Analysis

  • user interaction
    yes
  • max time kernel
    98s
  • max time network
    99s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    29/10/2026, 22:22

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample261029-2aecsattfs
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 18 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 50 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5380
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1184
      • C:\Users\Admin\AppData\Local\Temp\7zS0A43BB88\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS0A43BB88\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=OTM0MGUyNGUzZmFjZTkxMTNmZGFjZTkxZTIyMGI0NzAzNmY0NGFlZmU4NjYzNTdjZGQwNDZiMjcxMTM1ZjE3ZDp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj12aWRlby1zdHJlYW1pbmciLCJ0aW1lc3RhbXAiOiIxNzkzMzEyNTU0LjY3MTEiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoidmlkZW8tc3RyZWFtaW5nIiwibWVkaXVtIjoicGIiLCJzb3VyY2UiOiJ3cmsifSwidXVpZCI6ImJhMTg2ZjNmLWM3MmUtNDBmOS1hMDMzLTRhMTI4ZDA3YWY3MSJ9
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:1204
        • C:\Users\Admin\AppData\Local\Temp\7zS0A43BB88\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS0A43BB88\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff6efe44258,0x7ff6efe44268,0x7ff6efe44278
          4⤵
          • Executes dropped EXE
          PID:1340
        • C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:3220
        • C:\Users\Admin\AppData\Local\Temp\7zS0A43BB88\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS0A43BB88\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1204 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_20261029222236" --session-guid=61214a03-b12a-4245-a5ad-16d54e7dc18f --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=9C08000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:5212
          • C:\Users\Admin\AppData\Local\Temp\7zS0A43BB88\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS0A43BB88\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x294,0x298,0x29c,0x264,0x2a0,0x7ff6efe44258,0x7ff6efe44268,0x7ff6efe44278
            5⤵
            • Executes dropped EXE
            PID:952
          • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer.exe" --backend --initial-pid=1204 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361" --session-guid=61214a03-b12a-4245-a5ad-16d54e7dc18f --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=139.0.6053.22
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:3028
            • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff7b1184258,0x7ff7b1184268,0x7ff7b1184278
              6⤵
              • Executes dropped EXE
              PID:4332
            • C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:3396
              • C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xd5c9cc,0xd5c9d8,0xd5c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:1028
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:4924
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xc9c9cc,0xc9c9d8,0xc9c9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:5988
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:4828
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4976
                    • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffac7b3aa00,0x7ffac7b3aa10,0x7ffac7b3aa20
                      10⤵
                      • Executes dropped EXE
                      PID:416
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:5980
                    • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffac7b3aa00,0x7ffac7b3aa10,0x7ffac7b3aa20
                      10⤵
                      • Executes dropped EXE
                      PID:2568
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x288,0x28c,0x290,0x234,0x294,0x12d7324,0x12d7330,0x12d733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:2700
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:3744
                      • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffac7b3aa00,0x7ffac7b3aa10,0x7ffac7b3aa20
                        11⤵
                        • Executes dropped EXE
                        PID:4612
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:1232
                      • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffac7b3aa00,0x7ffac7b3aa10,0x7ffac7b3aa20
                        11⤵
                        • Executes dropped EXE
                        PID:2392
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:1100
                      • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x220,0x224,0x260,0x1fc,0x264,0x7ffac7b3aa00,0x7ffac7b3aa10,0x7ffac7b3aa20
                        11⤵
                        • Executes dropped EXE
                        PID:5564
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:5896
              • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ffac7b3aa00,0x7ffac7b3aa10,0x7ffac7b3aa20
                7⤵
                • Executes dropped EXE
                PID:5156
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1704,i,4474265642401815876,1948031424293592248,262144 --field-trial-handle=1896,i,12667625361437754969,4529299250198880074,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,4384291884929048014,4913101266107311086,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:2668
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2172,i,6844336601082847593,9790789098093675355,524288 --field-trial-handle=1896,i,12667625361437754969,4529299250198880074,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,4384291884929048014,4913101266107311086,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2180 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:1820
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2412,i,1632930461059392706,9073136403670409418,524288 --field-trial-handle=1896,i,12667625361437754969,4529299250198880074,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,4384291884929048014,4913101266107311086,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2424 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2724
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3544,i,9575725736678509998,15867714785910274219,1572864 --field-trial-handle=1896,i,12667625361437754969,4529299250198880074,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,4384291884929048014,4913101266107311086,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3864 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5476
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4232,i,12848397845082988839,14907996463119875746,524288 --field-trial-handle=1896,i,12667625361437754969,4529299250198880074,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,4384291884929048014,4913101266107311086,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4244 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6080
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4484,i,7724854558449265155,13922000184731938578,1572864 --field-trial-handle=1896,i,12667625361437754969,4529299250198880074,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,4384291884929048014,4913101266107311086,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4456 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1892
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4488,i,12313917374349023249,2842643626923201879,524288 --field-trial-handle=1896,i,12667625361437754969,4529299250198880074,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,4384291884929048014,4913101266107311086,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4460 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5944
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3880,i,17636452983889846900,15648590259244216171,524288 --field-trial-handle=1896,i,12667625361437754969,4529299250198880074,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,4384291884929048014,4913101266107311086,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4768 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3464
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4776,i,8268998903605712481,8193728775842794731,524288 --field-trial-handle=1896,i,12667625361437754969,4529299250198880074,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,4384291884929048014,4913101266107311086,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4760 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5708
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5068,i,16718375700934999872,12100572358421649001,1572864 --field-trial-handle=1896,i,12667625361437754969,4529299250198880074,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1900,i,4384291884929048014,4913101266107311086,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4388 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7308
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6416
              • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffac7b3aa00,0x7ffac7b3aa10,0x7ffac7b3aa20
                7⤵
                • Executes dropped EXE
                PID:6452
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1664,i,5069751965115270871,3973836964925350834,262144 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2032 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7040
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1904,i,606283065255110279,17174028010288696589,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2204 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                PID:7052
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2416,i,3149030531000515405,10544272756648484550,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2492 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:8200
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3344,i,1877621307379110824,15201631202015981578,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3372 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:8260
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3364,i,15711321189093900418,14189521302199210937,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3404 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:8272
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3392,i,15918339105255760642,18014107201325944003,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3436 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:8264
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3492,i,9755461324964485866,10778707271561934502,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3532 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:8276
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3508,i,16513384640148425800,11214632713389403092,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3556 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:8284
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3444,i,5409568971626796989,15307119175442029172,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3500 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:8292
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3412,i,54354155315993666,6129126466477662952,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3464 /prefetch:14
                7⤵
                • Executes dropped EXE
                PID:8944
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3624,i,2819346460214346556,15710473030696888431,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3640 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8968
              • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_gx_splash.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                7⤵
                • Executes dropped EXE
                • Modifies registry class
                • Suspicious use of AdjustPrivilegeToken
                PID:8372
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4752,i,1096588796712446326,5699870452934180632,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4760 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8820
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4920,i,15280627916319684465,5478570339089044473,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4932 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:3764
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5260,i,13783205179958119414,12867579617385380951,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5276 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:1880
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5416,i,926415311045899383,7875596874062904309,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5440 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:8912
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6312,i,2166029286853121216,13648959501896273304,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6300 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:6516
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6672,i,8516958903902406327,1199855961113920529,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6752 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:9360
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6888,i,16512513695408296726,7703146638306960448,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6872 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7660
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5940,i,13450281917922023332,5111812203916847029,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6932 /prefetch:12
                7⤵
                • Executes dropped EXE
                PID:10140
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6864,i,12757479588116550011,11599930644124632273,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6576 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6684
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6480,i,5555685081207123607,10276806981762153259,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6684 /prefetch:14
                7⤵
                  PID:9364
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6372,i,16756011161817132964,11354171828668510450,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7288 /prefetch:14
                  7⤵
                    PID:9412
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7296,i,8498147030559178781,1731532806568357980,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7316 /prefetch:14
                    7⤵
                    • Enumerates system info in registry
                    PID:9436
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7380,i,1442358819887911567,16722455516469973159,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7564 /prefetch:14
                    7⤵
                    • Enumerates system info in registry
                    PID:9484
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7452,i,4157928205595472678,10948752417529603215,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7588 /prefetch:14
                    7⤵
                      PID:9508
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6732,i,16992874738789074171,2357832732154717996,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7836 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:9700
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7964,i,3246302371999126553,5635245979840021344,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7844 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:9736
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8124,i,2276447253865841260,4946648780712478898,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8156 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:9772
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8008,i,7481273987781197164,5363571023997555370,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8116 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:9796
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8136,i,14471998619342308379,14427869895374998542,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8176 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:9820
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8184,i,15962160553676057457,5316075019108987552,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8212 /prefetch:14
                      7⤵
                      • Enumerates system info in registry
                      PID:9844
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8528,i,440248157321543182,17639947071561929375,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8648 /prefetch:14
                      7⤵
                        PID:9928
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8644,i,18230919220835108951,4724664915921457445,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8684 /prefetch:14
                        7⤵
                          PID:9916
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8912,i,12149425391646498990,13604058181478379297,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8924 /prefetch:14
                          7⤵
                          • Enumerates system info in registry
                          PID:10060
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=9100,i,6681722090029954281,8916153881184025917,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9168 /prefetch:9
                          7⤵
                            PID:7412
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9164,i,5227644587484823307,18249187654563822896,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9280 /prefetch:14
                            7⤵
                              PID:7448
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9492,i,11960426457239799058,13035069062548823463,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9452 /prefetch:14
                              7⤵
                              • Enumerates system info in registry
                              PID:7484
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9508,i,15994534989327903086,7533923240871664689,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9636 /prefetch:1
                              7⤵
                              • Enumerates system info in registry
                              PID:7544
                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                              7⤵
                              • Reads the TCP/IP host and domain name from the registry
                              • Enumerates system info in registry
                              PID:3440
                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff785ddbde8,0x7ff785ddbdf8,0x7ff785ddbe08
                                8⤵
                                  PID:6272
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10216,i,11190064417004214112,1898281481375984407,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10212 /prefetch:14
                                7⤵
                                  PID:4108
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10220,i,10385082294303649081,5709873234681718441,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10280 /prefetch:14
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:5508
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=10508,i,10724845347794468733,7273587688622556314,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10564 /prefetch:1
                                  7⤵
                                  • Enumerates system info in registry
                                  PID:3368
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10768,i,16118563593693680855,6097089460170823028,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10780 /prefetch:14
                                  7⤵
                                    PID:492
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10788,i,2378496999763199041,16422222260185286016,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10812 /prefetch:14
                                    7⤵
                                      PID:2668
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9596,i,16637533367415539946,2654772400722498259,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=9576 /prefetch:14
                                      7⤵
                                      • Enumerates system info in registry
                                      PID:7516
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11032,i,14002466556950803450,15820337743449021150,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11008 /prefetch:14
                                      7⤵
                                        PID:9008
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10888,i,17108000309036172714,6446138767648556573,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10876 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:9440
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10172,i,5045869662891773770,12420510036398494060,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=9512 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:7312
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10356,i,8846830260265174860,11642627567340328317,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10348 /prefetch:14
                                        7⤵
                                        • Enumerates system info in registry
                                        PID:9260
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=3868,i,14268632750273465770,4799124595898190094,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3380 /prefetch:9
                                        7⤵
                                          PID:9560
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10332,i,12185136881238213110,9286321636190551590,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11100 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:696
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10296,i,9680049053098176217,11082328584646508654,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=3916 /prefetch:14
                                          7⤵
                                          • Enumerates system info in registry
                                          PID:10040
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10908,i,9670226110569841519,7232987080360343997,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10280 /prefetch:14
                                          7⤵
                                            PID:8188
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10824,i,2004577777403313966,11239933162761024611,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=9476 /prefetch:14
                                            7⤵
                                              PID:9856
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10848,i,2086629311988020783,3330294044080548101,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=4380 /prefetch:14
                                              7⤵
                                                PID:7932
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9572,i,5366711093873893783,16263565857689194179,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=10976 /prefetch:14
                                                7⤵
                                                  PID:1388
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3392,i,11186932281011383154,8311653768734939681,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=3908 /prefetch:14
                                                  7⤵
                                                    PID:2284
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5684,i,10259074307069721050,1641966639640280067,524288 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8816 /prefetch:14
                                                    7⤵
                                                      PID:4868
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=8636,i,14323634832817651314,5625897099210435775,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8348 /prefetch:9
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:6580
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=10368,i,5992690136872961719,4980401019935747880,1572864 --field-trial-handle=2036,i,17349929139937224261,16887435665529387359,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2040,i,8203673182624761865,6588546886055616420,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=11224 /prefetch:9
                                                      7⤵
                                                      • Enumerates system info in registry
                                                      PID:1792
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                                4⤵
                                                • Executes dropped EXE
                                                • Writes a Windows system DLL name to a user directory
                                                • System Location Discovery: System Language Discovery
                                                PID:2300
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\assistant_installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\assistant_installer.exe" --version
                                                4⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                • Enumerates system info in registry
                                                • Suspicious use of WriteProcessMemory
                                                PID:4908
                                                • C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\assistant_installer.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xd5c9cc,0xd5c9d8,0xd5c9e4
                                                  5⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  PID:4508
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                          1⤵
                                          • Executes dropped EXE
                                          • Loads dropped DLL
                                          • Enumerates system info in registry
                                          • Suspicious use of WriteProcessMemory
                                          PID:4440
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffac7b3aa00,0x7ffac7b3aa10,0x7ffac7b3aa20
                                            2⤵
                                            • Executes dropped EXE
                                            PID:2200
                                        • C:\Windows\system32\wbem\unsecapp.exe
                                          C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                          1⤵
                                            PID:3748
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                            1⤵
                                            • Reads the TCP/IP host and domain name from the registry
                                            PID:3236
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                              C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=139.0.6053.22 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff785ddbde8,0x7ff785ddbdf8,0x7ff785ddbe08
                                              2⤵
                                                PID:2800
                                              • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                2⤵
                                                  PID:6204

