256 d4735286d501aa072cbcc71ef7805d06398da367bbb3d9a884827d7eedf2ac40
                                              • MD5 SHA1 SHA512 TLSH

                                              74ab371d1003b3d3.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\74ab371d1003b3d3.svg
                                              • Size 609B
                                              • SHA256 e0b9e22259671c1d486c4bc77575f3d08c23d2476b5d75525239329498fefd3d
                                              • MD5 SHA1 SHA512 TLSH

                                              74ef97b398a3165f.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\74ef97b398a3165f.svg
                                              • Size 1KB
                                              • SHA256 81d1f973976ed12e6d25c4ea758e88b024083871bc19f774b6fb1df72e153f54
                                              • MD5 SHA1 SHA512 TLSH

                                              77a9dc64dd93830f.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\77a9dc64dd93830f.svg
                                              • Size 568B
                                              • SHA256 1ca557b79f24e093d91478753655bdf9377c0eaa7665e882384c0a168c9a17a3
                                              • MD5 SHA1 SHA512 TLSH

                                              77d97894772b8d2f.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\77d97894772b8d2f.svg
                                              • Size 5KB
                                              • SHA256 2679bf41033c426cdc8260adb99b351b234e8b8de764ad126659dcaee6020278
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              791eead8725e14fa.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\791eead8725e14fa.png
                                              • Size 6KB
                                              • SHA256 6bc5f3f9ca3b409c6124aecc4c3a666c9472f6c769994175870b6b794458b736
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7bc841d9002787a9.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\7bc841d9002787a9.svg
                                              • Size 573B
                                              • SHA256 d7c91b330a747d8617bc87c8b6217325ffeed7f50fca124d6fe47429cec9aa4b
                                              • MD5 SHA1 SHA512 TLSH

                                              7e16ca1274952ee7.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\7e16ca1274952ee7.svg
                                              • Size 8KB
                                              • SHA256 6531422220b89b50dc51f0c04ca3dc8bb3402c7d89bf63d89119e2b277acf0ed
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7e28f70725b144c5.webp

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\7e28f70725b144c5.webp
                                              • Size 17KB
                                              • SHA256 f011b0ad31fec9033752f9c406f352a6835b6f2821ef591404ca4a72fa4fbead
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              7fe0482b83201fc0.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\7fe0482b83201fc0.svg
                                              • Size 750B
                                              • SHA256 055bcaae2a14a4d012ea7ec758e2a5171412f7346da52c82e750c76c75f64d77
                                              • MD5 SHA1 SHA512 TLSH

                                              809a1e218234bed0.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\809a1e218234bed0.svg
                                              • Size 1KB
                                              • SHA256 ddf381ed309da6ec689983cac97396bc46ca8bf6895e4caa1ae8297fc3b18a27
                                              • MD5 SHA1 SHA512 TLSH

                                              823861837143cdc9.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\823861837143cdc9.png
                                              • Size 3KB
                                              • SHA256 fd11e4f3442db2eeadaffb5b404dc7fb043e60ff57760edcec2098a01cfe9b48
                                              • MD5 SHA1 SHA512 TLSH

                                              833aa64d0b4e0fae.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\833aa64d0b4e0fae.svg
                                              • Size 25KB
                                              • SHA256 7657944e8398514c563319c54cdbae80c74c07fe258d6d8bc05009ddbcb1ee0f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              83a9049d6e0cae5a.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\83a9049d6e0cae5a.svg
                                              • Size 251B
                                              • SHA256 00ed74d7462e2fd6246acd171f2df6dfc3a434f05136781e9f5cf8fe3a3251ed
                                              • MD5 SHA1 SHA512 TLSH

                                              85004375da840fda.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\85004375da840fda.svg
                                              • Size 694B
                                              • SHA256 b385cd1d778679fc5312217a0ecb1aa70c81b97981f898871c3a0b1d2e950373
                                              • MD5 SHA1 SHA512 TLSH

                                              86235b4464b5fafd.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\86235b4464b5fafd.svg
                                              • Size 2KB
                                              • SHA256 79058973147da9ae959eada5388b205cca8adc13787482267157004018c4e313
                                              • MD5 SHA1 SHA512 TLSH

                                              869ca107851f570d.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\869ca107851f570d.png
                                              • Size 30KB
                                              • SHA256 a8b29679f9ae04c818d8abad257b3de8fcf07924ef5cb14b998eb52fd1f2130f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              86f46fb860e9ed7a.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\86f46fb860e9ed7a.png
                                              • Size 3KB
                                              • SHA256 adef3224e62a8db8a5f0d7b6dd80df3b3ffc4abc03ed51a119fb1fed318c8644
                                              • MD5 SHA1 SHA512 TLSH

                                              878f446ee6de2255.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\878f446ee6de2255.png
                                              • Size 7KB
                                              • SHA256 5515a8451464f22c220ac7beb66bd2cdfb8b60a63ee2921d90e36aca9332bc80
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              87dc241b2c0177c7.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\87dc241b2c0177c7.svg
                                              • Size 42KB
                                              • SHA256 195b7cca25841a9745ece97fb1a20f17379e02f1bbee8df68259aa2578157499
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              881503b944af06d9.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\881503b944af06d9.svg
                                              • Size 1KB
                                              • SHA256 8b8b7b1d850ff7319857ccc9a683229617506f6fb60d9ec478ebdb488d457ae6
                                              • MD5 SHA1 SHA512 TLSH

                                              885856d657cdfb17.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\885856d657cdfb17.svg
                                              • Size 272B
                                              • SHA256 7a0a881ca68c4ede97a7988ea9099ec1663718e1fb2cad856793a776bd94540b
                                              • MD5 SHA1 SHA512 TLSH

                                              896669c7450ccc86.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\896669c7450ccc86.png
                                              • Size 6KB
                                              • SHA256 70327650ac97f7f1eb527848ae31b363f1c49b298b9c2f48abb1c5a0ae3a3015
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              8987293ae7ba4469.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\8987293ae7ba4469.svg
                                              • Size 388B
                                              • SHA256 260c7166ff9dd09523c168413274b0f01f14e09cdc85cd75437fbfd0553d6bc3
                                              • MD5 SHA1 SHA512 TLSH

                                              8a62bca7498ca4cb.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\8a62bca7498ca4cb.svg
                                              • Size 343B
                                              • SHA256 8db5ec0d6a3202d7837433fb51a37f146fe9e17d46d881b9c6166cc223e937aa
                                              • MD5 SHA1 SHA512 TLSH

                                              8bf0bcc9a3301fbb.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\8bf0bcc9a3301fbb.svg
                                              • Size 798B
                                              • SHA256 ca36df9cd20e38a361265a3338d41898397f43ae61bc5953356b2dcb72d7bfe2
                                              • MD5 SHA1 SHA512 TLSH

                                              8bf79756f58263e4.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\8bf79756f58263e4.svg
                                              • Size 3KB
                                              • SHA256 50bd8be39e536e80d0e9cf731857749fa0689dd18fec8a8d6d7b767f6d82c816
                                              • MD5 SHA1 SHA512 TLSH

                                              8e2cf4504754d310.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\8e2cf4504754d310.svg
                                              • Size 272B
                                              • SHA256 178e3bd6928ffbc19687e48fac480e711f147ff2ef9b0e9b39f17fa9e52c97af
                                              • MD5 SHA1 SHA512 TLSH

                                              91ede6982d00ebc1.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\91ede6982d00ebc1.png
                                              • Size 4KB
                                              • SHA256 fddceb3e8f58e36954ec380e301e2653df8315941158262adb295c85ea8c58d4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              931d0abe7a9ac97b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\931d0abe7a9ac97b.svg
                                              • Size 485B
                                              • SHA256 e4f65bc15816d84478fc8e67aaf2ea627fe4a5a6745f671d39e02737706e1730
                                              • MD5 SHA1 SHA512 TLSH

                                              96cc5bea8cfdcdd1.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\96cc5bea8cfdcdd1.svg
                                              • Size 1KB
                                              • SHA256 36488700d3357641fdce4ef5ddd0b0e8a70ea92d997e7899c97ec977022f333b
                                              • MD5 SHA1 SHA512 TLSH

                                              96fa9a8683ad0a32.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\96fa9a8683ad0a32.svg
                                              • Size 534B
                                              • SHA256 ef4b7e503a3ebbbe173c71e57a7873602194dd5c1687a424b98f6b36516174aa
                                              • MD5 SHA1 SHA512 TLSH

                                              97e3abd934c12f4e.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\97e3abd934c12f4e.svg
                                              • Size 2KB
                                              • SHA256 d881de46dd3e77af8549f8ff60e826d0e8a41d2f598aba698ec595e58b974837
                                              • MD5 SHA1 SHA512 TLSH

                                              982d29750cf2efe8.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\982d29750cf2efe8.svg
                                              • Size 1KB
                                              • SHA256 276e3c7721aaa1a451ac87c0c75aaba7636725710742d78993c64e946c77084b
                                              • MD5 SHA1 SHA512 TLSH

                                              9a23d988229f3c4f.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\9a23d988229f3c4f.svg
                                              • Size 501B
                                              • SHA256 ea91ccb62f0ffc02e271e6a5318aa82b69ef61177b8f56b965966c90d012cbbd
                                              • MD5 SHA1 SHA512 TLSH

                                              9b5ed63ba06f1f6e.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\9b5ed63ba06f1f6e.png
                                              • Size 56KB
                                              • SHA256 9e2e79522c519aaf36d004285ead45ac7b8e5fe7c06ad0e51ade5e00f2e8a3a6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9b8afed344c17eb7.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\9b8afed344c17eb7.svg
                                              • Size 196B
                                              • SHA256 24cf5aed7c4d57067744a9785c0dad71155d1090b8de8ce44b9c1506d87280df
                                              • MD5 SHA1 SHA512 TLSH

                                              9fc4cb3c560c02fe.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\9fc4cb3c560c02fe.svg
                                              • Size 190B
                                              • SHA256 3d851f03777a7ef958c15b38eba255ad44e654275a9e594a328840cccee99f5f
                                              • MD5 SHA1 SHA512 TLSH

                                              9fd27840422642a9.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\9fd27840422642a9.svg
                                              • Size 365B
                                              • SHA256 7c1dd95fae58b545a40ff1ee264a97dc41428554d4259ff901d7a7ee4008c515
                                              • MD5 SHA1 SHA512 TLSH

                                              9fe4e4ead173d4dd.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\9fe4e4ead173d4dd.svg
                                              • Size 643B
                                              • SHA256 032a838269d065fc262c6156b2c132fc0d234d473021112d96ce78ac97aa8924
                                              • MD5 SHA1 SHA512 TLSH

                                              a0ee19f03b9940aa.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\a0ee19f03b9940aa.svg
                                              • Size 227B
                                              • SHA256 39938a98231b768d985fbe5abdea560bb2b5f31d7011e84be730d92d796d9542
                                              • MD5 SHA1 SHA512 TLSH

                                              a1a3ecb5c68b205c.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\a1a3ecb5c68b205c.svg
                                              • Size 166B
                                              • SHA256 1c90e13a94cb36e3061af78bba58216843b9511c9712d1b4b4b4517a24eec840
                                              • MD5 SHA1 SHA512 TLSH

                                              a49ea8daf7467bb0.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\a49ea8daf7467bb0.svg
                                              • Size 599B
                                              • SHA256 a9a5d95e4cc0a0e0ec5cdc8f986308cdda7d1d80992412f8881cfff65143e4d9
                                              • MD5 SHA1 SHA512 TLSH

                                              a58a2e93a4b54988.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\a58a2e93a4b54988.svg
                                              • Size 304B
                                              • SHA256 11f8d51df24951971552bcf6317d592b2920f73dcba177caa272b70b0627e5de
                                              • MD5 SHA1 SHA512 TLSH

                                              a658c46672ad28f5.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\a658c46672ad28f5.svg
                                              • Size 198B
                                              • SHA256 c7fd1566d975fd06461e0b3dc308e0d06a76f1f08f497670d7c6908a6b58d820
                                              • MD5 SHA1 SHA512 TLSH

                                              a7a18b10642bfd5f.webp

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\a7a18b10642bfd5f.webp
                                              • Size 7KB
                                              • SHA256 a3cbb2fe889c660e3c2031f36e41dc48fa201b9345ecb62dc78317fe4e1131fe
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              a7dbf1405144b262.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\a7dbf1405144b262.svg
                                              • Size 1KB
                                              • SHA256 cc91055c156950e590c3484782daf4fd82da79a36c568739c7af88f7cc4793aa
                                              • MD5 SHA1 SHA512 TLSH

                                              ac28779d03531772.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\ac28779d03531772.svg
                                              • Size 452B
                                              • SHA256 22bd354a581ff101fd23929bd9b9d4f95e4e78ee7b61b02934c76d036bd8d215
                                              • MD5 SHA1 SHA512 TLSH

                                              ad827c7ddb8dd0cb.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\ad827c7ddb8dd0cb.svg
                                              • Size 324B
                                              • SHA256 689f991b5bfc36e706928b329f1c36cc51464bcb367b555f388cabac16ac7c91
                                              • MD5 SHA1 SHA512 TLSH

                                              ae846f7eddd04278.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\ae846f7eddd04278.svg
                                              • Size 1KB
                                              • SHA256 b29819aa59d21fdc24b45cf3546cce9c3b5a4151d970b1efe94f6d49ea9299b8
                                              • MD5 SHA1 SHA512 TLSH

                                              aeba9f15ecf7f43b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\aeba9f15ecf7f43b.svg
                                              • Size 224B
                                              • SHA256 2e1900037f584a61efd75d74176733ec9722d9409bafbf8db37df79508ea11d6
                                              • MD5 SHA1 SHA512 TLSH

                                              af5f97cd7e418012.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\af5f97cd7e418012.svg
                                              • Size 973B
                                              • SHA256 05f47fb3ffb7323bdbf6b397330229a7f32a3a1f2d17365e748f8777a82dd6c0
                                              • MD5 SHA1 SHA512 TLSH

                                              b294d3d2f70d508c.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\b294d3d2f70d508c.svg
                                              • Size 515B
                                              • SHA256 e593d97979df385b1c6e2270af9a87bee796d70e7c84099ea449839bcba81008
                                              • MD5 SHA1 SHA512 TLSH

                                              b37bf551ac569d00.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\b37bf551ac569d00.svg
                                              • Size 939B
                                              • SHA256 55369f30e6b56ea039d0e71e55aa81d85264efb57b231163c72060670fad713a
                                              • MD5 SHA1 SHA512 TLSH

                                              b4e5db2f8e466503.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\b4e5db2f8e466503.svg
                                              • Size 534B
                                              • SHA256 1278a6c6c37a0745eb9d3f919dc5aa19078b021a7360046cbfb7d3195f82bae0
                                              • MD5 SHA1 SHA512 TLSH

                                              b631c209ab478391.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\b631c209ab478391.svg
                                              • Size 913B
                                              • SHA256 90e0f9b6b878cc11b47456104b02bffab635964bf58260f693356af8f680be7e
                                              • MD5 SHA1 SHA512 TLSH

                                              b80fc20fe385bc09.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\b80fc20fe385bc09.svg
                                              • Size 870B
                                              • SHA256 b8c1bd8dc96665c3656cc96cc02f5b91954d4b19d8016a0fd17badab678c4fbd
                                              • MD5 SHA1 SHA512 TLSH

                                              b87ddd7d399ff7d2.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\b87ddd7d399ff7d2.svg
                                              • Size 795B
                                              • SHA256 ef2c417a4822198f775e6a043e815068d50597dab195a20c361f892ef453db87
                                              • MD5 SHA1 SHA512 TLSH

                                              b8ddd3b0a5acfb1f.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\b8ddd3b0a5acfb1f.svg
                                              • Size 916B
                                              • SHA256 9fa8322e2025b75254a164876192790e0b99b33e1b8907c7f10852100909a642
                                              • MD5 SHA1 SHA512 TLSH

                                              b970e42cf2658a8e.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\b970e42cf2658a8e.png
                                              • Size 40KB
                                              • SHA256 537116744d70532b6eb89d605ca4a503300a34d1d88471636542715d86f509d0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              b9e2526d946fd3cd.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\b9e2526d946fd3cd.svg
                                              • Size 2KB
                                              • SHA256 048bee5d83dae709f1ec6053ed1f37d2baeb3fbd81e471ae4c7416a492ccb166
                                              • MD5 SHA1 SHA512 TLSH

                                              ba9bf1c3957e59f0.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\ba9bf1c3957e59f0.png
                                              • Size 10KB
                                              • SHA256 d88cfe3f564100986936c848d6b7b3830942901c908b7a5a5c39150547af8753
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              bc4e54d6f0276d36.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\bc4e54d6f0276d36.svg
                                              • Size 8KB
                                              • SHA256 2a886f41916a813d93a2a17f230c10f6a714b92c85d2109eb0c5fd5c43c8364b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              bccd629ae7cb011d.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\bccd629ae7cb011d.svg
                                              • Size 217B
                                              • SHA256 f6dedb2e1102582c17b6a4424b86fe6181ae22f7c4a09015f1a1d2360830a831
                                              • MD5 SHA1 SHA512 TLSH

                                              be50ce6d9253a5a9.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\be50ce6d9253a5a9.png
                                              • Size 30KB
                                              • SHA256 41aa6176ec702cc098347a51403f0299c0209c8722999af957a04d6115517903
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              befe724adae4279e.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\befe724adae4279e.svg
                                              • Size 297B
                                              • SHA256 8cad02aaee30ae0131cf45f0c2127e4ffbd9e99a5a5877c5a23c3372c35ac6e1
                                              • MD5 SHA1 SHA512 TLSH

                                              c01afd7dfd61f804.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\c01afd7dfd61f804.svg
                                              • Size 198B
                                              • SHA256 ec4d631df4fa2114ffd8d9be28067aa58c8314e7efa6e9d4a6458b10e7e243cf
                                              • MD5 SHA1 SHA512 TLSH

                                              c2975b0d0a40a4fd.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\c2975b0d0a40a4fd.png
                                              • Size 2KB
                                              • SHA256 f6a35bdbdd9251aea9aaa2ef7e15ba466c39169b940424110bc0676de2d9ba7e
                                              • MD5 SHA1 SHA512 TLSH

                                              c3c4018a4fd62a9a.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\c3c4018a4fd62a9a.svg
                                              • Size 520B
                                              • SHA256 78c13a1cabf0d0caab6c5dedcf2c0de5737a3fbeb14391d2e32366c19da3195d
                                              • MD5 SHA1 SHA512 TLSH

                                              c57ac42a27678f77.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\c57ac42a27678f77.png
                                              • Size 1KB
                                              • SHA256 3a5d63fc899063db5eb8a48e421f52dead3e10031e1c8093425449df8ca32bbb
                                              • MD5 SHA1 SHA512 TLSH

                                              c5e2e5518ff4a597.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\c5e2e5518ff4a597.svg
                                              • Size 884B
                                              • SHA256 f144a22baba0ebd9eb2e0b8f9ec4203bb48f8d35a2e533994c427f9e90a463ad
                                              • MD5 SHA1 SHA512 TLSH

                                              c5ed42bd4f1a6974.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\c5ed42bd4f1a6974.svg
                                              • Size 394B
                                              • SHA256 d93b470b2fe89d945653c2bb3ae0a6c3b80164bdfd4774664e6260d599b790c9
                                              • MD5 SHA1 SHA512 TLSH

                                              c6b3624b8cf9684a.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\c6b3624b8cf9684a.png
                                              • Size 3KB
                                              • SHA256 f9658376f26164948ab72dca9692ac812d3420d8b7ec0dadd1fb09aff809653d
                                              • MD5 SHA1 SHA512 TLSH

                                              c7c6749d23d7b7f6.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\c7c6749d23d7b7f6.svg
                                              • Size 221B
                                              • SHA256 201cb9465adedd0fd56784d027ece0b539ba644ec0ed515de4b5a3c54cb5d112
                                              • MD5 SHA1 SHA512 TLSH

                                              ccdd22e861d21d30.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\ccdd22e861d21d30.svg
                                              • Size 936B
                                              • SHA256 a9026d4e66a703b1576160f9ac407d382c3301575c7f699bd6e78d46a4063253
                                              • MD5 SHA1 SHA512 TLSH

                                              cf9e121c611b5d0e.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\cf9e121c611b5d0e.svg
                                              • Size 2KB
                                              • SHA256 8eba6969e00d42f30a2b31881b43d6219f73288c381adf9d09659189d63bcfe3
                                              • MD5 SHA1 SHA512 TLSH

                                              d05dd34996b64d16.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d05dd34996b64d16.svg
                                              • Size 16KB
                                              • SHA256 7d4c4169954fe742a59cd5c390f8fb362a82c7c4bc42942f8c8ef0eb29eda5b4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              d065dd41270e47f7.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d065dd41270e47f7.png
                                              • Size 4KB
                                              • SHA256 356c07a3cf412098080594e9faf780f09581eb2ffd6bf2254405af8074651614
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              d28440c6dc230bf9.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d28440c6dc230bf9.svg
                                              • Size 290B
                                              • SHA256 ec9362b2f09d1fd635057a48910bde5d75971169c9c4e3abdc8f7c21c16828bc
                                              • MD5 SHA1 SHA512 TLSH

                                              d2cf554ccc93ffff.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d2cf554ccc93ffff.svg
                                              • Size 263B
                                              • SHA256 95c04a4a17f3b696b617a0b3bc222d85410f10349bc7ee616cb6b937c9006718
                                              • MD5 SHA1 SHA512 TLSH

                                              d2e19878110efee6.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d2e19878110efee6.png
                                              • Size 3KB
                                              • SHA256 6c0b3e2a8ba624f2a859c4fd9939b89dfa37699cb6d92f1393881ecc74760c1b
                                              • MD5 SHA1 SHA512 TLSH

                                              d46d147daa1d2f79.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d46d147daa1d2f79.svg
                                              • Size 945B
                                              • SHA256 6d10f336af16d43cef3b98c2506fadcbb2e4a96131433aaf1c0f782e93826324
                                              • MD5 SHA1 SHA512 TLSH

                                              d59a1307c364439b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d59a1307c364439b.svg
                                              • Size 674B
                                              • SHA256 572e8b100f61e6802e561dc255c0cf5c7e7882cb2fad418e851838410ed68fc4
                                              • MD5 SHA1 SHA512 TLSH

                                              d78ba875312ee059.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d78ba875312ee059.png
                                              • Size 17KB
                                              • SHA256 cd09040e73647aa8edfb60dbd4c50b2bd462aa2fd0b0e8df205190a070051de6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              d7dc8f3dc0f234e6.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d7dc8f3dc0f234e6.svg
                                              • Size 1KB
                                              • SHA256 4147c78e34a2c7eba0d21dc26a45bc74d7459e73da4d18ee0d707acec09fff06
                                              • MD5 SHA1 SHA512 TLSH

                                              d841f4bcced2e8bc.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d841f4bcced2e8bc.svg
                                              • Size 614B
                                              • SHA256 bf1516f759e2e0a845425060a511e7fbf01b434e6ea7b52aeb0a2559ce34b0a8
                                              • MD5 SHA1 SHA512 TLSH

                                              d897a6873296312d.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d897a6873296312d.svg
                                              • Size 234B
                                              • SHA256 74def5cf4975a6c055fe5550dedaa0fe6c54e465d12b27f7dbc8aa2a7bb32aac
                                              • MD5 SHA1 SHA512 TLSH

                                              d9b97322b3dc4aee.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\d9b97322b3dc4aee.png
                                              • Size 6KB
                                              • SHA256 779291157f20990ddb9c6cfdd6181550cc7a31ae5ac25292d590eb20d2efa110
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              dcbb2fc627b41963.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\dcbb2fc627b41963.png
                                              • Size 36KB
                                              • SHA256 60884a555dcd360aef6f7ce8f8dcb66815376195ffd67740c7c239d87fe49424
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              defebccb46e071fb.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\defebccb46e071fb.svg
                                              • Size 6KB
                                              • SHA256 fbaa12b93ee17014b7c724abfa62545bf05e1dd805dfa6e5c1f51588142ac8d8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              df04cc6b3471fe0f.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\df04cc6b3471fe0f.svg
                                              • Size 494B
                                              • SHA256 5b67a74696b0cf0d76c60192825453971991441b6a5b6ad62d4c5366815e2dff
                                              • MD5 SHA1 SHA512 TLSH

                                              dfcd56774003574f.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\dfcd56774003574f.svg
                                              • Size 587B
                                              • SHA256 2d26d211cd091e758241941a40d1eb57711712fcc3eb1d705eef32547d9a282b
                                              • MD5 SHA1 SHA512 TLSH

                                              e0355e3bf0f86483.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\e0355e3bf0f86483.svg
                                              • Size 318B
                                              • SHA256 e71096281ca6c7c1abb7c50e6fa2c3486f78b1dd4b5f5f5537f38bfefee317cb
                                              • MD5 SHA1 SHA512 TLSH

                                              e0753f4e4fd1f172.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\e0753f4e4fd1f172.svg
                                              • Size 2KB
                                              • SHA256 644b2a34a99a01eb62f923c483545c8ada2348ce5a0154dfecb8ebddd93dc7fc
                                              • MD5 SHA1 SHA512 TLSH

                                              e117838d3c5eda37.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\e117838d3c5eda37.svg
                                              • Size 271B
                                              • SHA256 b8adf2f0aeee2f2cc4cda4fecba7ba04db0043814c660d32c8ea92641d446762
                                              • MD5 SHA1 SHA512 TLSH

                                              e337c07cfdb9efce.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\e337c07cfdb9efce.svg
                                              • Size 352B
                                              • SHA256 405fb48c2c04f011f040a13623c3dd39a1905aab12b7070df47dfcfa70ec422a
                                              • MD5 SHA1 SHA512 TLSH

                                              e8a8ba696fae21e8.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\e8a8ba696fae21e8.png
                                              • Size 7KB
                                              • SHA256 a9b90f8084a5ac0cbb4136dbb53eb6c163051046f06c61ca911cf67e24c9a462
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              e8bb6bfbe58f9668.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\e8bb6bfbe58f9668.svg
                                              • Size 10KB
                                              • SHA256 f195773404e0283872b84c104951749d80e678eefa8620bf91a72c8a15ce574a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              e95ff90adab8dab9.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\e95ff90adab8dab9.png
                                              • Size 5KB
                                              • SHA256 0eab88dde1bb6297c4da1fe29780391aed05f32b2d52bdd5cd02161ec061dec0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              ecc19831f5fd7269.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\ecc19831f5fd7269.svg
                                              • Size 891B
                                              • SHA256 34ffafd6aed516226f8d012ebe517067f3e4a5d1c29a44adc63c64645e3b4bda
                                              • MD5 SHA1 SHA512 TLSH

                                              ee302686425de6d1.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\ee302686425de6d1.svg
                                              • Size 1KB
                                              • SHA256 d3010106cff7fc076de4f24f77aca90cd29ee94fd3675bb23f1107fe1817e88e
                                              • MD5 SHA1 SHA512 TLSH

                                              f0c9814d841afa42.webp

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\f0c9814d841afa42.webp
                                              • Size 18KB
                                              • SHA256 4fe7d9933cfc5daf877acb90887ae5e039209a7dd7e6be78cb67358734bc93cd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              f156fe54a5a79b77.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\f156fe54a5a79b77.svg
                                              • Size 514B
                                              • SHA256 511c586eb88a9c206735e3e3fba7aa46f07cbcd1b6e99be5eb885d803a05610d
                                              • MD5 SHA1 SHA512 TLSH

                                              f3bcc22345312f8d.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\f3bcc22345312f8d.svg
                                              • Size 3KB
                                              • SHA256 6614961bc63bed06c36336bbf9e319036b57fde7bba1120d6a6f3efe16aafe48
                                              • MD5 SHA1 SHA512 TLSH

                                              f45cbb00d6bb82cc.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\f45cbb00d6bb82cc.svg
                                              • Size 322B
                                              • SHA256 d32b690b0525b4fa227dc01328f12cf5d6bf07bd2e8886cb839fde079e247419
                                              • MD5 SHA1 SHA512 TLSH

                                              f515140b598dd3f7.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\f515140b598dd3f7.svg
                                              • Size 481B
                                              • SHA256 133df0cdeb44eecd6381f3f97c7edacba9956d9ae6de1902f7c5a988b9e8f123
                                              • MD5 SHA1 SHA512 TLSH