                                              Network

                                                    MITRE ATT&CK Enterprise v16

                                                    Replay Monitor

                                                    Loading Replay Monitor...

                                                    Downloads

                                                    E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                    • Size 471B
                                                    • SHA256 9c5a4dcdfb2a231976a70fed9c0ee4ff16b08f44dc50b9f37f970ba7f3b31ca9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                    • Size 416B
                                                    • SHA256 536b1e6b89e9e84f6783cb0dce7fe679f140ed059ddeae46090adfe78fcba9c4
                                                    • MD5 SHA1 SHA512 TLSH

                                                    snapshot-new.baf

                                                    • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                                    • Size 20B
                                                    • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                    • MD5 SHA1 SHA512

                                                    f_000001

                                                    • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                    • Size 163KB
                                                    • SHA256 f542dd34db7cac056ef236ca75857e7218f55fb4b052d9d568029fa9ca7e6d6d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    139.0.6053.22.manifest

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\139.0.6053.22.manifest
                                                    • Size 225B
                                                    • SHA256 0e2382b6740d5bc4bb6c73bb7fb0a6eaac358e1c0eb85a86be697e2bf58d257a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    150x150Logo.scale-100.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\150x150Logo.scale-100.png
                                                    • Size 1KB
                                                    • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                    • MD5 SHA1 SHA512 TLSH

                                                    150x150Logo.scale-100_contrast-white.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\150x150Logo.scale-100_contrast-white.png
                                                    • Size 1KB
                                                    • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    150x150Logo.scale-140.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\150x150Logo.scale-140.png
                                                    • Size 1KB
                                                    • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    150x150Logo.scale-140_contrast-white.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\150x150Logo.scale-140_contrast-white.png
                                                    • Size 1KB
                                                    • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                    • MD5 SHA1 SHA512 TLSH

                                                    150x150Logo.scale-180.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\150x150Logo.scale-180.png
                                                    • Size 1KB
                                                    • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                    • MD5 SHA1 SHA512 TLSH

                                                    150x150Logo.scale-180_contrast-white.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\150x150Logo.scale-180_contrast-white.png
                                                    • Size 1KB
                                                    • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                    • MD5 SHA1 SHA512 TLSH

                                                    150x150Logo.scale-80.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\150x150Logo.scale-80.png
                                                    • Size 827B
                                                    • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    150x150Logo.scale-80_contrast-white.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\150x150Logo.scale-80_contrast-white.png
                                                    • Size 799B
                                                    • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                    • MD5 SHA1 SHA512 TLSH

                                                    70x70Logo.scale-100.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\70x70Logo.scale-100.png
                                                    • Size 781B
                                                    • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                    • MD5 SHA1 SHA512 TLSH

                                                    70x70Logo.scale-100_contrast-white.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\70x70Logo.scale-100_contrast-white.png
                                                    • Size 752B
                                                    • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                    • MD5 SHA1 SHA512 TLSH

                                                    70x70Logo.scale-140.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\70x70Logo.scale-140.png
                                                    • Size 991B
                                                    • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    70x70Logo.scale-140_contrast-white.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\70x70Logo.scale-140_contrast-white.png
                                                    • Size 865B
                                                    • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                    • MD5 SHA1 SHA512 TLSH

                                                    70x70Logo.scale-180.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\70x70Logo.scale-180.png
                                                    • Size 1KB
                                                    • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                    • MD5 SHA1 SHA512 TLSH

                                                    70x70Logo.scale-180_contrast-white.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\70x70Logo.scale-180_contrast-white.png
                                                    • Size 1KB
                                                    • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                    • MD5 SHA1 SHA512 TLSH

                                                    70x70Logo.scale-80.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\70x70Logo.scale-80.png
                                                    • Size 590B
                                                    • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                    • MD5 SHA1 SHA512 TLSH

                                                    70x70Logo.scale-80_contrast-white.png

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\Assets\70x70Logo.scale-80_contrast-white.png
                                                    • Size 519B
                                                    • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                    • MD5 SHA1 SHA512 TLSH

                                                    assistant_package

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\assistant_package
                                                    • Size 4.0MB
                                                    • SHA256 af83e7233b402eba6f4ab395bbc41be6d44756e8b1842f4d256933ce3f8c1781
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    d3dcompiler_47.dll

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\d3dcompiler_47.dll
                                                    • Size 4.5MB
                                                    • SHA256 b5e0dda430503fa2e8bd9d40771355ed9374ce6531b180ace84b792781cdc494
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    dxcompiler.dll

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\dxcompiler.dll
                                                    • Size 24.7MB
                                                    • SHA256 5f22a24f5d082d429e4ba01bc37cfd9bcb544f34b4c264423d975102622210de
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    files_list

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\files_list
                                                    • Size 7KB
                                                    • SHA256 3a84765611f4d985206ff1b3d6fe6a123a4c74aaae951a944af0cc7b482ab2ed
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    headless_command_resources.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\headless_command_resources.pak
                                                    • Size 3KB
                                                    • SHA256 0ee35aeeb7c9a7beb89664639100c70320f1164f0266b1d1ae91b8e6a3237398
                                                    • MD5 SHA1 SHA512 TLSH

                                                    icudtl.dat

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\icudtl.dat
                                                    • Size 10.4MB
                                                    • SHA256 113f7464a507af4f7d2b0ea73094217881386f19dac7cacc5f071e7a4cf04a20
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    installer.exe

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer.exe
                                                    • Size 8.6MB
                                                    • SHA256 8246d9b80b651388263bad3b113ceaa7eae76a22bc19ad52bf8728ea1d40f37b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    installer_helper_64.exe

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\installer_helper_64.exe
                                                    • Size 617KB
                                                    • SHA256 91f1248faf6a601ecf6fde1aecd98ce61b5124056e9bcc1c7243877056c32af6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    libEGL.dll

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\libEGL.dll
                                                    • Size 455KB
                                                    • SHA256 ca261078735cbeee9d679082d04b66f7c2eda69abbdfa09438e05c7986c83672
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    libGLESv2.dll