                                              f7b78d9433c9d476.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\f7b78d9433c9d476.svg
                                              • Size 406B
                                              • SHA256 c3f7cbe95b88ab96679037aecc2a6fc59286b2f047d0b56b5777de5f27d7bbf3
                                              • MD5 SHA1 SHA512 TLSH

                                              f7fc539ce7a13719.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\f7fc539ce7a13719.svg
                                              • Size 1KB
                                              • SHA256 65d27f13b9a522ee5e6f21058684445eef0791866ef29fd0bd34d1f82c5ac538
                                              • MD5 SHA1 SHA512 TLSH

                                              f8695cbe3a95268b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\f8695cbe3a95268b.svg
                                              • Size 870B
                                              • SHA256 8f9307e7950595d6edd6b89f898ff848a6d95b8f37d39849b6faa31ae45f9dc8
                                              • MD5 SHA1 SHA512 TLSH

                                              f907caea9dc5c5af.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\f907caea9dc5c5af.svg
                                              • Size 1KB
                                              • SHA256 6b250c1857cae345f3fb6c64f9a43302c86eb99e2e77941003398db5af0477d3
                                              • MD5 SHA1 SHA512 TLSH

                                              f95f5a575299231b.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\f95f5a575299231b.svg
                                              • Size 402B
                                              • SHA256 306ed4c0b1c53e5fa313a3396dafda9ba506e3cc69e29f270b76affee5ae2e94
                                              • MD5 SHA1 SHA512 TLSH

                                              fc431416b1024934.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\fc431416b1024934.svg
                                              • Size 2KB
                                              • SHA256 31a2447cb28df6dd58aea512fcc054b455b4d1cb7a70a71eac4989aaa1d4e240
                                              • MD5 SHA1 SHA512 TLSH

                                              ff8d935c2abdcdac.svg

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\assets\ff8d935c2abdcdac.svg
                                              • Size 2KB
                                              • SHA256 2e62797f1b6c866bd2c2a5d27889bf0fb093bd8a25bab5f9dc2690861994b767
                                              • MD5 SHA1 SHA512 TLSH

                                              blacklist.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\blacklist.js
                                              • Size 76KB
                                              • SHA256 69ca9b39d7adb3ef75886f94702fb4fb7ffdd9900b25e20c1383928c4e3cac57
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              common.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\common.js
                                              • Size 2.1MB
                                              • SHA256 e55d3c1625d1e3c95549db610b2ade850b9597c3c9e78568406da71ae93393f2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              devtools.html

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\devtools.html
                                              • Size 489B
                                              • SHA256 fb9993c641b228e488b55001e611f05767f98674c16c5a4530d01327b1a24de0
                                              • MD5 SHA1 SHA512 TLSH

                                              devtools.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\devtools.js
                                              • Size 287KB
                                              • SHA256 386e6a0940eaa84fae89e278daedf0cc1e2f967b279b3fb9ec761a47f1a0aed4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              favicon_opera_one.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\favicon_opera_one.png
                                              • Size 2KB
                                              • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                              • MD5 SHA1 SHA512 TLSH

                                              favicon_opera_one.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\favicon_opera_one.png
                                              • Size 2KB
                                              • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                              • MD5 SHA1 SHA512 TLSH

                                              KaTeX_AMS-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_AMS-Regular.ttf
                                              • Size 62KB
                                              • SHA256 68534840bcfdd2bffb6f0e8deb48684dd01e7f04ea2813267577afb906de1d13
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_AMS-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_AMS-Regular.woff
                                              • Size 32KB
                                              • SHA256 30da91e84c893f875e252689faebdc590b2871145e8adc7f9a9d4dbd8ce0b251
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_AMS-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_AMS-Regular.woff2
                                              • Size 27KB
                                              • SHA256 0cdd387c9590a1a9f9794560022dbb59654a7d86f187aa0c81495ad42d3a7308
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Caligraphic-Bold.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Caligraphic-Bold.ttf
                                              • Size 12KB
                                              • SHA256 07d8e303ce4fc12b4bb54f1004170dd190a1f3db45d400fe68060df3e0897268
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Caligraphic-Bold.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Caligraphic-Bold.woff
                                              • Size 7KB
                                              • SHA256 1ae6bd7475590e97e7f145a89e09ccde322f7a6bc0b91607b1c8b8ee28290fed
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Caligraphic-Bold.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Caligraphic-Bold.woff2
                                              • Size 6KB
                                              • SHA256 de7701e42cf1f4cf0b766c03fb27977207eee2f4fd5d76fa82188406da43ea4c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Caligraphic-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Caligraphic-Regular.ttf
                                              • Size 12KB
                                              • SHA256 ed0b74372feefcbb9c0666b2e210da37b7e49fa7fbbf3eeb11db5f693dacfbb7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Caligraphic-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Caligraphic-Regular.woff
                                              • Size 7KB
                                              • SHA256 3398dd02302557a793f2863f88e02d96ce10df2abffa07c8e9fa90775116e65c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Caligraphic-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Caligraphic-Regular.woff2
                                              • Size 6KB
                                              • SHA256 5d53e70ad607c2352162dec9e0923fb54ecdafaccbf604cd8dcf7d00facb989b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Fraktur-Bold.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Fraktur-Bold.ttf
                                              • Size 19KB
                                              • SHA256 9163df9c7122432e6495b4229fa9071cf9ae86a758ae5efc4924ec2e1a6dbce1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Fraktur-Bold.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Fraktur-Bold.woff
                                              • Size 12KB
                                              • SHA256 9be7ceb88004ab8ad124082246fbfcca4091e36385d4ec6ed1df67375dad50fb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Fraktur-Bold.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Fraktur-Bold.woff2
                                              • Size 11KB
                                              • SHA256 74444efd593c005e3f4573b44524704c0af0a937fe911cca9e94068d0d140d3f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Fraktur-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Fraktur-Regular.ttf
                                              • Size 19KB
                                              • SHA256 1e6f9579e90e2cac37f8f60a597c436e075c114385652b7cbeb0dec0421291b3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Fraktur-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Fraktur-Regular.woff
                                              • Size 12KB
                                              • SHA256 5e28753be717dac97f559f49bc10be9cf3c124ddcabda6659d11cb68febc6463
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Fraktur-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Fraktur-Regular.woff2
                                              • Size 11KB
                                              • SHA256 51814d270d06ff0255dba0799994fa4d8c84d11f09951d47595f4abb1f3602dc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-Bold.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-Bold.ttf
                                              • Size 50KB
                                              • SHA256 138ac28d1663b3037e9c5f52371fa5c63d8324f4a38d22cd573e6ea3a3fd0cf8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-Bold.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-Bold.woff
                                              • Size 29KB
                                              • SHA256 c76c5d696297d51b9cb1639c7da4334f0e7dec81b42b11213b5e25ef671bb822
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-Bold.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-Bold.woff2
                                              • Size 24KB
                                              • SHA256 0f60d1b897938ec918c8ce073092411baf9438f6739465693ff18b0f9d20b021
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-BoldItalic.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-BoldItalic.ttf
                                              • Size 32KB
                                              • SHA256 70ee1f64a20f2048c21940ef46d0144fd215baa953ca69afd1e31e98544f708f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-BoldItalic.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-BoldItalic.woff
                                              • Size 18KB
                                              • SHA256 a6f7ec0d846ac7ad975adb8959c37ed49b94acbc4ae436db9ce9e20287e4a64c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-BoldItalic.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-BoldItalic.woff2
                                              • Size 16KB
                                              • SHA256 99cd42a3c072d918f2f44984a807cf7aa16e13545fd0875fc07c6c65f99e715b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-Italic.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-Italic.ttf
                                              • Size 32KB
                                              • SHA256 0d85ae7cc30f23790a7f1a58c4a112fdca8aae769b6ba11429af1d98b1b6cb3a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-Italic.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-Italic.woff
                                              • Size 19KB
                                              • SHA256 f1d6ef86f3b11a528bd5185199bd2443ecb2b0dead96d88674b5a2c12be24bdf
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-Italic.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-Italic.woff2
                                              • Size 16KB
                                              • SHA256 97479ca6cce906abc961ecac96faa5f9ca2e61b8e7670d475826bcdee9a7c267
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-Regular.ttf
                                              • Size 52KB
                                              • SHA256 d0332f52868370fd83ae7fa46470f90c8f2eab2fcf12bc4f88080b340c95a830
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-Regular.woff
                                              • Size 30KB
                                              • SHA256 c6368d87e8a1a3a5d337623d83d8dc4b868f242a9ad476237d6f8d1e0f168cdc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Main-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Main-Regular.woff2
                                              • Size 25KB
                                              • SHA256 c2342cd8b869e01752a9321dc17213fc40d4d04c79688c1d43f2cf316abd7866
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Math-BoldItalic.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Math-BoldItalic.ttf
                                              • Size 30KB
                                              • SHA256 f9377ab0271cda59af24bcffbd46a4d0c8a3572ffafdbb38de2ad5ea7b0d5ee5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Math-BoldItalic.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Math-BoldItalic.woff
                                              • Size 18KB
                                              • SHA256 850c0af5c2238497febaf5e461d880bf458c341f42f4f330f1b1ab5698b1998e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Math-BoldItalic.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Math-BoldItalic.woff2
                                              • Size 16KB
                                              • SHA256 dc47344dbb6cb5b655c8460d561f4df5f501b90c804ad3c6cec65fe322351ab1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Math-Italic.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Math-Italic.ttf
                                              • Size 30KB
                                              • SHA256 08ce98e51b04d58945a301e639e02b6998af29fdfd61a7b8afdd07bbfc479d4a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Math-Italic.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Math-Italic.woff
                                              • Size 18KB
                                              • SHA256 8a8d244581371912b8f3f5a23e2437cb2a59cd9bcaebb0346e722c05737a2571
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Math-Italic.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Math-Italic.woff2
                                              • Size 16KB
                                              • SHA256 7af58c5ec8f132a2ddde9027c6d7814decce4d3b822a11192a42a20e2e973264
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_SansSerif-Bold.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_SansSerif-Bold.ttf
                                              • Size 23KB
                                              • SHA256 1ece03f79f95277d57dc7f6b435a74e1379b0d46104a8530286b60ff49369ea0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_SansSerif-Bold.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_SansSerif-Bold.woff
                                              • Size 14KB
                                              • SHA256 ece03cfd83e22c212cdef66feb8442d25a083beb988db3f1883f3f9738d750ba
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_SansSerif-Bold.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_SansSerif-Bold.woff2
                                              • Size 11KB
                                              • SHA256 e99ae51144bf1232efcc1bfe5add36262c6866b0faab24fa75740e1b98577a62
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_SansSerif-Italic.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_SansSerif-Italic.ttf
                                              • Size 21KB
                                              • SHA256 3931dd81faed86ba021bb2bbdc36f5bed9a38d6b4f4077aca59b265aa1b02083
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_SansSerif-Italic.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_SansSerif-Italic.woff
                                              • Size 13KB
                                              • SHA256 91ee67500cc0129aa0ace3ac5c61ff1692102f0f31d02b69347fba35dcb75bf2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_SansSerif-Italic.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_SansSerif-Italic.woff2
                                              • Size 11KB
                                              • SHA256 00b26ac825e2095056396e0553b8ac26d3f8ad158c3826e28b4c45b385c4714a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_SansSerif-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_SansSerif-Regular.ttf
                                              • Size 18KB
                                              • SHA256 f36ea897e19f4a2e571d1e900e4e3710e438deb05a842486045ba0a3e616a4ad
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_SansSerif-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_SansSerif-Regular.woff
                                              • Size 12KB
                                              • SHA256 11e4dc8a6471ff6d6ee561d53d10fde8f7489e798257ff449c5d37c197435605
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_SansSerif-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_SansSerif-Regular.woff2
                                              • Size 10KB
                                              • SHA256 68e8c73ef42afd3ccec58bf0fba302cce448938e7fc020a5e31f8a952eee1342
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Script-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Script-Regular.ttf
                                              • Size 16KB
                                              • SHA256 1c67f068fea8bb09bf099c088b1cf64bd27516a6e07f4684344873564bb66a67
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Script-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Script-Regular.woff
                                              • Size 10KB
                                              • SHA256 d96cdf2b3bdd4d64a8fd5f74a4c467f123a8a73931cd435889f08ffaf9bf947a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Script-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Script-Regular.woff2
                                              • Size 9KB
                                              • SHA256 036d4e95149b69ff9bcc0cd55771efeb25ffa3947293e69acd78d5ac328c684b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size1-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size1-Regular.ttf
                                              • Size 11KB
                                              • SHA256 95b6d2f1a50173bfedb8c63e1d1c99b10427d0a4df4201cb44513b226951a22b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size1-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size1-Regular.woff
                                              • Size 6KB
                                              • SHA256 c943cc986384f59e86bea5fd7dc50a9c4dfe567a7c05eb40d6790720dead97c9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size1-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size1-Regular.woff2
                                              • Size 5KB
                                              • SHA256 6b47c40166b6dbe21a5dfca7718413f2147fd2399be1ba605d8ad39cedf25dfe
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size2-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size2-Regular.ttf
                                              • Size 11KB
                                              • SHA256 a6b2099fb555c60e3a0db3a08842ebf1d732c6eb4e4bf44913613bed4fc4e39b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size2-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size2-Regular.woff
                                              • Size 6KB
                                              • SHA256 2014c523c3210bcc166648c4d4cc57f05b747df07a24277bf71c51e67dc79e3d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size2-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size2-Regular.woff2
                                              • Size 5KB
                                              • SHA256 d04c54219f9eaec6d4d4fd42dfb28785975a4794d6b2fc71e566b9cd6db842dd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size3-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size3-Regular.ttf
                                              • Size 7KB
                                              • SHA256 500e04d54f0d51666332c9d2089aa803be22aa878eca539e59fa53c6e522b082
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size3-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size3-Regular.woff
                                              • Size 4KB
                                              • SHA256 6ab6b62e9b62dae2c00dd90f791bd10950be0ecc3490d7d6045f51c2e8fe0949
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size3-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size3-Regular.woff2
                                              • Size 3KB
                                              • SHA256 73d591271b1604960cb10bb90fee021670af7297017e0e98480b332d11f51995
                                              • MD5 SHA1 SHA512 TLSH

                                              KaTeX_Size4-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size4-Regular.ttf
                                              • Size 10KB
                                              • SHA256 c647367d1dd4e162468717d020e1fc0f1dc5c26ebfdffbe55261713bf88c5877
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size4-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size4-Regular.woff
                                              • Size 5KB
                                              • SHA256 99f9c6750b489c9462bf04900bd3f939df9b829339daaaaa99ef5495cdddea58
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Size4-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Size4-Regular.woff2
                                              • Size 4KB
                                              • SHA256 a4af7d414440a1c1790825cfb700cf9cf43b0f2c4b04f0ebc523011ad9853ec0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Typewriter-Regular.ttf

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Typewriter-Regular.ttf
                                              • Size 26KB
                                              • SHA256 f01f3e87d9c6a61c0c081ceb577abd864eb00a612f7ac1620dd6915fad2ef5aa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Typewriter-Regular.woff

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Typewriter-Regular.woff
                                              • Size 15KB
                                              • SHA256 e14fed02b1aba7ce9f5afd5844b5d0321b22351febc720e0de8b8723527609f7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              KaTeX_Typewriter-Regular.woff2

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\fonts\KaTeX_Typewriter-Regular.woff2
                                              • Size 13KB
                                              • SHA256 71d517d67827787cfabdf186914cc3358eda539e37931941f2b2fd4a21f68c0b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              handleReloadUI.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\handleReloadUI.js
                                              • Size 4KB
                                              • SHA256 e0de7ccb5fb45c9691cfec97f60784f204e597d17e4e7366eba22b27ded57142
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              html_preview_sandbox.html

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\html_preview_sandbox.html
                                              • Size 3KB
                                              • SHA256 84ef907a752006e3f061a3bf2afac9eba4522db4ef7a86d27265049e2f2b4c7c
                                              • MD5 SHA1 SHA512 TLSH

                                              neon_tab_update.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\neon_tab_update.js
                                              • Size 6KB
                                              • SHA256 47fd7b8f3db06c5569f723da2a0c462b5eb4d4afeb6860d2c7068cbf3d762515
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              operator_animations.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\operator_animations.js
                                              • Size 8KB
                                              • SHA256 0e830fe5d4c7132ad4ef9e6270f2bb4cdb3cec6c8a756b8af6deed29eb6cd56a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              operator_startpage.html

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\operator_startpage.html
                                              • Size 844B
                                              • SHA256 e11105c10babb037790554298c492ba4c84ccb93f327d4cb1fcc477d54d31da5
                                              • MD5 SHA1 SHA512 TLSH

                                              operator_startpage.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\operator_startpage.js
                                              • Size 356KB
                                              • SHA256 2a330dd214f06dabe9e82786a6e4153ad1bb5762a9a62a9d0db5ec2e0e023d25
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              prevent_new_tab_opening.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\prevent_new_tab_opening.js
                                              • Size 7KB
                                              • SHA256 234ce02de6e7f3adc93adf52bffc732fd81e48cdbf0d8e5d3ec154f0409c526b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              prompt.html

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\prompt.html
                                              • Size 443B
                                              • SHA256 f54f339837e1b29646d56733bfa7945f10fd5372424a0055c5f8ae0504281815
                                              • MD5 SHA1 SHA512 TLSH

                                              prompt.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\prompt.js
                                              • Size 11KB
                                              • SHA256 3823128ee1ea45f2be04e422afd920b6b5352e07dbfc545976b80a6570064b49
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              reader_mode.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\reader_mode.js
                                              • Size 112KB
                                              • SHA256 d6671e14f42d8ca03d84a67f459b392123dfa65ad1fcd0c0ec105981ee2cc1c3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              operator-scan.glsl

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\shaders\operator-scan.glsl
                                              • Size 6KB
                                              • SHA256 d5d880f6f3cd7180c2e97c5da22b59b11e01682f8af0d8b44e691da40f4b57e2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              spotify_frame_interceptor.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\spotify_frame_interceptor.js
                                              • Size 5KB
                                              • SHA256 71e05e0bba7fa44f282661fc99cc7b824d556dbb32957e027c995b555aae20a5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              vendors.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\vendors.js
                                              • Size 2.1MB
                                              • SHA256 d4813679fe7795c52a94e30f00011d4cbd6c6fb979b0ce2a994aa45bc2cd8fe4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              voice_capture_worklet.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3048_1020005293\CRX_INSTALL\voice_capture_worklet.js
                                              • Size 9KB
                                              • SHA256 0d63fed8ab4dd4e7bddf96bc5093296a7e4b8d166b03c6c83224a632a27640cf
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              logo_128.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6356_2010433583\CRX_INSTALL\public\icons\logo_128.png
                                              • Size 7KB
                                              • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              logo_16.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6356_2010433583\CRX_INSTALL\public\icons\logo_16.png
                                              • Size 653B
                                              • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                              • MD5 SHA1 SHA512 TLSH

                                              logo_32.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6356_2010433583\CRX_INSTALL\public\icons\logo_32.png
                                              • Size 1KB
                                              • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                              • MD5 SHA1 SHA512 TLSH

                                              logo_48.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6356_2010433583\CRX_INSTALL\public\icons\logo_48.png
                                              • Size 2KB
                                              • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                              • MD5 SHA1 SHA512 TLSH

                                              logo_64.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6356_2010433583\CRX_INSTALL\public\icons\logo_64.png
                                              • Size 2KB
                                              • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                              • MD5 SHA1 SHA512 TLSH

                                              messages.json

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6356_236672248\CRX_INSTALL\_locales\en\messages.json
                                              • Size 396B
                                              • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                              • MD5 SHA1 SHA512 TLSH

                                              Icon_Light_Neutral.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6356_236672248\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                              • Size 2KB
                                              • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                              • MD5 SHA1 SHA512 TLSH

                                              Icon_Light_Neutral.png

                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6356_236672248\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                              • Size 962B
                                              • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                              • MD5 SHA1 SHA512 TLSH

                                              manifest.json

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\AmountExtractionHeuristicRegexes\4\manifest.json
                                              • Size 94B
                                              • SHA256 95a2b0748baee70740ff2d5da78f98b5a29950562f989591f0b0b5bf13354b85
                                              • MD5 SHA1 SHA512 TLSH

                                              settings.dat

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                              • Size 40B
                                              • SHA256 6696022b498384dd3e80791b58e1a3d5ea17cac65c5a33e67c51c8afd5b0790f
                                              • MD5 SHA1 SHA512

                                              BookmarkMergedSurfaceOrderingef3df1c5-7085-454f-9748-87a9a8899433.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrderingef3df1c5-7085-454f-9748-87a9a8899433.tmp
                                              • Size 6B
                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                              • MD5 SHA1 SHA512

                                              Bookmarks.bak

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks.bak
                                              • Size 3KB
                                              • SHA256 400004be5da28584a367bc8b53d79b6270971092db83d7f6c0cffd7ffc9f0013
                                              • MD5 SHA1 SHA512 TLSH

                                              BookmarksExtrasb32c3938-7854-487b-a5a6-8eccd5c2dc2b.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtrasb32c3938-7854-487b-a5a6-8eccd5c2dc2b.tmp
                                              • Size 223KB
                                              • SHA256 5dcbd7d70010a064b02a02117d559b324ae8bb856d3954e3edafb2b4a7093eb0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Bookmarksf2f52e1b-cf54-43ce-b9e3-3a527f413255.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarksf2f52e1b-cf54-43ce-b9e3-3a527f413255.tmp
                                              • Size 36KB
                                              • SHA256 4d819e20893471efff450bb9d951b274ccc419f62fe19ee4c2da0042b82b2474
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                              • Size 48B
                                              • SHA256 1868f5e5f4162f0437c6cb087f26e1b2849c2731de076294c524ce0f72f8574a
                                              • MD5 SHA1 SHA512

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                              • Size 336B
                                              • SHA256 19df455068881f6dfb2445b774295d069aae8b1e5549200ad0bbea1f291400eb
                                              • MD5 SHA1 SHA512 TLSH

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                              • Size 744B
                                              • SHA256 c19481cb52e135eda9d41808da1056ca8302d1125a865f8f4eea2190c3e701ba
                                              • MD5 SHA1 SHA512 TLSH

                                              index

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\index
                                              • Size 256KB
                                              • SHA256 f7a16580777f26f2633d8b89575251062dcd9c298312a6ac5beb3325c408d656
                                              • MD5 SHA1 SHA512 SSDEEP

                                              manifest.json

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir3048_1760150390\CRX_INSTALL\manifest.json
                                              • Size 3KB
                                              • SHA256 123e94013b1a19787488c4ea8ac625697a77eff7ad5cae1efd1d5969540252f3
                                              • MD5 SHA1 SHA512 TLSH

                                              service_worker.js

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir3048_1760150390\CRX_INSTALL\service_worker.js
                                              • Size 92KB
                                              • SHA256 00c8faf8d845776b2a7cf7402f85b9b0be81396c887f5b0f401d2b485facd742
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              main.js

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                              • Size 47KB
                                              • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              scraping-method-Dq4mm50p.js

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                              • Size 6KB
                                              • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              service-worker.ts-fle0M1Xd.js

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                              • Size 13KB
                                              • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              service-worker-loader.js

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                              • Size 49B
                                              • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                              • MD5 SHA1 SHA512

                                              messages.json

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\_locales\en\messages.json
                                              • Size 429B
                                              • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                              • MD5 SHA1 SHA512 TLSH

                                              background.js

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                              • Size 87KB
                                              • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              content.js.LICENSE.txt

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\content.js.LICENSE.txt
                                              • Size 1KB
                                              • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                              • MD5 SHA1 SHA512 TLSH

                                              Icon_Light_Active.png

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Active.png
                                              • Size 2KB
                                              • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                              • MD5 SHA1 SHA512 TLSH

                                              Icon_Light_Available_Red.png

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Red.png
                                              • Size 2KB
                                              • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                              • MD5 SHA1 SHA512 TLSH

                                              Icon_Light_Available_Yellow.png

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Yellow.png
                                              • Size 2KB
                                              • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                              • MD5 SHA1 SHA512 TLSH

                                              Icon_Light_Neutral.png

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                              • Size 2KB
                                              • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                              • MD5 SHA1 SHA512 TLSH

                                              Icon_Light_Active.png

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Active.png
                                              • Size 883B
                                              • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                              • MD5 SHA1 SHA512 TLSH

                                              Icon_Light_Available_Red.png

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Red.png
                                              • Size 895B
                                              • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                              • MD5 SHA1 SHA512 TLSH

                                              Icon_Light_Available_Yellow.png

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Yellow.png
                                              • Size 895B
                                              • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                              • MD5 SHA1 SHA512 TLSH

                                              Icon_Light_Neutral.png

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Neutral.png
                                              • Size 932B
                                              • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                              • MD5 SHA1 SHA512 TLSH

                                              index.html

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\index.html
                                              • Size 222B
                                              • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                              • MD5 SHA1 SHA512 TLSH

                                              rules.json

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                              • Size 839B
                                              • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                              • MD5 SHA1 SHA512 TLSH

                                              0e6f8d36-d984-4a97-be16-c2a68db4340d.tmpa9c28529-5d69-42a1-adc5-dd7614a1ea2c.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\0e6f8d36-d984-4a97-be16-c2a68db4340d.tmpa9c28529-5d69-42a1-adc5-dd7614a1ea2c.tmp
                                              • Size 27KB
                                              • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              9b69f824-19aa-4572-856b-390c5ea30200.tmp2979cacb-4289-46e2-912b-3a598cd836a9.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9b69f824-19aa-4572-856b-390c5ea30200.tmp2979cacb-4289-46e2-912b-3a598cd836a9.tmp
                                              • Size 27KB
                                              • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              a7bfa462-0e0b-44da-941f-6592a29cc021.tmpd37111bc-4ebf-4b8e-805a-16e207a100b1.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\a7bfa462-0e0b-44da-941f-6592a29cc021.tmpd37111bc-4ebf-4b8e-805a-16e207a100b1.tmp
                                              • Size 27KB
                                              • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              b284a964-532e-4d76-b3f5-21362897562b.tmp7a5b06a3-7431-4884-8a2a-b5507db46b2a.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\b284a964-532e-4d76-b3f5-21362897562b.tmp7a5b06a3-7431-4884-8a2a-b5507db46b2a.tmp
                                              • Size 27KB
                                              • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              c513ba8c-0969-40a9-81b2-58f8e524f270.tmp20b09533-84a8-4df6-94a9-63636c3f6940.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\c513ba8c-0969-40a9-81b2-58f8e524f270.tmp20b09533-84a8-4df6-94a9-63636c3f6940.tmp
                                              • Size 27KB
                                              • SHA256 3a9c655a88437e331f50a23bb40cb1a3de86277cb1a9488c81c426598cfab0a3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              cdd0a250-8f1d-4528-88ba-3f51208756fe.tmp2bef76ab-ff7a-4843-bdcd-7a0fb11cf159.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\cdd0a250-8f1d-4528-88ba-3f51208756fe.tmp2bef76ab-ff7a-4843-bdcd-7a0fb11cf159.tmp
                                              • Size 27KB
                                              • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Network Persistent State.backup

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State.backup
                                              • Size 61B
                                              • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                              • MD5 SHA1 SHA512 TLSH

                                              Network Persistent State0c258928-64d7-435c-88c2-0d6c013b00aa.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State0c258928-64d7-435c-88c2-0d6c013b00aa.tmp
                                              • Size 111B
                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                              • MD5 SHA1 SHA512 TLSH

                                              Network Persistent Stateba14f644-b09b-4caa-abb6-f4543b15f054.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent Stateba14f644-b09b-4caa-abb6-f4543b15f054.tmp
                                              • Size 1KB
                                              • SHA256 1b86320f0feadb30ac105f50df98d5a13f3887195781ef0b2f8f3c77d6687c8d
                                              • MD5 SHA1 SHA512 TLSH

                                              SCT Auditing Pending Reports

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
                                              • Size 2B
                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                              • MD5 SHA1 SHA512