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\libGLESv2.dll
                                                    • Size 455KB
                                                    • SHA256 d2d5e37830ede6b38bb983664821201adebd4fff6fceafd66a4e1b4f893573ff
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    bg.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\bg.pak
                                                    • Size 988KB
                                                    • SHA256 80a9bad85236d58a9e62c6a228e60a61e57e6ede338b000c09f178d4aa75c383
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    bn.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\bn.pak
                                                    • Size 1.2MB
                                                    • SHA256 e2b95cfba880dd2961bd5e3336da98a6559159ced9cf0856b9c424bbffd0d767
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ca.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\ca.pak
                                                    • Size 622KB
                                                    • SHA256 f7fff280841c8c55da719ca8ac0231e89a196f952a47b4c731e0bb7ec665fd5c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    cs.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\cs.pak
                                                    • Size 622KB
                                                    • SHA256 9fba306678907ee2abb0cb8b30b71bd148e15e871433212202d06bbb41981b71
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    da.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\da.pak
                                                    • Size 571KB
                                                    • SHA256 dde4d78dc36d52b17607a1620ab194e643355db9c0ab0dc8b20c9974e779d945
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    de.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\de.pak
                                                    • Size 620KB
                                                    • SHA256 238bbf904ba8158db8faf1a55eeff46fafa397ccd883a5395dafc4dd781d519e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    el.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\el.pak
                                                    • Size 1.1MB
                                                    • SHA256 01e19b79df72aace4f56749e49580d416611fbed646a5e987d1034addb2166f6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    en-GB.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\en-GB.pak
                                                    • Size 501KB
                                                    • SHA256 f3655830866f3ae25c6eaaf67245a9121ca95dc11741bd50c01456373e2465eb
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    en-US.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\en-US.pak
                                                    • Size 505KB
                                                    • SHA256 e595945a75aae5f8207c4fe76f47fa3d8421798bb0b830b8694cdf90acce3e4f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    es-419.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\es-419.pak
                                                    • Size 611KB
                                                    • SHA256 d82e9d7a028ed3b87afd78463423461379bbcf32a9cfba01da9d337409abc810
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    es.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\139.0.6053.22\localization\es.pak
                                                    • Size 604KB
                                                    • SHA256 9dd12807534c628b993f4b7403497a2db7d4e0b103a9e4d68734bb11f536c4d3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    browser_assistant.exe

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                    • Size 5.3MB
                                                    • SHA256 f399f3c94ce8b3d6666a8f19a0c33d1e3e0b09ceef4887d323e7c4a35cfbd686
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    opera_autoupdate.exe

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                    • Size 7.6MB
                                                    • SHA256 d3a79e7fce41b4c821a6d156ba7e3385820633ee5bf51cceb0ce7c44c8f5cf44
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    installer_prefs.json.backup

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json.backup
                                                    • Size 1KB
                                                    • SHA256 0e634b8b3481a023377fb4237e792fe159dd483b207997b347cb3448d6613221
                                                    • MD5 SHA1 SHA512 TLSH

                                                    installer_prefs.json5375ee78-7973-4e6f-8e7b-8ae501364309.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json5375ee78-7973-4e6f-8e7b-8ae501364309.tmp
                                                    • Size 1KB
                                                    • SHA256 77e34da20be25fcd91b3666f9fb5186135ae44530dae7288eba783372090ec84
                                                    • MD5 SHA1 SHA512 TLSH

                                                    opera.exe

                                                    • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    • Size 3.6MB
                                                    • SHA256 dd170415a4f97821d9105524f6c200c480ea40aaef4749128a1653f01304f133
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Opera Browser.lnk

                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\Opera Browser.lnk
                                                    • Size 1KB
                                                    • SHA256 9c1855f08cd0668ff3cea33a09e69f0a0dee645b79d66c55b8e7734cbff4ed54
                                                    • MD5 SHA1 SHA512 TLSH

                                                    additional_file0.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\additional_file0.tmp
                                                    • Size 2.9MB
                                                    • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    assistant_installer.exe

                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\assistant_installer.exe
                                                    • Size 2.4MB
                                                    • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    dbgcore.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\dbgcore.dll
                                                    • Size 196KB
                                                    • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    dbghelp.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\assistant\dbghelp.dll
                                                    • Size 1.8MB
                                                    • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    de932af914ba00303d4a2778a383ac9c831101e2.crx

                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                    • Size 3.7MB
                                                    • SHA256 f3a84b1b12f7b57bf96ff5fd4a0ba9a2d92dda548873b59f7322fd1b9510954f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    installer_prefs_include.json

                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\installer_prefs_include.json
                                                    • Size 228B
                                                    • SHA256 fb510f9f3decb14b00aa8a87149dbbdd4286ee684cce0fab0c996d15aa67d4a6
                                                    • MD5 SHA1 SHA512 TLSH

                                                    installer_prefs_include.json6f2beff7-10c4-4652-b7b8-6540a4dfaa4c.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\installer_prefs_include.json6f2beff7-10c4-4652-b7b8-6540a4dfaa4c.tmp
                                                    • Size 1KB
                                                    • SHA256 4509c54feb48b36d72622ba1921ebefb3095c719b5b8788d4ce728cb9d6681df
                                                    • MD5 SHA1 SHA512 TLSH

                                                    installer_prefs_include.json882aca89-1d5b-4855-b9d3-011dab1fa4f0.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\.opera\189680e5-ef72-4801-b9f0-fd1dc5aeace8 Opera Installer Temp\opera_package_202610292222361\installer_prefs_include.json882aca89-1d5b-4855-b9d3-011dab1fa4f0.tmp
                                                    • Size 243B
                                                    • SHA256 bb34cce4e4c695d363965ea84f9ddc9cb30ce8ee95bcef6140f159be43969430
                                                    • MD5 SHA1 SHA512 TLSH

                                                    0c608f9d-8339-43e6-9079-616464a0cbb6.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\0c608f9d-8339-43e6-9079-616464a0cbb6.tmp
                                                    • Size 386KB
                                                    • SHA256 0e569e5a9a3bc944b07e22f19662ea202cbaf030683dae348fbe8717a1c17489
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    427823cb-cead-4cb6-8f16-d875faf008a3.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\427823cb-cead-4cb6-8f16-d875faf008a3.tmp
                                                    • Size 46KB
                                                    • SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    installer.exe

                                                    • Path C:\Users\Admin\AppData\Local\Temp\7zS0A43BB88\installer.exe
                                                    • Size 8.6MB
                                                    • SHA256 82e4b2505e5407908cb8b0209959a1a65875e9c4022fbc5ba413d01c744ee6bf
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    OpInst.exe