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                              • Size 15KB
                                              • SHA256 9076d6bf676ca5265848b047672dcaf32729b843b4009714bcf35a20b4fa1510
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences67acce9d-594e-4d79-b3d6-b1d5c1e6c314.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences67acce9d-594e-4d79-b3d6-b1d5c1e6c314.tmp
                                              • Size 10KB
                                              • SHA256 d66ba537d926803e7010e841d82175abd04ef9c3733aa35641fa18450654f8d4
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences7992a94e-ff9d-4cf2-9932-e5186cd81565.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences7992a94e-ff9d-4cf2-9932-e5186cd81565.tmp
                                              • Size 15KB
                                              • SHA256 db9a18f077a733ab6ee48e59beb07d4b298ff2b36e2a3362ad0fb60d51f23c6e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Preferences817e3dce-b211-4671-a132-77d8ef62b4f5.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences817e3dce-b211-4671-a132-77d8ef62b4f5.tmp
                                              • Size 16KB
                                              • SHA256 ae6968db468c29127ec815e003f8920867e25bef3a5acd1915a484857e68086f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Secure Preferences.backup

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences.backup
                                              • Size 82KB
                                              • SHA256 3811bae7fa071b82d006094a31072c68c8e9d1b4420f39e90feb5f7ba2d45540
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Secure Preferences1e3eb75b-6542-4489-8101-53dfcdf45b91.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences1e3eb75b-6542-4489-8101-53dfcdf45b91.tmp
                                              • Size 82KB
                                              • SHA256 6c4dce3f57d793dedd271499aac05d21c097fbf9a523706d342523e71f44390c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Secure Preferencesc07636ef-ecbd-4692-87b8-004ce5a3bd3f.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencesc07636ef-ecbd-4692-87b8-004ce5a3bd3f.tmp
                                              • Size 109KB
                                              • SHA256 9e2234b3a09b6c3c9793feacb77c7864e3b2e5e52423d63e0138ddfd2a83c09c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              index

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index
                                              • Size 24B
                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                              • MD5 SHA1 SHA512

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                              • Size 96B
                                              • SHA256 ec5d7743edf142be51e0149875b84666cae01660d4e61816e92696e37ed35b9e
                                              • MD5 SHA1 SHA512 TLSH

                                              temp-index

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                              • Size 360B
                                              • SHA256 caef692106c091a5f86a55faee4f9646fe1f0b0f080965e038fe183009110830
                                              • MD5 SHA1 SHA512 TLSH

                                              the-real-index

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                              • Size 72B
                                              • SHA256 77e0eb54121df0dc6bb45589ef7845572ad4399f038f7120f933d5fa0a37251d
                                              • MD5 SHA1 SHA512 TLSH

                                              CURRENT

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\CURRENT
                                              • Size 16B
                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                              • MD5 SHA1 SHA512