                                                    • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                    • Size 3.2MB
                                                    • SHA256 35502ecc0de077de76590d9b9bc33e5e0237add5fc09acbc41effbeeaeea891e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    a74bf529-50e4-4519-999c-9aaa9c3cb946.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\a74bf529-50e4-4519-999c-9aaa9c3cb946.tmp
                                                    • Size 3.0MB
                                                    • SHA256 73222b578c4d71d0c3d7daec8f9c34a7cb48974961a972e39cb58a7a329e3fe4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    bg.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                    • Size 224KB
                                                    • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f7ac92af-963d-4bd4-94a7-627440607b7a.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\f7ac92af-963d-4bd4-94a7-627440607b7a.tmp
                                                    • Size 14KB
                                                    • SHA256 99dfb50b062db90ac585e2a877192973b88522ceb257a78345f1f1ca5da98e1b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    1423.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\1423.js
                                                    • Size 104KB
                                                    • SHA256 a2445c5cd469f12a82d7eedbf6f9badd62fa3e58716bd3b094ada291efb4a7c6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    1567.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\1567.js
                                                    • Size 513KB
                                                    • SHA256 40b90ac1c50ad344d6e43a74a20cccd9fe0bd4a88fd9ea049195042ebdb34d50
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    1622.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\1622.js
                                                    • Size 52KB
                                                    • SHA256 c2e469a798f73e5687bc99faa50d4f43c083a2d7d8a058cd568556b8d8e58a75
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    2667.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\2667.js
                                                    • Size 111KB
                                                    • SHA256 8a0a0d104ef39a608e2577df09b1ab78a7112cc41d243f79c82a84fb3af4ccbd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    269.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\269.js
                                                    • Size 68KB
                                                    • SHA256 6620ad67c1c06c489d5023a3fde014496fcdaeb02b2e6181b63418f28aa5a272
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    3168.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\3168.js
                                                    • Size 60KB
                                                    • SHA256 2b967a075fcd471a96d14222a230c38732a26f8c70662f35b8ec6eca8978af9d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    326.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\326.js
                                                    • Size 100KB
                                                    • SHA256 167f46a6e4ca5209f0ad247cb351fb5838916460797ad4fa46d1ebf03ec3adbc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    3624.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\3624.js
                                                    • Size 59KB
                                                    • SHA256 29501e9cd90a1ea6b156cdc759483bd8c088b802f1dca4b33eacac8bdad6be90
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    3642.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\3642.js
                                                    • Size 58KB
                                                    • SHA256 624b94645f1f0bf9535ea5915c542b29d87a34c591288d7184b2a6eeea29c383
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    3760.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\3760.js
                                                    • Size 181KB
                                                    • SHA256 ae152bff9d6f2013a4abf7a611e79b443232f98c8af0e5f4b85a4029eae4c42b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    3844.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\3844.js
                                                    • Size 34KB
                                                    • SHA256 ea72427c224050c3159e3d3013f78e8aeef233e06ff13df5582d699b8d163c30
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    3937.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\3937.js
                                                    • Size 84KB
                                                    • SHA256 f8231e5ec41f75c625fe4a9eceae3afcd4759cdaf03bbc7997131e5d936781f6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    395.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\395.js
                                                    • Size 4KB
                                                    • SHA256 e1f673459cef742ee6a926c496deec392c97f5405f7181f32eec6737a047ed75
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    3995.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\3995.js
                                                    • Size 56KB
                                                    • SHA256 864f6b6829f83dd39148cd0348c660aa02fe61d87966d34108bc26c03b4732ad
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    4032.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\4032.js
                                                    • Size 23KB
                                                    • SHA256 29b27e02cabd71f9353bf868b45e56c45a90ded9944b13a7de5517f0a1fb4371
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    4294.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\4294.js
                                                    • Size 56KB
                                                    • SHA256 a0fde8c864e1c6672fa76ca5bbafbaa1401fb1c155554bdaa5b42f01ac7e3b4e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    4398.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\4398.js
                                                    • Size 58KB
                                                    • SHA256 0b12c8b9dc9db758eff21cd3c506c8f8d3c1376a03f0c93fe6e3d8ad88f19949
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    4583.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\4583.js
                                                    • Size 59KB
                                                    • SHA256 36913948d37963ac6e93da7df7270e8aae8442f5190e1bc326916fa970bdd02d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    4669.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\4669.js
                                                    • Size 55KB
                                                    • SHA256 0eed9b099ddd6f8a9fc3bbeecaafbf63ec4fe6694e7b98747aa8ed4df59979be
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    4730.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\4730.js
                                                    • Size 95KB
                                                    • SHA256 00fe01ddaf5407520d3a559c3ed2536cad099136c3c6a11a23d382c260d982a6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    4795.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\4795.js
                                                    • Size 146KB
                                                    • SHA256 d0d91c707eec06bcad7db2234ceadec665296de2b520e10520a50b20ac603c1a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    4829.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\4829.js
                                                    • Size 79KB
                                                    • SHA256 cf17f7f845586fcffd517d6fa7760020fba671fbb88d5d268c8cb73b2159009a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    4958.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\4958.js
                                                    • Size 59KB
                                                    • SHA256 9cc832df77af9d4dc4c65d29d6b6d877d9552c5d28bf7dfa3fb55a11a8915ca9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    511.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\511.js
                                                    • Size 95KB
                                                    • SHA256 efb4b9c0e7fef4e8cfffa48697836f11cfd15d0bcea6d7f4eaf1ffbfd7e38db4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    5336.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\5336.js
                                                    • Size 52KB
                                                    • SHA256 d05a5d7c35884553ba91aad9ae82265ab6169be8b14a3eac318868af51988589
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    5345.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\5345.js
                                                    • Size 89KB
                                                    • SHA256 c714ba9c6d28d452aade4d589ee1e205c971e9757e76ee003830f3ddb026fd54
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    5570.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\5570.js
                                                    • Size 52KB
                                                    • SHA256 2115d061384edef80ee0e1b38a7b107265f1d0e383f2f141bfe855e1309efaf7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    5586.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\5586.js
                                                    • Size 680KB
                                                    • SHA256 d7ff85e6dd582e211ce55d67b3098ba7ed2103e222952b54c4ba93bd29a8cd98
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    5649.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\5649.js
                                                    • Size 67KB
                                                    • SHA256 9f607d7e5adf999bb1173f5bb29279088831da5269cabf2f04529e49a8463dbe
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    5907.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\5907.js
                                                    • Size 53KB
                                                    • SHA256 50460fea6943f9d8c719f362d6f20b48547692e490495da0ec43d9014fe48807
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6023.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6023.js
                                                    • Size 505KB
                                                    • SHA256 9eac6fcc2fe4c5f7b42c01140776859713e11312d66831d2c488e6e758709552
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6046.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6046.js
                                                    • Size 52KB
                                                    • SHA256 b88a290f415df6f866e1cd864dbb4c90c90f985ba7a1ba821a83847e954341b8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6166.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6166.js
                                                    • Size 78KB
                                                    • SHA256 001eae5b546f5d503a694353fbe4f013f57f298f8a45e17d9ba442d9968ce928
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6173.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6173.js
                                                    • Size 1.4MB
                                                    • SHA256 6156dbbdcdfd9f2b8140a913a091d91abb964c2505e576cd98ae1b4a704f5a1e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6260.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6260.js
                                                    • Size 56KB
                                                    • SHA256 cff6b302bc6fa66959feb9ae07e8745c4e0e70b2124b2e72165f1b807d35848e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    630.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\630.js
                                                    • Size 62KB
                                                    • SHA256 d770e4ec6de899a207f377736aca73ba519a5575e3e0794ad4d9947bacf339f0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    649.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\649.js
                                                    • Size 11KB
                                                    • SHA256 91059e4791964e1b358389775b87ecf647c3a9c93c9568e73b3fa62ad1edbf8d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6589.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6589.js
                                                    • Size 58KB
                                                    • SHA256 9c3ab80c99f99cf9d28b91d13682515d35b263586a7fc51b6c515855420acd08
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6594.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6594.js
                                                    • Size 96KB
                                                    • SHA256 06807325b70317d784d8e0d72314adf19bb8f6ee9e2f6bb31918449d3ae6e886
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6699.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6699.js
                                                    • Size 367KB
                                                    • SHA256 a089df9112388223aff8c6147a4fe546c3d7bbecfe49e1ad5753a8c66e9a0bc3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6829.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6829.js
                                                    • Size 47KB
                                                    • SHA256 2c8d755eb77f6f3d25dbd2f8ff53f7aff17740a1128908126ad6fae6572c26b0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    685.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\685.js
                                                    • Size 58KB
                                                    • SHA256 c42fc5d587728247bfa4e96a2d265b73e6b831dec9eb3fa63de037117b5a5fd1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6954.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6954.js
                                                    • Size 497KB
                                                    • SHA256 73f06c903a0095bb920c86c87926886e27e92cafaaf68b7df6687aa2b596fc33
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6980.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\6980.js
                                                    • Size 56KB
                                                    • SHA256 eff1f5a58af5ea7b3ac3dfffc2373c111039935602129a4d35cc03873960965a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7090.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\7090.js
                                                    • Size 59KB
                                                    • SHA256 03687135fb38248057e6c02be6de28ff7a094cb03b9c1b55d65e2fd806dfa1bf
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7103.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\7103.js
                                                    • Size 59KB
                                                    • SHA256 6ff7e6dc3eec35e5624dca0a83b08eed4be9a3243a219fc7706732b36ffdb0c7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7219.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\7219.js
                                                    • Size 65KB
                                                    • SHA256 8831a1f526e70f74a5779af8b9a9dd72011afce3baaca40438ebf33d91c39ceb
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7390.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\7390.js
                                                    • Size 55KB
                                                    • SHA256 d7e11946fab735d13ae33d8cbd185a20f9466e4a9de1289f06cc20eaf94ca0c0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    754.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\754.js
                                                    • Size 267KB
                                                    • SHA256 4dd73ca903ee6865595347fc56172fb3dd8620986b1a445497c353f4615b0537
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7565.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\7565.js
                                                    • Size 39KB
                                                    • SHA256 5c6f255324e14a8fa5f6468de35e8fc5736d79ab957a7c0d317ddc92f5e71ce5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7615.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\7615.js
                                                    • Size 84KB
                                                    • SHA256 c6d578b82ad4514596a7b5d2cf930b642bbf12597a9a5b3d4d5ac2c3b002ae91
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7946.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\7946.js
                                                    • Size 59KB
                                                    • SHA256 d1e759d9ec926a97cbdf755a4f187436e0a735d6ab04f2f208c6218b89bd9355
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7997.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\7997.js
                                                    • Size 59KB
                                                    • SHA256 f11d9ac9610139ba0f3fb9bad0f7dbd082bcd6ab0e8f791e22b2508753af6ef5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    8122.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\8122.js
                                                    • Size 8KB
                                                    • SHA256 b01d2b6024987ca0deb6c3d8a9f969725d7211988b159a9a18826219d01bd0f7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    8319.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\8319.js
                                                    • Size 27KB
                                                    • SHA256 2fdbac3b15f11a5e6a128e43cebfd13f6834b8819b20ec2f58acaed55262d71b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    8345.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\8345.js
                                                    • Size 59KB
                                                    • SHA256 f93efea5e9adda67677e680af8e5a3acea6d10278f84550861dacf5d36a1359b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    8395.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\8395.js
                                                    • Size 60KB
                                                    • SHA256 5d568e03dec8624d01c4da4bdfbd0ae1977cec1a152854b63cabee3b9c0b4025
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    8650.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\8650.js
                                                    • Size 133KB
                                                    • SHA256 02e3b99f1258938a73bb4eb1fdf35e1ee347f1f0260639df64efa36124181f0e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    8671.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\8671.js
                                                    • Size 60KB
                                                    • SHA256 1b9a6a7fea1049fbe2f905f4f36d8eee764bc370029698c0e8ffc52f81aae130
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    9025.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\9025.js
                                                    • Size 45KB
                                                    • SHA256 95a6ee0f591388e7926b56faa085c7c98d6872ce10ad81fdc8f48874e5a22961
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    9028.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\9028.js
                                                    • Size 60KB
                                                    • SHA256 9b603514640cb5d50d068dcc5032f779b09ad1942b81b43699589604a02d729c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    9135.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\9135.js
                                                    • Size 24KB
                                                    • SHA256 346d4334b933537e1bb4b8e1f669170ec0204f5b8cb3faa37187e08320501df2
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    9210.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\9210.js
                                                    • Size 278KB
                                                    • SHA256 f66db1f56ebc27da6b0fd8e7998780fe656741b23538d3bc7734a49550b7d807
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    9432.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\9432.js
                                                    • Size 60KB
                                                    • SHA256 0ba78518e73db00ce7b362f55f1fa7835b2e37743935c516835b4b7a03780829
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    9460.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\9460.js
                                                    • Size 52KB
                                                    • SHA256 53abf3f37534ee9c1e8f6e7fdfedf4adc3bc67a0cdc555c472b9291a4bdea2fe
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    951.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\951.js
                                                    • Size 79KB
                                                    • SHA256 e049d13bbffe1abfb8dfaaad3fd1b47868e6bc68960acea4bf59d9b67d393c2a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    9600.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\9600.js
                                                    • Size 59KB
                                                    • SHA256 dba0cb380963e69a02c661be6e4c9432db3b3133a185aaa6ba6235985ec40c8b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    9736.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\9736.js
                                                    • Size 57KB
                                                    • SHA256 9b60a58f90ea2ec3265e08f9aa661826c8e31e91c5c73d4fe148d581e2c44e3c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    9844.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\9844.js
                                                    • Size 58KB
                                                    • SHA256 dda5da9d99f66c82a77564fc5e6cabf58db5fe7c12c8d8642451746d2abf7d9f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    9901.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\9901.js
                                                    • Size 58KB
                                                    • SHA256 7590052b987359b25878771182a5730af9bca2942993baacd4ef7fa9f1e2dedc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    aria.html

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\aria.html
                                                    • Size 531B
                                                    • SHA256 4e06e363ec440e54c47825436157f4458572af415118f665a4159b934564fd16
                                                    • MD5 SHA1 SHA512 TLSH

                                                    aria.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\aria.js
                                                    • Size 12KB
                                                    • SHA256 201127b85325675cef4984a1d77dd1638f276792e8a4920a23f4430fdba76253
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    045499a2e328133d.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\045499a2e328133d.svg
                                                    • Size 861B
                                                    • SHA256 70b9447762b68963f066c8de71bae342d4c3734f614d9f6ff4beb74c7b9e29ea
                                                    • MD5 SHA1 SHA512 TLSH

                                                    04927c4c4e30821a.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\04927c4c4e30821a.woff2
                                                    • Size 34KB
                                                    • SHA256 beb9246f2bc1eb09b536f5c59f83cf792c21872e6c321da35847c28a759d2878
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    0561eac25d821104.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\0561eac25d821104.svg
                                                    • Size 779B
                                                    • SHA256 446715e6df1a2374bfff30544a99755ad6eca4c499e7311ff51fe68638d6992b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    0647aa53f7a1ab03.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\0647aa53f7a1ab03.png
                                                    • Size 4KB
                                                    • SHA256 9651739b361d80c22490b05e1c370756327ad96a3893ea10b21043c01e1e3d89
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    0666508ddb76e695.webp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\0666508ddb76e695.webp
                                                    • Size 6KB
                                                    • SHA256 3209b65910b034a54f1916100a1e70900f5833e83429bf1300a5ac4dc81fefdd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    0c065981a363e375.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\0c065981a363e375.svg
                                                    • Size 2KB
                                                    • SHA256 7ac85af03d05ac66458d94ad4442a5b64ce2ef29bc642d42d34237025855b3e2
                                                    • MD5 SHA1 SHA512 TLSH

                                                    0c31e8f306b5f2d6.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\0c31e8f306b5f2d6.svg
                                                    • Size 686B
                                                    • SHA256 ae5af18df50e69fd4fa99cdb32e4192524c6ec491e1da5a6496d5bb35bb33b9a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    0cbcfc6fe4cb443b.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\0cbcfc6fe4cb443b.svg
                                                    • Size 200B
                                                    • SHA256 1edbe3fa1e31ec007617a1eae760cb7fb3c68c4dc7ecac0bb635088763d51c3e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    0ce1e0471c22d650.webp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\0ce1e0471c22d650.webp
                                                    • Size 2KB
                                                    • SHA256 fc6275888a83ec3ea6fb5e8ee9ad009f7b1afe05adde781f3260acf4809c6244
                                                    • MD5 SHA1 SHA512 TLSH

                                                    0d0d0fdaeacb5e45.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\0d0d0fdaeacb5e45.svg
                                                    • Size 670B
                                                    • SHA256 0e05484cdf319c42cbcda83f3ab2ec3cee7942079992da158afa0760fc9b6f3f
                                                    • MD5 SHA1 SHA512 TLSH

                                                    103eff58785ab58b.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\103eff58785ab58b.svg
                                                    • Size 534B
                                                    • SHA256 ea28a57c2b4c803116566db0c483cc910a6ab9c725db874ff12569222b3d340a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    1046c13174d8b145.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\1046c13174d8b145.svg
                                                    • Size 653B
                                                    • SHA256 4c2332c75081ae314df7f476041d1b25aa718e7d943e36a31d46333208dcbedf
                                                    • MD5 SHA1 SHA512 TLSH

                                                    123ab2cc0ee9e515.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\123ab2cc0ee9e515.svg
                                                    • Size 22KB
                                                    • SHA256 0f0b994c8670200d3c137a916de9601812b414bd75cbad42f136d9f9d0c82bda
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    12e3fff4ce882c02.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\12e3fff4ce882c02.svg
                                                    • Size 706B
                                                    • SHA256 ca84cea75231be8426df1ddaa5c4902440419b43e92f6d5677ab3e9a919c9596
                                                    • MD5 SHA1 SHA512 TLSH

                                                    14e91cb3dc3fa6da.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\14e91cb3dc3fa6da.svg
                                                    • Size 467B
                                                    • SHA256 4c9290c24d3db4812a64e96509a46dced9fe3bb639c25e8882e2e662845332e8
                                                    • MD5 SHA1 SHA512 TLSH

                                                    1670e5d31a4fbef2.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\1670e5d31a4fbef2.svg
                                                    • Size 452B
                                                    • SHA256 f9122391c5df2eedd175f993bd89f589384d7b7222ffe0fc642e8fa42793fcc2
                                                    • MD5 SHA1 SHA512 TLSH

                                                    1688c4091f2a2e26.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\1688c4091f2a2e26.svg
                                                    • Size 2KB
                                                    • SHA256 f60f4f3a9a21fa2a0937e510ec3b858bff041b0559fa6cdfafe801c43fc8b220
                                                    • MD5 SHA1 SHA512 TLSH

                                                    17cbd66168518049.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\17cbd66168518049.svg
                                                    • Size 308B
                                                    • SHA256 9ab7570e0639a79235fa71e3bc496d9bc05dd4a74aae7f5dcd4bff3812623663
                                                    • MD5 SHA1 SHA512 TLSH

                                                    181d51d89dd58b1c.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\181d51d89dd58b1c.svg
                                                    • Size 619B
                                                    • SHA256 7022b29d52ca3620157810b76f3fd4665f728d1ede361afb15937c5793f43ac1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    18b4316285d3185b.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\18b4316285d3185b.svg
                                                    • Size 6KB
                                                    • SHA256 e72e1f02c8cd530c46a4d756f41be3ec41c3c86ae290b73a27c0fdbe72a6a392
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    1c9159e6d6d5b88c.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\1c9159e6d6d5b88c.svg
                                                    • Size 1KB
                                                    • SHA256 4e6f66ab1e0836fd18a8ff605ec3b4d12a5bfc60062887c3850d434d33aba205
                                                    • MD5 SHA1 SHA512 TLSH

                                                    1c94572b8a82384e.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\1c94572b8a82384e.png
                                                    • Size 6KB
                                                    • SHA256 96ee3e674f0fda9b8a73c3c4242738468405aa0d7c04dc1a4d54e9e548a57a32
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    1eb51cb7434ba396.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\1eb51cb7434ba396.svg
                                                    • Size 2KB
                                                    • SHA256 c569f486ac99a73a4276a731ee171aaef40e27ec821e755faf50d2fe6f47785d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    1f8c89981dfc2af2.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\1f8c89981dfc2af2.svg
                                                    • Size 266B
                                                    • SHA256 dd5f359286947d808937b99b2e8e61fe14d96938524cb056ca42fbd05863357a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    2108d437d813d94a.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\2108d437d813d94a.svg
                                                    • Size 322B
                                                    • SHA256 6cafb6ce0b52ceaef8798eee7c818cfbee01cf91b1790106038d8500835fe345
                                                    • MD5 SHA1 SHA512 TLSH

                                                    22d2121364e44949.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\22d2121364e44949.png
                                                    • Size 1KB
                                                    • SHA256 a5fce2fb360c19b93d2df2d1cd3adba1dc88c655bc51cbf6639fa0df61e67af6
                                                    • MD5 SHA1 SHA512 TLSH

                                                    243e789a53847976.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\243e789a53847976.svg
                                                    • Size 585B
                                                    • SHA256 fce585879f0a3fc6103d7abbb4fe492f9051f47d6bf82fddaea6083748955e3c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    253f1599e4c715f7.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\253f1599e4c715f7.png
                                                    • Size 10KB
                                                    • SHA256 944f79c9d166538e47eee1709dc35adceea233beed204491759f35f83b7c0fe4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    2dfdd8918d195c58.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\2dfdd8918d195c58.svg
                                                    • Size 6KB
                                                    • SHA256 16dc2921e1f5d89c99aac9914dc98eba54ffa2f4fcf7a942fc2356391c7a46b6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    2edf079df2181fc4.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\2edf079df2181fc4.svg
                                                    • Size 1KB
                                                    • SHA256 10fd7fdec3af7b54ed8ac68ca5f6b2426e00e86a34c12213810f9c3270dccc77
                                                    • MD5 SHA1 SHA512 TLSH

                                                    2f4d0c616cea0666.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\2f4d0c616cea0666.svg
                                                    • Size 589B
                                                    • SHA256 32499717ae28339dbbba06154107872c5769810f691d68db46d9409be5365127
                                                    • MD5 SHA1 SHA512 TLSH

                                                    31ba446b2ad075f0.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\31ba446b2ad075f0.svg
                                                    • Size 635B
                                                    • SHA256 ad2ef1213f1a7f67e875a5edb473da0879522ba9946fb2ebf53f226fc795da79
                                                    • MD5 SHA1 SHA512 TLSH

                                                    33bd9ebd264104a0.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\33bd9ebd264104a0.svg
                                                    • Size 2KB
                                                    • SHA256 978a0ac5cf228e0fcfbdb7f7058bb26f7c7c3183f58fe3b0e1dbf1ac13516e89
                                                    • MD5 SHA1 SHA512 TLSH

                                                    3607fe7f996c064b.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\3607fe7f996c064b.svg
                                                    • Size 4KB
                                                    • SHA256 37ef05845a8c85f25659be2e12a0143d98e5bc605a954ad3baf1b84744bc51f3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    36bf914fc5de6f1a.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\36bf914fc5de6f1a.svg
                                                    • Size 3KB
                                                    • SHA256 231ceb827eaeda96d3f47c045ac59e23d40710cdfbde54945cd89ccff412aa12
                                                    • MD5 SHA1 SHA512 TLSH

                                                    37192a2a129f5ff9.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\37192a2a129f5ff9.svg
                                                    • Size 224B
                                                    • SHA256 aba7f75c37591227dfec88b8b83fe1e7700271192d2d38350d047a96a609fd8d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    3a2ea7738b340340.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\3a2ea7738b340340.png
                                                    • Size 6KB
                                                    • SHA256 fbdb9fe48083d513b0b946b35a95a157c2434e817f0a11cb2d2963ff144b50c9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    3b9545916efb17d9.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\3b9545916efb17d9.png
                                                    • Size 3KB
                                                    • SHA256 8ba7bd78ad289a668c7d017266888b7fbf978525cfdfccbdba5f90084fee6dda
                                                    • MD5 SHA1 SHA512 TLSH