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw
                                              • Size 381B
                                              • SHA256 e9704e96cca92f74fc5e095d6a9b23d25e3bb14986c25d83341e853a44292b9f
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw
                                              • Size 8KB
                                              • SHA256 7e842278b5c9190e3cb00f7d60bf71c82e8ee2e5c8c7eeeb48a8ac31544fea97
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw
                                              • Size 989B
                                              • SHA256 a4580d987b31d9d813a9d7ed5c366cab360f29936f0047c36969006de0b1b95f
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw00de85cb-6af8-49b3-aa13-f56284f6f7d9.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw00de85cb-6af8-49b3-aa13-f56284f6f7d9.tmp
                                              • Size 14KB
                                              • SHA256 02940387348a760fd1b011c6caeec7e195a478dd046cdf8c0c6252f9c3be8818
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw017595c8-4925-4f85-8ca3-e732c3be2715.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw017595c8-4925-4f85-8ca3-e732c3be2715.tmp
                                              • Size 11KB
                                              • SHA256 6dbed44298281939ea1ea4179f7aba6e704e1b4782cc0083e7988cfa9f2df728
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw0613a7e3-a4d3-413a-a4e4-3e7018d37f50.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw0613a7e3-a4d3-413a-a4e4-3e7018d37f50.tmp
                                              • Size 14KB
                                              • SHA256 4d3cdce0dc909a7ceb5322690dcff8944d6ef0b5c3cc59afe086a88e0ed3bd7a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw06be569c-5ac8-4dbe-8543-d9b191a27de7.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw06be569c-5ac8-4dbe-8543-d9b191a27de7.tmp
                                              • Size 14KB
                                              • SHA256 7c37ef0cb26e1dd2003b408b8b16d4730db1033e14d7216076e9f3184cade762
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw08446f43-18d6-466e-9b89-03930a5a6c16.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw08446f43-18d6-466e-9b89-03930a5a6c16.tmp
                                              • Size 9KB
                                              • SHA256 e2bee3acc49f4e52d374e621b9a103a717d1be9bc9984b3dcc098c4f446c88af
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw08e1d607-8007-42f8-a75f-d43ff7b0bb4f.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw08e1d607-8007-42f8-a75f-d43ff7b0bb4f.tmp
                                              • Size 12KB
                                              • SHA256 86f076d1b5ccc287e15949ae527435abc490f40e33292bb35bf352fb128480c9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw0aeb1e47-4f44-49b3-ab75-87d575759e51.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw0aeb1e47-4f44-49b3-ab75-87d575759e51.tmp
                                              • Size 10KB
                                              • SHA256 5a405ceec970625e507b1c88c9f62fa3726099663476198c3f18a9ca0b47fb03
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw0c6bf03e-3e7e-464b-9c9c-c5d4dd019190.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw0c6bf03e-3e7e-464b-9c9c-c5d4dd019190.tmp
                                              • Size 14KB
                                              • SHA256 07407f87340caed08130742b981abc70e635b68f98d767276455cc893d40ccbc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw131730ad-062e-40c2-a2aa-cdf5aa9bb55b.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw131730ad-062e-40c2-a2aa-cdf5aa9bb55b.tmp
                                              • Size 12KB
                                              • SHA256 8ae9e6acbe9d62badff5fce25aa548f453f8f80560c97e57c84aaec3f8e16ba5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw135f74e9-a708-4216-a87c-9b8b41f5e9e3.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw135f74e9-a708-4216-a87c-9b8b41f5e9e3.tmp
                                              • Size 13KB
                                              • SHA256 aae6616c8d94ac4e74e1180c872a214bb5fa78b4693df1dc9e3a866b1526d40e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw193b7fb1-27d1-44a4-b1a0-0ddb49d57385.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw193b7fb1-27d1-44a4-b1a0-0ddb49d57385.tmp
                                              • Size 9KB
                                              • SHA256 040089a6fcccab40ee82f99b314e1466acf44085f444b1f8c00bbd7eb9e840eb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw1b8e66fe-9bc1-4871-96c7-378a4feaf1ac.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw1b8e66fe-9bc1-4871-96c7-378a4feaf1ac.tmp
                                              • Size 14KB
                                              • SHA256 5d19ef54ab248fde77a5f420bbc027b6bf5b5c0155c8f85ee8a72145fcf9d014
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw1effc569-6081-4fa7-8b48-f33ab75afd5a.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw1effc569-6081-4fa7-8b48-f33ab75afd5a.tmp
                                              • Size 10KB
                                              • SHA256 383adea6177bcf48c91137679655a6c8c2261c24a47053c6459f37b1ddf7e2ec
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw21a8216f-46d8-4553-bc3b-44ec7408b7c4.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw21a8216f-46d8-4553-bc3b-44ec7408b7c4.tmp
                                              • Size 14KB
                                              • SHA256 2743bc5dc5542cee32331fe19216a45d80dcd38ea39096f4a16d02070952e21e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw220954c4-ba9a-43b5-abb6-f5499550170a.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw220954c4-ba9a-43b5-abb6-f5499550170a.tmp
                                              • Size 11KB
                                              • SHA256 d292bd7b543410d2f71851464900410e443f575d45b4959b98dfdb8e4dc142ea
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw22bc7e30-2310-4435-94b4-c8986d516bdf.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw22bc7e30-2310-4435-94b4-c8986d516bdf.tmp
                                              • Size 13KB
                                              • SHA256 13d919f09a885563155b8480193ad681c73bc5642f837490e50d681abac167d0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw2392aa23-f04b-48ae-8b0f-0e3ac6a427f0.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw2392aa23-f04b-48ae-8b0f-0e3ac6a427f0.tmp
                                              • Size 14KB
                                              • SHA256 db0a12c08c339eb79cab3c20760e13796cfe63628522d18e18ecf4d7b90f7a51
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw26a2b764-d659-4541-8a95-370943c86401.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw26a2b764-d659-4541-8a95-370943c86401.tmp
                                              • Size 9KB
                                              • SHA256 52586a7e984e20a30281a74adbd9952fd4e2f01ce8419902c86e582f0ac047a1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw27af5235-01b3-473f-b496-b8b08688d7ec.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw27af5235-01b3-473f-b496-b8b08688d7ec.tmp
                                              • Size 12KB
                                              • SHA256 6a042283903d2245fff53ba4403dfdb007664326bb04ad5314e04bbbdee09e62
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw29e9a3b5-5f99-4041-a2e1-9a2c0b8ec334.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw29e9a3b5-5f99-4041-a2e1-9a2c0b8ec334.tmp
                                              • Size 9KB
                                              • SHA256 5e9e8b1977d96e57411d5c5a52929a5c350c70cb61c0618c04cece65cebf9e94
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw2a9aa97a-54a2-4245-8373-34a663406369.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw2a9aa97a-54a2-4245-8373-34a663406369.tmp
                                              • Size 493B
                                              • SHA256 567bac52e3d1e4922a11b09d7b3fc0cfe672de257c389229785435296bb44b83
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw2c7a93a1-2b84-40bb-b1b6-6c450da12443.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw2c7a93a1-2b84-40bb-b1b6-6c450da12443.tmp
                                              • Size 1KB
                                              • SHA256 682967e419be0bfcdb1161f1a1ca865fc23d32e9c87451bcd9652fe46355b7a5
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3353e5dd-5d5d-42bb-aef0-66cceba56d64.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3353e5dd-5d5d-42bb-aef0-66cceba56d64.tmp
                                              • Size 14KB
                                              • SHA256 11b16d0027fcbe3a5dde9dc4181d87a5dbbe2d4b16aa0ed95af422e614fd6a6a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw379432d2-871e-4b9b-ad39-6ea9a6556e71.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw379432d2-871e-4b9b-ad39-6ea9a6556e71.tmp
                                              • Size 749B
                                              • SHA256 5de677a176409728d146e80a1018b3fa761886abb8df0d8eaf66883a4d0ec68b
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3ad16a9f-fe80-49fd-b23c-c0a30e21ab40.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3ad16a9f-fe80-49fd-b23c-c0a30e21ab40.tmp
                                              • Size 13KB
                                              • SHA256 2b9e5c2d659cd34e1ca724753b253f1950f2bde8cd4f713d6353642db5fa7284
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3c8071d3-2c3c-4336-8d79-1232bd409201.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3c8071d3-2c3c-4336-8d79-1232bd409201.tmp
                                              • Size 10KB
                                              • SHA256 a305b339c95a0a415eb26b426136705737d7fa9297db48e113ce6ea0159dbcaf
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3d8300e1-88da-41bc-875c-58be08d739a3.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3d8300e1-88da-41bc-875c-58be08d739a3.tmp
                                              • Size 9KB
                                              • SHA256 b5b95567427f886b944d28c568913f1d950e598849670eb2736933af1962598b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3e08327b-de13-4c79-b95d-4605700b824c.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3e08327b-de13-4c79-b95d-4605700b824c.tmp
                                              • Size 1KB
                                              • SHA256 5f95ce5cc5820aaa26138924c68f195c41cf73b1232a5190bb70b3d28b426080
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3ebd9722-6ff2-485f-bb89-23c6327c60be.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw3ebd9722-6ff2-485f-bb89-23c6327c60be.tmp
                                              • Size 10KB
                                              • SHA256 15743aa6adeb3fda4477346df605d3ac92f12e80726fbb4c7c7b2801e43c06fc
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw406246fd-9c8b-4483-a606-07ea35b57cb5.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw406246fd-9c8b-4483-a606-07ea35b57cb5.tmp
                                              • Size 9KB
                                              • SHA256 df113bd286f3317be3ed37cd2fdfb6ca6b9f6f6059745630469730e072e97975
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw40c396b2-c08c-4ac8-83f3-3e34ccd20f28.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw40c396b2-c08c-4ac8-83f3-3e34ccd20f28.tmp
                                              • Size 9KB
                                              • SHA256 6bdbc31889bdc81181be129efe0bcaa6c2a5f20539008bc5c29545cc260e64a1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw4352f6d8-2e48-4b61-9c57-a4c9c74338ec.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw4352f6d8-2e48-4b61-9c57-a4c9c74338ec.tmp
                                              • Size 9KB
                                              • SHA256 8982c252d1efa706c61a2097663d0836e929453b068cbec14fc488b765c84aca
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw44d2cb46-0f79-4bb5-9f05-4e4c3efea0af.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw44d2cb46-0f79-4bb5-9f05-4e4c3efea0af.tmp
                                              • Size 9KB
                                              • SHA256 a39df2e337ea6a579772642451c0306f871658abed3982cf6b7222a6213c01aa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw4561b31d-0314-48f4-aa1a-f8dafccc6d81.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw4561b31d-0314-48f4-aa1a-f8dafccc6d81.tmp
                                              • Size 1KB
                                              • SHA256 94de081ecb67195a74d3f5d19cfe9bc34909c55b40a974f7d22a6dff13db900b
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw47a3da0b-99ab-45cb-898f-4eb005b525d2.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw47a3da0b-99ab-45cb-898f-4eb005b525d2.tmp
                                              • Size 14KB
                                              • SHA256 8b858b63c326e3302506aa128dadf4c83274894ebd1f5551771d5dbf5995e85c
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw47c43970-0254-48f2-b12c-db017dbe8bae.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw47c43970-0254-48f2-b12c-db017dbe8bae.tmp
                                              • Size 7KB
                                              • SHA256 2b683fc526ba3c61d8daade7fb73d1133fc5548d154409c54ced831d1b1171b7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw48f6463a-7ea1-4a97-b048-ba06681ba1f6.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw48f6463a-7ea1-4a97-b048-ba06681ba1f6.tmp
                                              • Size 8KB
                                              • SHA256 5d1203062f8e4f588ba66c9d7d3f4917e116da047c1fc53ef2e403237c7800c2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw49cdbdd6-b052-43c5-a332-edcc158b2525.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw49cdbdd6-b052-43c5-a332-edcc158b2525.tmp
                                              • Size 14KB
                                              • SHA256 8328ab3042891cccec2c259073c9a1a72897a13337a998869e1fc37cac9e1a9a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw4c8c5458-5b9b-4614-af1f-52327279bee5.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw4c8c5458-5b9b-4614-af1f-52327279bee5.tmp
                                              • Size 14KB
                                              • SHA256 61e0eb16d57d6dcddf55d92a14c7c4a964ca0d124919df1fea25cb653104e1f5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw4cab96e1-0758-4bba-9e59-4d26f6ca2e12.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw4cab96e1-0758-4bba-9e59-4d26f6ca2e12.tmp
                                              • Size 11KB
                                              • SHA256 b13d57d8a832db69091e5ea63bbdffc2d6482a5810e66123ff3b9d86f1eaaaf8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw4e0c695f-9019-485f-a61c-6fe1b8a88f42.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw4e0c695f-9019-485f-a61c-6fe1b8a88f42.tmp
                                              • Size 10KB
                                              • SHA256 18d6337d220ede7bf2e2da7b0b87bac8032dea7b359de64d42d0a88c8d539339
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw533598e9-2966-4c48-9a42-767a0416d97b.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw533598e9-2966-4c48-9a42-767a0416d97b.tmp
                                              • Size 11KB
                                              • SHA256 fe6e77984335bbb53447783eda1714a3a8aee1535cd9baf355bb6ee9845be56a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw541fed67-c8ad-4f17-9a41-6123c86b3195.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw541fed67-c8ad-4f17-9a41-6123c86b3195.tmp
                                              • Size 9KB
                                              • SHA256 72db610510aa9038bdb015f2834cefe6b286ffac1106be906c369c6a81ba3a70
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw5475ed32-f184-4eb5-aa6a-9d3e1c7f871c.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw5475ed32-f184-4eb5-aa6a-9d3e1c7f871c.tmp
                                              • Size 13KB
                                              • SHA256 721cf060d125306993ef2e648a3ce8e21bf53ef4ed8a38cb05baee8d244b0378
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw598356c8-cb1f-49c5-8e23-9e3de47c6da5.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw598356c8-cb1f-49c5-8e23-9e3de47c6da5.tmp
                                              • Size 14KB
                                              • SHA256 b37ac1d5c1b89485ab0b3fe2e4c4812d0998f814e8aacd68152b40cf085a892e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw5d3713bb-ef07-4f75-bfd8-6701de8597cc.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw5d3713bb-ef07-4f75-bfd8-6701de8597cc.tmp
                                              • Size 14KB
                                              • SHA256 37f187ab3198435d739d8ab1902e124391ece243fe9fb604f2ea5933608e1cbb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw67cbef9d-bf74-4a6f-ac1f-e23c5477c77e.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw67cbef9d-bf74-4a6f-ac1f-e23c5477c77e.tmp
                                              • Size 621B
                                              • SHA256 9239f535a3fa8dd49f83ffa197c88d8a5b1a08ae71073e6a9c1c3cca9f26d4ef
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw68584c1c-1c1f-443c-9d57-f97931685c97.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw68584c1c-1c1f-443c-9d57-f97931685c97.tmp
                                              • Size 1KB
                                              • SHA256 9c03037b45e93de674e2e54770b78e9ff22c19f3c29b5a88eedc6efaf3f316c6
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw68ba1f86-be43-4a05-8996-5e895d5e958e.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw68ba1f86-be43-4a05-8996-5e895d5e958e.tmp
                                              • Size 13KB
                                              • SHA256 6f7b709ff21557e1c592eba716731c0bbbc994661a57440f4a766abf17746455
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw6c4c1191-e641-446c-8e44-44a8e257f83e.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw6c4c1191-e641-446c-8e44-44a8e257f83e.tmp
                                              • Size 1KB
                                              • SHA256 5e4c08bb704d9cc8a36d5c5ca4518040c2122ec3df9bd7511b86ebb68055d5c3
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw6cac95c0-4f33-4588-b68f-629d97b98c9d.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw6cac95c0-4f33-4588-b68f-629d97b98c9d.tmp
                                              • Size 9KB
                                              • SHA256 b0502ad045178ca0e3291a132c34619709243461e208dfcc2ec56f9c4e6d10ed
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw6e27ec7a-9a11-4b49-bf4e-3898ea7eb674.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw6e27ec7a-9a11-4b49-bf4e-3898ea7eb674.tmp
                                              • Size 14KB
                                              • SHA256 94953441119236734cd3328ae88495b1d35d67fa67ee365f11b3105104477c06
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw70213b59-1bf9-47c8-b938-93406b246e05.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw70213b59-1bf9-47c8-b938-93406b246e05.tmp
                                              • Size 9KB
                                              • SHA256 f2539d51ac6dd656d9b08f055bfb7fbc3599fc94e95c57d8b3d9876f4caa82d3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw7ded5633-23f6-4a0e-8c1e-2a89e8f77868.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw7ded5633-23f6-4a0e-8c1e-2a89e8f77868.tmp
                                              • Size 14KB
                                              • SHA256 ac93e836fc1b56464aed796c4203d45e6e29ae5989c1faf9726f906a1d51b0be
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw7e67ebf6-d3dc-4563-a830-4cae4abf196b.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw7e67ebf6-d3dc-4563-a830-4cae4abf196b.tmp
                                              • Size 7KB
                                              • SHA256 2623451a88839d03dffc7911e3d92e9d1d8b80485a24b0a3f26d0ddd89312ecb
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw82eb6184-07d4-4da2-b274-9641f041eb49.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw82eb6184-07d4-4da2-b274-9641f041eb49.tmp
                                              • Size 8KB
                                              • SHA256 3249a5bcd6e224f5d6c15f88fcaf314112530755165b227367c7ff81e03b9b6f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw830d8bfb-08fd-4da3-98e4-2dcd6857c6d1.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw830d8bfb-08fd-4da3-98e4-2dcd6857c6d1.tmp
                                              • Size 10KB
                                              • SHA256 9a9b6338cc05e54da66f992fc09a4261aa284b1effc031edd399f32df79307f5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw86c149c3-b68f-47ab-956e-19b411578c62.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw86c149c3-b68f-47ab-956e-19b411578c62.tmp
                                              • Size 14KB
                                              • SHA256 843b4706a18ebf67bdfba45e01d863702d2967490bbba04f1f58ba496e8b5db9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8ad5dfca-0b5f-43a6-8e5f-8826ba354428.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8ad5dfca-0b5f-43a6-8e5f-8826ba354428.tmp
                                              • Size 13KB
                                              • SHA256 54c8f4620279002c1b0c23905ce061da2a9b5354741cbac7dcedbae7a1b5d572
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8b561ef1-4fc7-4401-8bc2-6e2dfd766033.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8b561ef1-4fc7-4401-8bc2-6e2dfd766033.tmp
                                              • Size 7KB
                                              • SHA256 5cc6bdc27613870e4c5e53dbafff8199116c0aa4327a9367102f3f256a9658d8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8bac1635-5993-471a-b820-ae770f367d7a.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8bac1635-5993-471a-b820-ae770f367d7a.tmp
                                              • Size 9KB
                                              • SHA256 cd37de82fda2f809f1ef8df1f673c59652d7d683d4c621f38a10b946f9c6be8e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8c844fc0-6e46-4c46-94bb-5b292014f82a.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8c844fc0-6e46-4c46-94bb-5b292014f82a.tmp
                                              • Size 8KB
                                              • SHA256 a118d048c9ec91b5a7515e8a67df3b4d4b1f0a22bd9031ade95700349ac3b3f8
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8e3bfcc5-93bc-4aff-9986-9fe1b96e30d8.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8e3bfcc5-93bc-4aff-9986-9fe1b96e30d8.tmp
                                              • Size 9KB
                                              • SHA256 2a9ec245760c6a253c90fcf93a8129d1843ad394f388f906aad108c7ca5c9ecd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8f53e6b5-1feb-45bb-93c4-20abf105d424.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw8f53e6b5-1feb-45bb-93c4-20abf105d424.tmp
                                              • Size 1KB
                                              • SHA256 a3e960a693f5022834ad3066c7c25e5a4f9a1a650910ccc02820d206bf629c96
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw906f5a63-a98b-438e-a8e8-84e74855a689.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw906f5a63-a98b-438e-a8e8-84e74855a689.tmp
                                              • Size 1KB
                                              • SHA256 0a11698ef39ed66d1a51fe0884f1f42918af3e6343d399b10c5995870747db19
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw9850a355-01ea-4b6c-b46c-19fbc5cfb6cd.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw9850a355-01ea-4b6c-b46c-19fbc5cfb6cd.tmp
                                              • Size 14KB
                                              • SHA256 d1e9bd4160bdba654ce7c8f90bc0f3f7ae940b074d3d12063a4309726eeaa393
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw9d88eab3-bfc5-4962-862f-a2724b6c33e2.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw9d88eab3-bfc5-4962-862f-a2724b6c33e2.tmp
                                              • Size 12KB
                                              • SHA256 bad512d5c2906519e4c8b2911c5de2d74a3c39f7de6597a9434f2a690ee6d532
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw9f8e7310-78a8-4662-80da-2950292225a8.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.raw9f8e7310-78a8-4662-80da-2950292225a8.tmp
                                              • Size 14KB
                                              • SHA256 a61401de6809481c0f99b0214112ba750ba38bacea82a49bd3eec1bb0b3b1e10
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa021c25b-b00a-4f66-b4df-26e6a8b1300e.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa021c25b-b00a-4f66-b4df-26e6a8b1300e.tmp
                                              • Size 14KB
                                              • SHA256 090194f24d0b41a546d78e173890000e158a09cbdd11d353a3d438278445d64d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa0dcde45-5a15-41bf-b9d8-f3b250be04d4.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa0dcde45-5a15-41bf-b9d8-f3b250be04d4.tmp
                                              • Size 9KB
                                              • SHA256 b566061543b562ac44a82986f21f70d6cb07f6abd3e18b0df3592335bdf5f7dd
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa1333546-81e9-49c2-9d5a-aaab658ce22f.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa1333546-81e9-49c2-9d5a-aaab658ce22f.tmp
                                              • Size 12KB
                                              • SHA256 ba8bd705e0d11ee43346738737ca7cbb4be7c29cfae4e9d367bdc6dcb15f88d9
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa79bd7b1-cf2c-447e-b876-a724b1ed939c.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa79bd7b1-cf2c-447e-b876-a724b1ed939c.tmp
                                              • Size 1KB
                                              • SHA256 f179f39e7590dc2c54d52536689f7a170aa2194d5dfadd94c2a5b171dee289e6
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa816b191-6a64-4dfd-b505-55c917be84e9.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa816b191-6a64-4dfd-b505-55c917be84e9.tmp
                                              • Size 14KB
                                              • SHA256 2f16a8b06b390186b19c1fec6d4044421d006745d0d7235a1744468690d1f9d2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa8f897fc-d747-4874-9ec1-513908d4ec4e.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa8f897fc-d747-4874-9ec1-513908d4ec4e.tmp
                                              • Size 8KB
                                              • SHA256 609f808e6a8951c6a49ad0dc67d90e1d6f9dfd4f08df9723bf37fe5b5513bad0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa9bb0484-b8ac-4362-b915-4ed48b267277.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawa9bb0484-b8ac-4362-b915-4ed48b267277.tmp
                                              • Size 14KB
                                              • SHA256 74e430edf25847a7ecd596600485d176e577b711c967cf29728a66b068580508
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawaa8e1c8e-fe5f-44b5-a0f2-e7f5f7b65be6.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawaa8e1c8e-fe5f-44b5-a0f2-e7f5f7b65be6.tmp
                                              • Size 14KB
                                              • SHA256 45d6e3062623ec9173991c745e2c4061edbbf27bb87a58967c6d283eeb5ae47b
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawb09f45a5-2566-4683-b641-3c000ba76891.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawb09f45a5-2566-4683-b641-3c000ba76891.tmp
                                              • Size 8KB
                                              • SHA256 8224da3453751374b1ffbc3ef1e985af977f9000dba30804061a37b2a0e08d13
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawb329ba4c-c970-4c2c-85ad-e943c54ab080.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawb329ba4c-c970-4c2c-85ad-e943c54ab080.tmp
                                              • Size 11KB
                                              • SHA256 9abf834f33bac61989635508260e512fed676e95e7d29f9a51fea89ab239fe2e
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawb4da5be7-cc43-4d01-9466-c663b1eb39a3.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawb4da5be7-cc43-4d01-9466-c663b1eb39a3.tmp
                                              • Size 8KB
                                              • SHA256 aa97d53357ccc270f6c9124e5644bb18a8dedbf0df71bd1d7a52a8af2d4503ed
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawb66bf15b-5e14-481d-b584-0501740827ac.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawb66bf15b-5e14-481d-b584-0501740827ac.tmp
                                              • Size 14KB
                                              • SHA256 3320f38571a8816ed444165c10806a14c7b270182b41f9bd4df12c69e47cd7a7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawbc6850af-26f2-4900-9bf5-ac6daa608fb0.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawbc6850af-26f2-4900-9bf5-ac6daa608fb0.tmp
                                              • Size 11KB
                                              • SHA256 a59fc766c2525a3c62b13c16a61d0f9a148003c456a8a05ba50601ad54a19cad
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawbd4508c7-c66b-4553-b88f-8ad2f37e2527.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawbd4508c7-c66b-4553-b88f-8ad2f37e2527.tmp
                                              • Size 6KB
                                              • SHA256 df7ea0aa70956736ddf839c5ad0c95b729bfd0ffe2696d3bc19bc1292879a05f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawbdc458ae-30e8-437b-a414-28f14ec1caad.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawbdc458ae-30e8-437b-a414-28f14ec1caad.tmp
                                              • Size 8KB
                                              • SHA256 228457d8153b804b434ab57cf873537097d76a7ff59e11a43aa5600957496b77
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawc16d03c7-34dc-40d9-a87a-66556cdb74e2.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawc16d03c7-34dc-40d9-a87a-66556cdb74e2.tmp
                                              • Size 13KB
                                              • SHA256 59df0e94923b123ad0647c16f04ddd332e9e339d2838fd2d0de9fd06960e27aa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawc4fb073d-0391-44b5-8be3-5acd94ddb01e.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawc4fb073d-0391-44b5-8be3-5acd94ddb01e.tmp
                                              • Size 6KB
                                              • SHA256 58f9aac76cf1756e0593d14a6342fd241df75c62f9dc096cf1a92e6c58c98474
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawc58179e1-0328-4d1d-a7e9-e934274756e7.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawc58179e1-0328-4d1d-a7e9-e934274756e7.tmp
                                              • Size 14KB
                                              • SHA256 d5c6acbab8a582e13f414a8911a497c54098f6787bca6762a89985c5e2cfcfd2
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawcb6d9b7f-6236-496d-99d3-5c677097cc58.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawcb6d9b7f-6236-496d-99d3-5c677097cc58.tmp
                                              • Size 9KB
                                              • SHA256 a3ed91e5784bf599a65cb383a7735e81bc3d0bf8bf80a00eb6611132fe626afa
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawcfd22ba3-b7f7-43be-bb88-0695a98fc631.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawcfd22ba3-b7f7-43be-bb88-0695a98fc631.tmp
                                              • Size 12KB
                                              • SHA256 31f7f98473a39a636052d596910f8b6a674f57b7a45b80e2e3949cc3a8c653b0
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawd142f41c-a39f-4dc6-a359-b54c8ce357fd.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawd142f41c-a39f-4dc6-a359-b54c8ce357fd.tmp
                                              • Size 8KB
                                              • SHA256 792893b37094df37b18ab9f3b046bfd4b7cec6d250b9d33ad7375d29a7b08ece
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawd33d38c1-8f4c-426b-bd44-e3f0a8db47a1.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawd33d38c1-8f4c-426b-bd44-e3f0a8db47a1.tmp
                                              • Size 6KB
                                              • SHA256 93b323548d0234f6574ca8bca6ffde191eb99faef0e93850a91d646d0a00c24d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawd3d52c1d-9825-4518-a08f-2be70aa2d31d.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawd3d52c1d-9825-4518-a08f-2be70aa2d31d.tmp
                                              • Size 9KB
                                              • SHA256 d186bc2cc15c9e7a10bb9aaad6f15cf1f48407159b13c88bcd93e27fb60781de
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawd5030a40-8f22-4e7c-a9c4-d46722776a18.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawd5030a40-8f22-4e7c-a9c4-d46722776a18.tmp
                                              • Size 9KB
                                              • SHA256 c426012051bbed25db07608ae8afca6088b7a086c51172ef1fcd6e5c2578563f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawdf141eed-b443-458f-999d-abefb601f250.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawdf141eed-b443-458f-999d-abefb601f250.tmp
                                              • Size 14KB
                                              • SHA256 0ad47814fe6854e6362b16b011eacaa8404a5dfc22f138d8cc29d5266571627a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawdf61d80d-2a34-44c9-9a0b-945a1f10b78d.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawdf61d80d-2a34-44c9-9a0b-945a1f10b78d.tmp
                                              • Size 14KB
                                              • SHA256 e44146ea8b2b5a10df3640aa5658a506ce8634876d816d5e4f078d41f916de39
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe4c92741-409f-4f0e-b476-01ede7812b6b.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe4c92741-409f-4f0e-b476-01ede7812b6b.tmp
                                              • Size 14KB
                                              • SHA256 7da62b913e16a89bacb8790ee5a4a58f3e248c4e709225740fd8e3cf64c9826d
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe6b3bd78-a7d4-4c6b-9ad5-5486987ca9d2.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe6b3bd78-a7d4-4c6b-9ad5-5486987ca9d2.tmp
                                              • Size 8KB
                                              • SHA256 d9151d3b83a9ad02d269497a94aca7e1097581daa90781abbc882c65f0b999b5
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe6dfb018-e3e7-4741-9984-19229cb09d17.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe6dfb018-e3e7-4741-9984-19229cb09d17.tmp
                                              • Size 1KB
                                              • SHA256 ff3ca12ee4b598daec47b7487d8e4e9637e8adac98e0e6e3fa2011fc1700cb19
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe6f64b6c-721d-440d-b067-1acc54a3c183.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe6f64b6c-721d-440d-b067-1acc54a3c183.tmp
                                              • Size 14KB
                                              • SHA256 af60461febb52002e2e2eff893e7ee6a146fe9e55faa23dd6016705e748f1ea1
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe72f4e8d-455a-4f6c-ae2e-355e7f4633a4.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe72f4e8d-455a-4f6c-ae2e-355e7f4633a4.tmp
                                              • Size 11KB
                                              • SHA256 66da8a0f1522c0902784f043f39862c64e70994f45c27f1764eaae6cad481256
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe8814a7f-7f13-489f-8108-19a882e521ed.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawe8814a7f-7f13-489f-8108-19a882e521ed.tmp
                                              • Size 941B
                                              • SHA256 a204019e326a083946a15ad49415f418249752bb17dd0ca2e79359e7d57ffd85
                                              • MD5 SHA1 SHA512 TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawf1f87ab9-a87a-49dc-8093-5b1c6d00e4be.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawf1f87ab9-a87a-49dc-8093-5b1c6d00e4be.tmp
                                              • Size 12KB
                                              • SHA256 69a9a9eb186c3bf6bf2c89b3ddf0a7d8a8e2f1870c1465ed9a6fa54ea62defe7
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawf22b8353-aadd-49fb-9af9-e07f423b278e.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawf22b8353-aadd-49fb-9af9-e07f423b278e.tmp
                                              • Size 9KB
                                              • SHA256 e8a47bd672cfea96ddf2718a09c20c45b8cd3adecce7b9b4809929c1d48df86f
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawf22ccc04-f41e-41ac-bde2-03d673c694b5.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawf22ccc04-f41e-41ac-bde2-03d673c694b5.tmp
                                              • Size 10KB
                                              • SHA256 89423511e447db2375884cfdb5da4aae925346e7e5e9b30c51d3ba975f90112a
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawf4ae8a1c-dcfe-4ae3-994a-3664c42fa7aa.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawf4ae8a1c-dcfe-4ae3-994a-3664c42fa7aa.tmp
                                              • Size 14KB
                                              • SHA256 0762957e26d7d4dd54b79be9b4693c74bc6d64d20cc83b38123ac2eb0d0a3cba
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawf92f3de0-4b62-4ca8-aa4c-859a8451d315.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawf92f3de0-4b62-4ca8-aa4c-859a8451d315.tmp
                                              • Size 9KB
                                              • SHA256 993e9f3a0d96565e4250ad2c452a47775e68e5fe1f98d3101af7d0b99122db92
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawfd119233-6923-49be-a498-a999886d31b8.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_4c1e90f6-d680-4bd4-a233-1e111c3dee9f.rawfd119233-6923-49be-a498-a999886d31b8.tmp
                                              • Size 10KB
                                              • SHA256 3eb1711dedca5b89c23b86ac06f798df9b3bbfa489289d313fb582fa486aa5f6
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw
                                              • Size 381B
                                              • SHA256 188f654e369ffcbd4d8da03d9776d3a4a1a2baea180320133172bd76177ace72
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw028ea2d9-860b-43e4-a229-560524c4a322.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw028ea2d9-860b-43e4-a229-560524c4a322.tmp
                                              • Size 621B
                                              • SHA256 6c39cd94447c1602ec6acd7c3e872156e9a88ecf08e3fb7e124c06bfe1658722
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw41d1f036-c122-49ed-b356-fc3f8ecc13db.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw41d1f036-c122-49ed-b356-fc3f8ecc13db.tmp
                                              • Size 1KB
                                              • SHA256 8e1d2440e1083d02d5bcc2e61298c67a647986086abfcb6bd2ba5f019a256c91
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw5958ac6a-d0f9-48c6-8c23-ed0a628556b8.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw5958ac6a-d0f9-48c6-8c23-ed0a628556b8.tmp
                                              • Size 781B
                                              • SHA256 694a40cc9b52422212e30d54000169094164156e042af02a675a813ce833c523
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw67073a81-b723-4bae-b1ef-c4a27e2fab14.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw67073a81-b723-4bae-b1ef-c4a27e2fab14.tmp
                                              • Size 973B
                                              • SHA256 da2682d0dbba541d363f10276eae9ee6f49b196cecc0990a8aed7cdba64b10c4
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw8986863c-252d-4aea-bf10-69b98c234874.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw8986863c-252d-4aea-bf10-69b98c234874.tmp
                                              • Size 1KB
                                              • SHA256 f45950cdf36ba381eb7c58d26481cc2b60303c97fe18db3379a5fc243d3d760b
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw9dec96f1-d765-49fd-8136-f980b3899dbb.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw9dec96f1-d765-49fd-8136-f980b3899dbb.tmp
                                              • Size 1KB
                                              • SHA256 f8523bd4bd8c73098804024eaf9430dd935c3f1a9f21a05978916fd989ce254a
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw9f566b1c-c6b0-41f9-b9fd-44ff279b4e5a.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.raw9f566b1c-c6b0-41f9-b9fd-44ff279b4e5a.tmp
                                              • Size 957B
                                              • SHA256 3b7c8d665c3ba1f65e4f73588a1730ec200f9fbf022a2e9f6ed457a87eb982d2
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.rawab3d1890-836f-48c9-8017-54577dadc1b2.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.rawab3d1890-836f-48c9-8017-54577dadc1b2.tmp
                                              • Size 1KB
                                              • SHA256 2032a047b27466fa762a4b609d9a46eefec89fddbd03d4801411ae88e73625cf
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.rawce701004-7b7a-4458-8618-a8e30ddd1047.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.rawce701004-7b7a-4458-8618-a8e30ddd1047.tmp
                                              • Size 493B
                                              • SHA256 d09fa919da5cecbe1e9b402e73c15f76e6c7d6e5952b03dac85f1295d4f848d0
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.rawd6f099b9-3dab-4293-a53e-39edc62c5eb6.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.rawd6f099b9-3dab-4293-a53e-39edc62c5eb6.tmp
                                              • Size 1KB
                                              • SHA256 abda750877ac224345d18d943b17a25a242b0d97327b4b7561c59a29321249c4
                                              • MD5 SHA1 SHA512 TLSH