                                                    3c91fce8ee8453fd.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\3c91fce8ee8453fd.svg
                                                    • Size 3KB
                                                    • SHA256 2725c1bf08181aab08cc46e8ed47467dddeafe891e310bf67fbfa148d91e1cdd
                                                    • MD5 SHA1 SHA512 TLSH

                                                    3c9e7cbca1e6a295.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\3c9e7cbca1e6a295.png
                                                    • Size 4KB
                                                    • SHA256 fb0b1e92b7017f202702168117ee6e278708a06815294a796acc6cb4f8600558
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    3d5e7395e9ffbdbd.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\3d5e7395e9ffbdbd.svg
                                                    • Size 537B
                                                    • SHA256 c314723545b36fdfd4c9c340095ed4a3c06367e630321b3bad8d61068cfe827e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    3dad3b5da9993b6c.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\3dad3b5da9993b6c.svg
                                                    • Size 767B
                                                    • SHA256 b4281b6b31da12dfce039b3c29ead495e4c3d4588b7f49e2d352070b2b80c893
                                                    • MD5 SHA1 SHA512 TLSH

                                                    436b779e283e4cec.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\436b779e283e4cec.svg
                                                    • Size 304B
                                                    • SHA256 5ff297046ceba4068df96fedcd122d47010943085c278c3b1d66559a1dce096e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    467465eb8fa50b5b.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\467465eb8fa50b5b.png
                                                    • Size 4KB
                                                    • SHA256 5c427c31f74ac7b88a574c9822c95a75a330fa768ddb8f02b94ad5e3defcf644
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    48d7ceaf46faf1a6.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\48d7ceaf46faf1a6.png
                                                    • Size 16KB
                                                    • SHA256 1b530b8562aaba7d4c9bca32501696bd0473c1bd2b1281941779f48a9d75ff06
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    49c99c607978a8f1.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\49c99c607978a8f1.svg
                                                    • Size 343B
                                                    • SHA256 57f9b1c710d6d4e2e333df1ba9f4e285192fff0e7e7facc2e2950deba2da5f24
                                                    • MD5 SHA1 SHA512 TLSH

                                                    49f7d977039c303e.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\49f7d977039c303e.svg
                                                    • Size 1KB
                                                    • SHA256 b14c989ba44526446d5259189ad12e7bdd1261a8f7a6c95490ab30b69684de82
                                                    • MD5 SHA1 SHA512 TLSH

                                                    4a39a099362c32de.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\4a39a099362c32de.svg
                                                    • Size 477B
                                                    • SHA256 f49cbed3efadd4afb2ce84feb2844c7bca8ebb1388b29b160b2754d7e53d4bc9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    4a903e15f57d70f2.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\4a903e15f57d70f2.svg
                                                    • Size 608B
                                                    • SHA256 582e51dbb3ad1f89b5cf9d9e6c0f760fca3c1e5a8684934ded51f819175b178a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    4cad3768b65a46fe.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\4cad3768b65a46fe.svg
                                                    • Size 8KB
                                                    • SHA256 83dadcbf80cb980a6a142a7f916305136ff8d44fa2b30444b04dc85bd862b076
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    51f491f244f5f86b.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\51f491f244f5f86b.svg
                                                    • Size 13KB
                                                    • SHA256 50d5932c16de127f00ac4d4e944510798787a7f3cea6f495f0d5f24d9bcbaad7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    52630788a25809fa.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\52630788a25809fa.svg
                                                    • Size 503B
                                                    • SHA256 2c4eff17d2184891f880027b9bb5eb9158bc69b69c7724085847cf6905fed97a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    535cb5713fe4ca16.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\535cb5713fe4ca16.svg
                                                    • Size 365B
                                                    • SHA256 2600be0ed823e560f4c93df470afec7ac95a1efa8898651e0190730695a67dcb
                                                    • MD5 SHA1 SHA512 TLSH

                                                    53d73708b13075be.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\53d73708b13075be.svg
                                                    • Size 1KB
                                                    • SHA256 3f95bf152dd430c7dca4f6d3e1c58376731eb3998c49caa567aab2741bf4e4e9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    578e94e35aa16d97.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\578e94e35aa16d97.svg
                                                    • Size 2KB
                                                    • SHA256 90ac01ccda1d73a4076858bfdc567bc22a9100c55b83f6f1c411e917cdea0b66
                                                    • MD5 SHA1 SHA512 TLSH

                                                    581fa70608c7fb8c.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\581fa70608c7fb8c.svg
                                                    • Size 2KB
                                                    • SHA256 1e9f16d4e00e445a3ffd0c5e83301bea528c169e0dbe4fb2f0a2116f7ec3aba8
                                                    • MD5 SHA1 SHA512 TLSH

                                                    5bddb929efb23217.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\5bddb929efb23217.svg
                                                    • Size 813B
                                                    • SHA256 1d1c2f5a54824e3a71f6d31709d4d7cad656c328224a7936b5b67cb6957d1a4c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    5d5360751452a836.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\5d5360751452a836.svg
                                                    • Size 6KB
                                                    • SHA256 1305f3b977b3dfd8018798fc496b76909014ff48183bb94710c6417741ed3b42
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    625b924eeceb153e.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\625b924eeceb153e.svg
                                                    • Size 3KB
                                                    • SHA256 f41e2968b2610bafbd81dff830cdc9f6362ffd14838ec74ce20b52d154af6d77
                                                    • MD5 SHA1 SHA512 TLSH

                                                    62b733d362f51663.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\62b733d362f51663.svg
                                                    • Size 505B
                                                    • SHA256 3033a3f8ba457ed2ad317685ed075f38e5ca78a861350f4729c9cb64611d8a48
                                                    • MD5 SHA1 SHA512 TLSH

                                                    62dc31e3f318054a.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\62dc31e3f318054a.png
                                                    • Size 4KB
                                                    • SHA256 6342e5e66aaff11a87b88bd2dedd38a1c23405778adb77710f494c83228a7a02
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6327ab0f8e3c16d7.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\6327ab0f8e3c16d7.svg
                                                    • Size 37KB
                                                    • SHA256 9b4c1dbe8257876b21d1ec0a6e50b0ad408f1e1bb70cca9c09b7d0ad07ad4ef4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    634f72a779327aba.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\634f72a779327aba.svg
                                                    • Size 249B
                                                    • SHA256 9a3fbf6fb2d458eae45fbff9e36faede8305a76b1f09aef0123aae918b1504d1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    692666c0b9f55408.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\692666c0b9f55408.svg
                                                    • Size 2KB
                                                    • SHA256 f24ecd9281c6b917fa5ac620fdbda865cd9989211b64d5e54f24ed3b4f389fda
                                                    • MD5 SHA1 SHA512 TLSH

                                                    6b1f3d57b04e487d.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\6b1f3d57b04e487d.svg
                                                    • Size 3KB
                                                    • SHA256 8502e540946b516dd25701f9a9ab2be74f14ab0248b8a381b02499c9e91afb8d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    6e3ebbcd0a39edc2.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\6e3ebbcd0a39edc2.png
                                                    • Size 4KB
                                                    • SHA256 dd42d346b5cf1d7174cd49882c035bd4822e4b813e53927e857bab438d66246e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6e6472b3e10aeb93.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\6e6472b3e10aeb93.svg
                                                    • Size 224B
                                                    • SHA256 d0c0e652606ab8b51dad6a57141330141fd11a410ee9baa0f0c6033a11502918
                                                    • MD5 SHA1 SHA512 TLSH

                                                    6ef20e0ce2751205.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\6ef20e0ce2751205.svg
                                                    • Size 202B
                                                    • SHA256 1ad10d17d3d99d5cdd66aec44133e284f47d9474d76eff04693896e77e673903
                                                    • MD5 SHA1 SHA512 TLSH

                                                    700fa70309836a11.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\700fa70309836a11.svg
                                                    • Size 804B
                                                    • SHA256 91b1c6e46527889d2bdf4c542103f7a9b7f517eba1e5eb6bb18817c51febae74
                                                    • MD5 SHA1 SHA512 TLSH

                                                    717cc4781a98e1ef.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\717cc4781a98e1ef.svg
                                                    • Size 517B
                                                    • SHA256 d3a68e1933cef3dde3741fe0a35d3521d731ab4f51781b94d636497b67eb89d9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    72c1fd3caec7d678.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\72c1fd3caec7d678.png
                                                    • Size 4KB
                                                    • SHA256 811214139ddf84ffa87833724528d3e109f2fd66fedf8004064ec4b8477c85e5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    72db340eafb58783.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\72db340eafb58783.svg
                                                    • Size 515B
                                                    • SHA256 d4735286d501aa072cbcc71ef7805d06398da367bbb3d9a884827d7eedf2ac40
                                                    • MD5 SHA1 SHA512 TLSH

                                                    74ab371d1003b3d3.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\74ab371d1003b3d3.svg
                                                    • Size 609B
                                                    • SHA256 e0b9e22259671c1d486c4bc77575f3d08c23d2476b5d75525239329498fefd3d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    74ef97b398a3165f.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\74ef97b398a3165f.svg
                                                    • Size 1KB
                                                    • SHA256 81d1f973976ed12e6d25c4ea758e88b024083871bc19f774b6fb1df72e153f54
                                                    • MD5 SHA1 SHA512 TLSH

                                                    77a9dc64dd93830f.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\77a9dc64dd93830f.svg
                                                    • Size 568B
                                                    • SHA256 1ca557b79f24e093d91478753655bdf9377c0eaa7665e882384c0a168c9a17a3
                                                    • MD5 SHA1 SHA512 TLSH