                                              session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.rawde56ad1d-8274-41ee-b5d0-f07da418fe2c.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_6a37ed40-e333-4fe0-867a-fcacabfd0f8e.rawde56ad1d-8274-41ee-b5d0-f07da418fe2c.tmp
                                              • Size 973B
                                              • SHA256 6081b218a1caa96a7f4b34d3b61bbee8228738b0581139c313807c204b58d75b
                                              • MD5 SHA1 SHA512 TLSH

                                              MANIFEST-000001

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\MANIFEST-000001
                                              • Size 41B
                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                              • MD5 SHA1 SHA512

                                              rhs.dat

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\rhs.dat
                                              • Size 113KB
                                              • SHA256 757aecbf356f38401e701a42d20954cb7cc3a4db011da203573f1068c01852db
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              ssdfp3048.0.1722076333

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3048.0.1722076333
                                              • Size 203B
                                              • SHA256 3cf1e16d9a206430e9b79d33675e9eb50cae9272c3f19091f67feb920ff03d8d
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp3048.0.17220763332885c09e-73c0-4788-883c-51d77ea07581.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3048.0.17220763332885c09e-73c0-4788-883c-51d77ea07581.tmp
                                              • Size 1009B
                                              • SHA256 74d63b75714a1483cf2e4905c2e75cb8607187ef6c8a42974a1c3443cc38685e
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp3048.0.1722076333675c6dc4-f53f-492c-bdac-3ae4ceff7304.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3048.0.1722076333675c6dc4-f53f-492c-bdac-3ae4ceff7304.tmp
                                              • Size 1KB
                                              • SHA256 8a73d7113e0fd1670c482466fa6ff67569baec65b866573dd781c979aeb0b1d3
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp3048.0.172207633388252bee-a25f-4068-9c81-a1cd0dbbd121.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3048.0.172207633388252bee-a25f-4068-9c81-a1cd0dbbd121.tmp
                                              • Size 265B
                                              • SHA256 f49625aaa4776150a83e7e650bbb92dd585089466ea3fd09bd0b54106403b98c
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633
                                              • Size 456B
                                              • SHA256 0fa14622e08cee8e853ae255586012bef0f004f6de6d57db78e19f47f2ae3278
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633162fb490-79d3-482f-a193-a6d7883e5745.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633162fb490-79d3-482f-a193-a6d7883e5745.tmp
                                              • Size 1KB
                                              • SHA256 84f02ac0644eeb8b10aa3d43c45acf2be0373b179e859b454e973e198e90668d
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.24659163329b9689a-7c89-44e1-8934-26ab14274b1d.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.24659163329b9689a-7c89-44e1-8934-26ab14274b1d.tmp
                                              • Size 824B
                                              • SHA256 5ede6020aa9136187069a0bcdd0cb9257441ff444fb8260bf9435de5844cff8d
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.2465916332b661116-a654-48ff-94af-32e262a2f998.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.2465916332b661116-a654-48ff-94af-32e262a2f998.tmp
                                              • Size 737B
                                              • SHA256 8bc7669904bdfe10120a3fdff47db1a20500dce96f077f0418e6d2deb2fc4f53
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.2465916332dc05ad3-9c5e-4098-a17c-ed2e956a45aa.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.2465916332dc05ad3-9c5e-4098-a17c-ed2e956a45aa.tmp
                                              • Size 3KB
                                              • SHA256 616253ada24229c972fcd7da0c79bde0aba659302393baef3a144efd18fedebc
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.24659163332b38bd6-f073-4cf8-8bc7-d67142360d1a.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.24659163332b38bd6-f073-4cf8-8bc7-d67142360d1a.tmp
                                              • Size 3KB
                                              • SHA256 d87bbfc0931fbe5e89abbf7367b0232bbf9e458fe9a7b6d0838f17cd183a9640
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.2465916333533097d-359c-4d5f-b03a-c103d0345d8b.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.2465916333533097d-359c-4d5f-b03a-c103d0345d8b.tmp
                                              • Size 3KB
                                              • SHA256 2cad2ddc3a5ebc2b8f809dab3cd634fd26e238f7655a78f9f4c6d78cddcb38a8
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633435b5460-2cf1-4506-8ada-f0a646c3b13a.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633435b5460-2cf1-4506-8ada-f0a646c3b13a.tmp
                                              • Size 647B
                                              • SHA256 4f66068c650d48deb59701b7a4074679fd20a34fbbb04a4db55a4cca9ee2d10c
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.24659163362f643dd-b606-4dc5-8e4e-8f972eea272d.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.24659163362f643dd-b606-4dc5-8e4e-8f972eea272d.tmp
                                              • Size 918B
                                              • SHA256 6b96c7aec7ba3d1a45da7f06335c1ed6487c03228c16fb2e41c12aa8937410e4
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.2465916337cba4d5c-8b10-4be5-b16c-a149930c9b19.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.2465916337cba4d5c-8b10-4be5-b16c-a149930c9b19.tmp
                                              • Size 1KB
                                              • SHA256 a6c837bba88be014806328200e7dfbe0f55d00edb451c85610f3d88e3330ac5a
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.2465916337cd6bb12-d234-4303-be05-5eac3f928e82.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.2465916337cd6bb12-d234-4303-be05-5eac3f928e82.tmp
                                              • Size 1KB
                                              • SHA256 1a476ff5ef0c8cea477054519f059f1426c0705a8ee9470ff54413b2bf9e02cd
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.2465916338e81c438-0114-4fd2-ada3-b963b8820daf.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.2465916338e81c438-0114-4fd2-ada3-b963b8820daf.tmp
                                              • Size 1KB
                                              • SHA256 2eb8cac1fc634b8cb13ec0b582b2a949e796c572a418668c96ceb3367548d565
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.2465916338fa2e201-d48c-496e-b1b1-97f43f762123.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.2465916338fa2e201-d48c-496e-b1b1-97f43f762123.tmp
                                              • Size 2KB
                                              • SHA256 7ee7db38370cfa8759203c9a579d16fd77582f0206f4c71b8c3043386133b581
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633b12e893a-9404-457d-bd24-c65839a5804b.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633b12e893a-9404-457d-bd24-c65839a5804b.tmp
                                              • Size 3KB
                                              • SHA256 6fd8068c4ea1bea65f5785b53d2fc387605f1ed9c3eaaf3ca8ba52d0fe940b95
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633b14b270c-ce7d-40c6-a62a-4a7958b92007.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633b14b270c-ce7d-40c6-a62a-4a7958b92007.tmp
                                              • Size 1KB
                                              • SHA256 811abb7ce0e6d49d8ff39273cb9c232dc74fc6749680a94d71aaf924f42ad7f2
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633ca15059c-c6a6-4ef9-8600-b1635f36e3f9.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633ca15059c-c6a6-4ef9-8600-b1635f36e3f9.tmp
                                              • Size 1KB
                                              • SHA256 9087b4050a67739ef3dab217afa174c40e145822e6dbe658baba4b25e4f7382f
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633e36b9f41-7ef0-43e1-a4d6-292e444addb7.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633e36b9f41-7ef0-43e1-a4d6-292e444addb7.tmp
                                              • Size 3KB
                                              • SHA256 950c72c5451cdd797c58de32efdd8fb5912d3613f742c24677ea0624cd8baf5a
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633e6f3701d-a99f-4400-a120-0b013075e115.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633e6f3701d-a99f-4400-a120-0b013075e115.tmp
                                              • Size 549B
                                              • SHA256 31b58edb405a52e5272ac89f4c7b6204e64e888365545f87cd5757bf3740fdf7
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633e9348e3b-7243-4486-9ed9-0a25e32a7928.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633e9348e3b-7243-4486-9ed9-0a25e32a7928.tmp
                                              • Size 3KB
                                              • SHA256 993bdaf6c0069796c0c587529c87a801f1bf4184116a8883a0ca0da83b5b9e90
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633eb588296-27f9-42a1-85a9-1a00881ecf79.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633eb588296-27f9-42a1-85a9-1a00881ecf79.tmp
                                              • Size 1KB
                                              • SHA256 0a018cb27f234d90fe33707eb85da259ce865438442951c9d542cc7bf131c2fb
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633ec37ae86-0313-44ad-91a6-3ccef7b74442.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633ec37ae86-0313-44ad-91a6-3ccef7b74442.tmp
                                              • Size 1014B
                                              • SHA256 d38384bbf6f2e47e58de9d8beeb2dad09fc3718caa062bd60c193a33ff1179b5
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633f53db488-480a-48b9-80df-1eb8dd731ace.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633f53db488-480a-48b9-80df-1eb8dd731ace.tmp
                                              • Size 3KB
                                              • SHA256 207d3b1643565819c008d25f4d7afee54dbdebffe572e219cd17716fda81ba2c
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.0.246591633ffea4bb9-c7d5-407d-81e8-36da59006fb9.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.0.246591633ffea4bb9-c7d5-407d-81e8-36da59006fb9.tmp
                                              • Size 3KB
                                              • SHA256 199c21d413ca57d80a581cf5668f9fc6577ac001787d0e371106cfcc40bf3074
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.429409274

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.429409274
                                              • Size 171B
                                              • SHA256 2cf1c5b9e41d3b8a761cbef366bbb35b5dd4642014323a1f29adac76c8bca266
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.4294092741b88cba0-b556-43be-a593-78f155e26cbd.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.4294092741b88cba0-b556-43be-a593-78f155e26cbd.tmp
                                              • Size 1KB
                                              • SHA256 79f00fe859751868a9264ca7ce192c96809f932ca48a3fb310f792ef3561ae9c
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.429409274266e96be-defd-4caa-a73b-40280038266f.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.429409274266e96be-defd-4caa-a73b-40280038266f.tmp
                                              • Size 1KB
                                              • SHA256 40393ac188c2497c0061968958c3aa7d0114ef19117191b1da94f12e419ea8d1
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.42940927427a39f32-4cb2-4217-b44c-4c7dddf2a0f2.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.42940927427a39f32-4cb2-4217-b44c-4c7dddf2a0f2.tmp
                                              • Size 1016B
                                              • SHA256 54a08d8f3d3cd7923f2ca9de087bc8413264e940ff43614735c11d8d0f57a1ac
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.4294092744670128e-2aec-4658-96f4-39aacb382e8c.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.4294092744670128e-2aec-4658-96f4-39aacb382e8c.tmp
                                              • Size 1KB
                                              • SHA256 338a74c228b24981e2e3e35287e96154b83d516682e2eeea0fa2a0c64f935303
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.4294092745605a2b6-4f69-44be-a603-3620ecf7ed8f.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.4294092745605a2b6-4f69-44be-a603-3620ecf7ed8f.tmp
                                              • Size 458B
                                              • SHA256 ce00a7f83a1349cb8770449ea60d958aaf799e52f43bdc61d2df9f8a20d1542c
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.42940927462d5810d-0c86-4a28-8ebe-ad4864ca74df.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.42940927462d5810d-0c86-4a28-8ebe-ad4864ca74df.tmp
                                              • Size 224B
                                              • SHA256 0604fae6ac786967be480c0bb8f8b73453faa6d3bdca6a6cc77764156bdf18e1
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.429409274674de9f3-bd49-45e7-8308-8166a44936e8.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.429409274674de9f3-bd49-45e7-8308-8166a44936e8.tmp
                                              • Size 920B
                                              • SHA256 d7475a0f59eaca46a7770cdca428e43022c952e320f04f72cbfa588d0799f7f1
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.42940927479a46832-6311-417e-bf64-65cbe9dd1b5f.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.42940927479a46832-6311-417e-bf64-65cbe9dd1b5f.tmp
                                              • Size 1KB
                                              • SHA256 ee6ce03d7448fd7f792b3d954f117b104c36524b8075f56ccb79a36f42bd2512
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.4294092748b3e4b41-43f4-4009-b675-0846ee6d11bb.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.4294092748b3e4b41-43f4-4009-b675-0846ee6d11bb.tmp
                                              • Size 200B
                                              • SHA256 62c7505754b6ea69518c5d6ce42956e9eb6bd4b6be56784e1c95544619a981bc
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.4294092748dd4a97e-8388-40eb-963c-5633c6618906.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.4294092748dd4a97e-8388-40eb-963c-5633c6618906.tmp
                                              • Size 826B
                                              • SHA256 0f870a0e641a061bb92b37d62536bb9d37bd5b668972c3da890b2b5daadaa16b
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.429409274ba7378a2-0d1a-40ec-889f-e8b302c42175.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.429409274ba7378a2-0d1a-40ec-889f-e8b302c42175.tmp
                                              • Size 551B
                                              • SHA256 9b64672717b83bb7731e95a2036bfe2f9b0540903f201e0b580a12d42081a4ce
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.429409274d0d5d717-1e7d-4c0b-b5fe-fa58399805a1.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.429409274d0d5d717-1e7d-4c0b-b5fe-fa58399805a1.tmp
                                              • Size 739B
                                              • SHA256 577398f147c66fa6f6168bb9d3d375788e9727e48cb37029c67f7c12c1b227ea
                                              • MD5 SHA1 SHA512 TLSH

                                              ssdfp6356.1.429409274e131c512-e286-4559-b62a-0273b99baf7e.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6356.1.429409274e131c512-e286-4559-b62a-0273b99baf7e.tmp
                                              • Size 649B
                                              • SHA256 88073e0d8bdf612038e3abe27566674607461a25383bc757a2592878819dacf8
                                              • MD5 SHA1 SHA512 TLSH

                                              suggestions_cache.json5e96af0c-4286-461f-8fd9-102dfb177f86.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json5e96af0c-4286-461f-8fd9-102dfb177f86.tmp
                                              • Size 652KB
                                              • SHA256 e1be0f1ffeb0410f934c6408d73c2050f4c4cafe9f4e11383fc8f122dc36c0ec
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State39330d6b-fe8e-4124-99d4-018ea1baeae0.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State39330d6b-fe8e-4124-99d4-018ea1baeae0.tmp
                                              • Size 3KB
                                              • SHA256 428e93afc86cf3b1d8e3a7f85c1371f0f222b8865e2f329960462b8eaf47f94e
                                              • MD5 SHA1 SHA512 TLSH

                                              Local State4e75e5ab-7ad2-4226-9b57-af7e887a9082.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State4e75e5ab-7ad2-4226-9b57-af7e887a9082.tmp
                                              • Size 5KB
                                              • SHA256 0a535eac03b4f2e9a41129fff021ac47a4eccdaa98500293c05a7260160ccd02
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local State7e454e61-648e-423b-8e15-f5192867faaf.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State7e454e61-648e-423b-8e15-f5192867faaf.tmp
                                              • Size 5KB
                                              • SHA256 b265c010e1de011f0cbb0ceeff9bce87fc56f85f6652250e46f109b31e92baf3
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              Local Stateaf9ce931-bc00-47bb-8232-ea0d19861b34.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Stateaf9ce931-bc00-47bb-8232-ea0d19861b34.tmp
                                              • Size 3KB
                                              • SHA256 7dee7eac2e760d9d23729b9822622a5d20aa8d7f7422f9cd4925ff5e799637a2
                                              • MD5 SHA1 SHA512 TLSH

                                              Local Stateb811f389-0764-4328-a8bb-cc25242d4d42.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Stateb811f389-0764-4328-a8bb-cc25242d4d42.tmp
                                              • Size 4KB
                                              • SHA256 e340b81fd5524b457c1323420b4518976919970b8106a517acc429a94c000346
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              manifest.json

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\SafetyTips\3092\manifest.json
                                              • Size 72B
                                              • SHA256 a408d874f731da9fd242aca690324d2fa05a2b80ee0744e49543dd514a1cb07f
                                              • MD5 SHA1 SHA512 TLSH

                                              VariationsSafeSeedV28ae21100-f042-4663-9ca6-968c77ccfc2e.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSafeSeedV28ae21100-f042-4663-9ca6-968c77ccfc2e.tmp
                                              • Size 19B
                                              • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                              • MD5 SHA1 SHA512

                                              VariationsSeedV248ce1816-5c0c-4bcf-88e2-ebc75ef23d7e.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV248ce1816-5c0c-4bcf-88e2-ebc75ef23d7e.tmp
                                              • Size 11B
                                              • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                              • MD5 SHA1 SHA512

                                              clipboard_injection_guard_rules.json

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\clipboard_injection_guard_rules.json
                                              • Size 6KB
                                              • SHA256 b8d84b82da3d90323de6cf1b4e3594bf7acb99101c72379b10f4b982f82bd487
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              3b1293b1cd2b0b9ebc8c64bf5c6a0407ffad78a0364bbac71c5fe7d3e1bd7657

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\3b1293b1cd2b0b9ebc8c64bf5c6a0407ffad78a0364bbac71c5fe7d3e1bd7657
                                              • Size 178KB
                                              • SHA256 3b1293b1cd2b0b9ebc8c64bf5c6a0407ffad78a0364bbac71c5fe7d3e1bd7657
                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                              metadata.json4df02399-aa17-4130-976f-b27005c0428a.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json4df02399-aa17-4130-976f-b27005c0428a.tmp
                                              • Size 236B
                                              • SHA256 8c380dbdd0652af7fd86269f22feae06d09f220c8d0a0e17ac200d003967c9f4
                                              • MD5 SHA1 SHA512 TLSH

                                              metadata.json649b3dc9-ae33-46ac-b180-42dd79ea7d7a.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json649b3dc9-ae33-46ac-b180-42dd79ea7d7a.tmp
                                              • Size 124B
                                              • SHA256 b26d57b79d4e635181f5c9aab4811e09a80546a6a7ff6f102b7a4a6b07a19326
                                              • MD5 SHA1 SHA512 TLSH

                                              metadata.jsonbf7ae13b-4a9c-4750-ab29-c40479134568.tmp

                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.jsonbf7ae13b-4a9c-4750-ab29-c40479134568.tmp
                                              • Size 13B
                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                              • MD5 SHA1 SHA512

                                              memory/5180-2356-0x0000023C4EFE0000-0x0000023C5088B000-memory.dmp

                                              memory/5380-505-0x00007FF8E1470000-0x00007FF8E1471000-memory.dmp

                                              memory/5380-504-0x00007FF8DFAD0000-0x00007FF8DFAD1000-memory.dmp

                                              memory/6496-3196-0x0000024A7C640000-0x0000024A7DEEB000-memory.dmp

                                              memory/6496-4349-0x0000024A7C640000-0x0000024A7DEEB000-memory.dmp

                                              memory/6496-4231-0x0000024A7C640000-0x0000024A7DEEB000-memory.dmp

                                              memory/6496-4196-0x0000024A7C640000-0x0000024A7DEEB000-memory.dmp