                                                    77d97894772b8d2f.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\77d97894772b8d2f.svg
                                                    • Size 5KB
                                                    • SHA256 2679bf41033c426cdc8260adb99b351b234e8b8de764ad126659dcaee6020278
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    785ed704eb4b0eb2.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\785ed704eb4b0eb2.woff2
                                                    • Size 34KB
                                                    • SHA256 be536d8595b860ef2346d7a590a1112782e479ac132d6d59ad0f7db9a638794d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    78f56f56b149154f.webp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\78f56f56b149154f.webp
                                                    • Size 116KB
                                                    • SHA256 839b4e0a8deab0fe9eb13c59595dd23f7251839d8a1ad89abf7faeaf983ad1d1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    791eead8725e14fa.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\791eead8725e14fa.png
                                                    • Size 6KB
                                                    • SHA256 6bc5f3f9ca3b409c6124aecc4c3a666c9472f6c769994175870b6b794458b736
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7bc841d9002787a9.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\7bc841d9002787a9.svg
                                                    • Size 573B
                                                    • SHA256 d7c91b330a747d8617bc87c8b6217325ffeed7f50fca124d6fe47429cec9aa4b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    7e16ca1274952ee7.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\7e16ca1274952ee7.svg
                                                    • Size 8KB
                                                    • SHA256 6531422220b89b50dc51f0c04ca3dc8bb3402c7d89bf63d89119e2b277acf0ed
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7e28f70725b144c5.webp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\7e28f70725b144c5.webp
                                                    • Size 17KB
                                                    • SHA256 f011b0ad31fec9033752f9c406f352a6835b6f2821ef591404ca4a72fa4fbead
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    7fe0482b83201fc0.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\7fe0482b83201fc0.svg
                                                    • Size 750B
                                                    • SHA256 055bcaae2a14a4d012ea7ec758e2a5171412f7346da52c82e750c76c75f64d77
                                                    • MD5 SHA1 SHA512 TLSH

                                                    809a1e218234bed0.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\809a1e218234bed0.svg
                                                    • Size 1KB
                                                    • SHA256 ddf381ed309da6ec689983cac97396bc46ca8bf6895e4caa1ae8297fc3b18a27
                                                    • MD5 SHA1 SHA512 TLSH

                                                    823861837143cdc9.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\823861837143cdc9.png
                                                    • Size 3KB
                                                    • SHA256 fd11e4f3442db2eeadaffb5b404dc7fb043e60ff57760edcec2098a01cfe9b48
                                                    • MD5 SHA1 SHA512 TLSH

                                                    833aa64d0b4e0fae.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\833aa64d0b4e0fae.svg
                                                    • Size 25KB
                                                    • SHA256 7657944e8398514c563319c54cdbae80c74c07fe258d6d8bc05009ddbcb1ee0f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    83a9049d6e0cae5a.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\83a9049d6e0cae5a.svg
                                                    • Size 251B
                                                    • SHA256 00ed74d7462e2fd6246acd171f2df6dfc3a434f05136781e9f5cf8fe3a3251ed
                                                    • MD5 SHA1 SHA512 TLSH

                                                    85004375da840fda.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\85004375da840fda.svg
                                                    • Size 694B
                                                    • SHA256 b385cd1d778679fc5312217a0ecb1aa70c81b97981f898871c3a0b1d2e950373
                                                    • MD5 SHA1 SHA512 TLSH

                                                    86235b4464b5fafd.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\86235b4464b5fafd.svg
                                                    • Size 2KB
                                                    • SHA256 79058973147da9ae959eada5388b205cca8adc13787482267157004018c4e313
                                                    • MD5 SHA1 SHA512 TLSH

                                                    869ca107851f570d.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\869ca107851f570d.png
                                                    • Size 30KB
                                                    • SHA256 a8b29679f9ae04c818d8abad257b3de8fcf07924ef5cb14b998eb52fd1f2130f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    86f46fb860e9ed7a.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\86f46fb860e9ed7a.png
                                                    • Size 3KB
                                                    • SHA256 adef3224e62a8db8a5f0d7b6dd80df3b3ffc4abc03ed51a119fb1fed318c8644
                                                    • MD5 SHA1 SHA512 TLSH

                                                    87869749858a9270.webp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\87869749858a9270.webp
                                                    • Size 4KB
                                                    • SHA256 771ce803a984293c15bb4fd950f58f77fe8ba3aebe9c1cb41a209ee928bb7761
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    878f446ee6de2255.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\878f446ee6de2255.png
                                                    • Size 7KB
                                                    • SHA256 5515a8451464f22c220ac7beb66bd2cdfb8b60a63ee2921d90e36aca9332bc80
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    87dc241b2c0177c7.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\87dc241b2c0177c7.svg
                                                    • Size 42KB
                                                    • SHA256 195b7cca25841a9745ece97fb1a20f17379e02f1bbee8df68259aa2578157499
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    881503b944af06d9.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\881503b944af06d9.svg
                                                    • Size 1KB
                                                    • SHA256 8b8b7b1d850ff7319857ccc9a683229617506f6fb60d9ec478ebdb488d457ae6
                                                    • MD5 SHA1 SHA512 TLSH

                                                    885856d657cdfb17.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\885856d657cdfb17.svg
                                                    • Size 272B
                                                    • SHA256 7a0a881ca68c4ede97a7988ea9099ec1663718e1fb2cad856793a776bd94540b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    896669c7450ccc86.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\896669c7450ccc86.png
                                                    • Size 6KB
                                                    • SHA256 70327650ac97f7f1eb527848ae31b363f1c49b298b9c2f48abb1c5a0ae3a3015
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    8987293ae7ba4469.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\8987293ae7ba4469.svg
                                                    • Size 388B
                                                    • SHA256 260c7166ff9dd09523c168413274b0f01f14e09cdc85cd75437fbfd0553d6bc3
                                                    • MD5 SHA1 SHA512 TLSH

                                                    8a62bca7498ca4cb.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\8a62bca7498ca4cb.svg
                                                    • Size 343B
                                                    • SHA256 8db5ec0d6a3202d7837433fb51a37f146fe9e17d46d881b9c6166cc223e937aa
                                                    • MD5 SHA1 SHA512 TLSH

                                                    8bf0bcc9a3301fbb.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\8bf0bcc9a3301fbb.svg
                                                    • Size 798B
                                                    • SHA256 ca36df9cd20e38a361265a3338d41898397f43ae61bc5953356b2dcb72d7bfe2
                                                    • MD5 SHA1 SHA512 TLSH

                                                    8bf79756f58263e4.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\8bf79756f58263e4.svg
                                                    • Size 3KB
                                                    • SHA256 50bd8be39e536e80d0e9cf731857749fa0689dd18fec8a8d6d7b767f6d82c816
                                                    • MD5 SHA1 SHA512 TLSH

                                                    8e2cf4504754d310.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\8e2cf4504754d310.svg
                                                    • Size 272B
                                                    • SHA256 178e3bd6928ffbc19687e48fac480e711f147ff2ef9b0e9b39f17fa9e52c97af
                                                    • MD5 SHA1 SHA512 TLSH

                                                    91ede6982d00ebc1.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\91ede6982d00ebc1.png
                                                    • Size 4KB
                                                    • SHA256 fddceb3e8f58e36954ec380e301e2653df8315941158262adb295c85ea8c58d4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    931d0abe7a9ac97b.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\931d0abe7a9ac97b.svg
                                                    • Size 485B
                                                    • SHA256 e4f65bc15816d84478fc8e67aaf2ea627fe4a5a6745f671d39e02737706e1730
                                                    • MD5 SHA1 SHA512 TLSH

                                                    96cc5bea8cfdcdd1.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\96cc5bea8cfdcdd1.svg
                                                    • Size 1KB
                                                    • SHA256 36488700d3357641fdce4ef5ddd0b0e8a70ea92d997e7899c97ec977022f333b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    96fa9a8683ad0a32.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\96fa9a8683ad0a32.svg
                                                    • Size 534B
                                                    • SHA256 ef4b7e503a3ebbbe173c71e57a7873602194dd5c1687a424b98f6b36516174aa
                                                    • MD5 SHA1 SHA512 TLSH

                                                    97e3abd934c12f4e.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\97e3abd934c12f4e.svg
                                                    • Size 2KB
                                                    • SHA256 d881de46dd3e77af8549f8ff60e826d0e8a41d2f598aba698ec595e58b974837
                                                    • MD5 SHA1 SHA512 TLSH

                                                    9819b4866b7e8233.webp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\9819b4866b7e8233.webp
                                                    • Size 2KB
                                                    • SHA256 9a9ed20b388d3ec5c9a0297d2b995ebd330f683c2d944174f9f0f31b2904f794
                                                    • MD5 SHA1 SHA512 TLSH

                                                    982d29750cf2efe8.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\982d29750cf2efe8.svg
                                                    • Size 1KB
                                                    • SHA256 276e3c7721aaa1a451ac87c0c75aaba7636725710742d78993c64e946c77084b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    9a23d988229f3c4f.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\9a23d988229f3c4f.svg
                                                    • Size 501B
                                                    • SHA256 ea91ccb62f0ffc02e271e6a5318aa82b69ef61177b8f56b965966c90d012cbbd
                                                    • MD5 SHA1 SHA512 TLSH

                                                    9b8afed344c17eb7.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\9b8afed344c17eb7.svg
                                                    • Size 196B
                                                    • SHA256 24cf5aed7c4d57067744a9785c0dad71155d1090b8de8ce44b9c1506d87280df
                                                    • MD5 SHA1 SHA512 TLSH

                                                    9fd27840422642a9.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\9fd27840422642a9.svg
                                                    • Size 365B
                                                    • SHA256 7c1dd95fae58b545a40ff1ee264a97dc41428554d4259ff901d7a7ee4008c515
                                                    • MD5 SHA1 SHA512 TLSH

                                                    9fe4e4ead173d4dd.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\9fe4e4ead173d4dd.svg
                                                    • Size 643B
                                                    • SHA256 032a838269d065fc262c6156b2c132fc0d234d473021112d96ce78ac97aa8924
                                                    • MD5 SHA1 SHA512 TLSH

                                                    a0ee19f03b9940aa.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\a0ee19f03b9940aa.svg
                                                    • Size 227B
                                                    • SHA256 39938a98231b768d985fbe5abdea560bb2b5f31d7011e84be730d92d796d9542
                                                    • MD5 SHA1 SHA512 TLSH

                                                    a1a3ecb5c68b205c.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\a1a3ecb5c68b205c.svg
                                                    • Size 166B
                                                    • SHA256 1c90e13a94cb36e3061af78bba58216843b9511c9712d1b4b4b4517a24eec840
                                                    • MD5 SHA1 SHA512 TLSH

                                                    a49ea8daf7467bb0.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\a49ea8daf7467bb0.svg
                                                    • Size 599B
                                                    • SHA256 a9a5d95e4cc0a0e0ec5cdc8f986308cdda7d1d80992412f8881cfff65143e4d9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    a58a2e93a4b54988.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\a58a2e93a4b54988.svg
                                                    • Size 304B
                                                    • SHA256 11f8d51df24951971552bcf6317d592b2920f73dcba177caa272b70b0627e5de
                                                    • MD5 SHA1 SHA512 TLSH

                                                    a658c46672ad28f5.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\a658c46672ad28f5.svg
                                                    • Size 198B
                                                    • SHA256 c7fd1566d975fd06461e0b3dc308e0d06a76f1f08f497670d7c6908a6b58d820
                                                    • MD5 SHA1 SHA512 TLSH

                                                    a7a18b10642bfd5f.webp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\a7a18b10642bfd5f.webp
                                                    • Size 7KB
                                                    • SHA256 a3cbb2fe889c660e3c2031f36e41dc48fa201b9345ecb62dc78317fe4e1131fe
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    a7dbf1405144b262.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\a7dbf1405144b262.svg
                                                    • Size 1KB
                                                    • SHA256 cc91055c156950e590c3484782daf4fd82da79a36c568739c7af88f7cc4793aa
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ac28779d03531772.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\ac28779d03531772.svg
                                                    • Size 452B
                                                    • SHA256 22bd354a581ff101fd23929bd9b9d4f95e4e78ee7b61b02934c76d036bd8d215
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ad827c7ddb8dd0cb.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\ad827c7ddb8dd0cb.svg
                                                    • Size 324B
                                                    • SHA256 689f991b5bfc36e706928b329f1c36cc51464bcb367b555f388cabac16ac7c91
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ae846f7eddd04278.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\ae846f7eddd04278.svg
                                                    • Size 1KB
                                                    • SHA256 b29819aa59d21fdc24b45cf3546cce9c3b5a4151d970b1efe94f6d49ea9299b8
                                                    • MD5 SHA1 SHA512 TLSH

                                                    aeba9f15ecf7f43b.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\aeba9f15ecf7f43b.svg
                                                    • Size 224B
                                                    • SHA256 2e1900037f584a61efd75d74176733ec9722d9409bafbf8db37df79508ea11d6
                                                    • MD5 SHA1 SHA512 TLSH

                                                    af5f97cd7e418012.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\af5f97cd7e418012.svg
                                                    • Size 973B
                                                    • SHA256 05f47fb3ffb7323bdbf6b397330229a7f32a3a1f2d17365e748f8777a82dd6c0
                                                    • MD5 SHA1 SHA512 TLSH

                                                    b294d3d2f70d508c.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\b294d3d2f70d508c.svg
                                                    • Size 515B
                                                    • SHA256 e593d97979df385b1c6e2270af9a87bee796d70e7c84099ea449839bcba81008
                                                    • MD5 SHA1 SHA512 TLSH

                                                    b37bf551ac569d00.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\b37bf551ac569d00.svg
                                                    • Size 939B
                                                    • SHA256 55369f30e6b56ea039d0e71e55aa81d85264efb57b231163c72060670fad713a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    b4e5db2f8e466503.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\b4e5db2f8e466503.svg
                                                    • Size 534B
                                                    • SHA256 1278a6c6c37a0745eb9d3f919dc5aa19078b021a7360046cbfb7d3195f82bae0
                                                    • MD5 SHA1 SHA512 TLSH

                                                    b631c209ab478391.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\b631c209ab478391.svg
                                                    • Size 913B
                                                    • SHA256 90e0f9b6b878cc11b47456104b02bffab635964bf58260f693356af8f680be7e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    b80fc20fe385bc09.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\b80fc20fe385bc09.svg
                                                    • Size 870B
                                                    • SHA256 b8c1bd8dc96665c3656cc96cc02f5b91954d4b19d8016a0fd17badab678c4fbd
                                                    • MD5 SHA1 SHA512 TLSH

                                                    b87ddd7d399ff7d2.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\b87ddd7d399ff7d2.svg
                                                    • Size 795B
                                                    • SHA256 ef2c417a4822198f775e6a043e815068d50597dab195a20c361f892ef453db87
                                                    • MD5 SHA1 SHA512 TLSH

                                                    b8ddd3b0a5acfb1f.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\b8ddd3b0a5acfb1f.svg
                                                    • Size 916B
                                                    • SHA256 9fa8322e2025b75254a164876192790e0b99b33e1b8907c7f10852100909a642
                                                    • MD5 SHA1 SHA512 TLSH

                                                    b9e2526d946fd3cd.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\b9e2526d946fd3cd.svg
                                                    • Size 2KB
                                                    • SHA256 048bee5d83dae709f1ec6053ed1f37d2baeb3fbd81e471ae4c7416a492ccb166
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ba9bf1c3957e59f0.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\ba9bf1c3957e59f0.png
                                                    • Size 10KB
                                                    • SHA256 d88cfe3f564100986936c848d6b7b3830942901c908b7a5a5c39150547af8753
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    bc4e54d6f0276d36.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\bc4e54d6f0276d36.svg
                                                    • Size 8KB
                                                    • SHA256 2a886f41916a813d93a2a17f230c10f6a714b92c85d2109eb0c5fd5c43c8364b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    bccd629ae7cb011d.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\bccd629ae7cb011d.svg
                                                    • Size 217B
                                                    • SHA256 f6dedb2e1102582c17b6a4424b86fe6181ae22f7c4a09015f1a1d2360830a831
                                                    • MD5 SHA1 SHA512 TLSH

                                                    be50ce6d9253a5a9.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\be50ce6d9253a5a9.png
                                                    • Size 30KB
                                                    • SHA256 41aa6176ec702cc098347a51403f0299c0209c8722999af957a04d6115517903
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    befe724adae4279e.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\befe724adae4279e.svg
                                                    • Size 297B
                                                    • SHA256 8cad02aaee30ae0131cf45f0c2127e4ffbd9e99a5a5877c5a23c3372c35ac6e1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    c2975b0d0a40a4fd.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\c2975b0d0a40a4fd.png
                                                    • Size 2KB
                                                    • SHA256 f6a35bdbdd9251aea9aaa2ef7e15ba466c39169b940424110bc0676de2d9ba7e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    c3c4018a4fd62a9a.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\c3c4018a4fd62a9a.svg
                                                    • Size 520B
                                                    • SHA256 78c13a1cabf0d0caab6c5dedcf2c0de5737a3fbeb14391d2e32366c19da3195d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    c57ac42a27678f77.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\c57ac42a27678f77.png
                                                    • Size 1KB
                                                    • SHA256 3a5d63fc899063db5eb8a48e421f52dead3e10031e1c8093425449df8ca32bbb
                                                    • MD5 SHA1 SHA512 TLSH

                                                    c5e2e5518ff4a597.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\c5e2e5518ff4a597.svg
                                                    • Size 884B
                                                    • SHA256 f144a22baba0ebd9eb2e0b8f9ec4203bb48f8d35a2e533994c427f9e90a463ad
                                                    • MD5 SHA1 SHA512 TLSH

                                                    c5ed42bd4f1a6974.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\c5ed42bd4f1a6974.svg
                                                    • Size 394B
                                                    • SHA256 d93b470b2fe89d945653c2bb3ae0a6c3b80164bdfd4774664e6260d599b790c9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    c6b3624b8cf9684a.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\c6b3624b8cf9684a.png
                                                    • Size 3KB
                                                    • SHA256 f9658376f26164948ab72dca9692ac812d3420d8b7ec0dadd1fb09aff809653d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    c7c6749d23d7b7f6.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\c7c6749d23d7b7f6.svg
                                                    • Size 221B
                                                    • SHA256 201cb9465adedd0fd56784d027ece0b539ba644ec0ed515de4b5a3c54cb5d112
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ccdd22e861d21d30.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\ccdd22e861d21d30.svg
                                                    • Size 936B
                                                    • SHA256 a9026d4e66a703b1576160f9ac407d382c3301575c7f699bd6e78d46a4063253
                                                    • MD5 SHA1 SHA512 TLSH

                                                    cf9e121c611b5d0e.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\cf9e121c611b5d0e.svg
                                                    • Size 2KB
                                                    • SHA256 8eba6969e00d42f30a2b31881b43d6219f73288c381adf9d09659189d63bcfe3
                                                    • MD5 SHA1 SHA512 TLSH

                                                    d05dd34996b64d16.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d05dd34996b64d16.svg
                                                    • Size 16KB
                                                    • SHA256 7d4c4169954fe742a59cd5c390f8fb362a82c7c4bc42942f8c8ef0eb29eda5b4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    d065dd41270e47f7.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d065dd41270e47f7.png
                                                    • Size 4KB
                                                    • SHA256 356c07a3cf412098080594e9faf780f09581eb2ffd6bf2254405af8074651614
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    d28440c6dc230bf9.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d28440c6dc230bf9.svg
                                                    • Size 290B
                                                    • SHA256 ec9362b2f09d1fd635057a48910bde5d75971169c9c4e3abdc8f7c21c16828bc
                                                    • MD5 SHA1 SHA512 TLSH

                                                    d2cf554ccc93ffff.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d2cf554ccc93ffff.svg
                                                    • Size 263B
                                                    • SHA256 95c04a4a17f3b696b617a0b3bc222d85410f10349bc7ee616cb6b937c9006718
                                                    • MD5 SHA1 SHA512 TLSH

                                                    d2e19878110efee6.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d2e19878110efee6.png
                                                    • Size 3KB
                                                    • SHA256 6c0b3e2a8ba624f2a859c4fd9939b89dfa37699cb6d92f1393881ecc74760c1b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    d46d147daa1d2f79.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d46d147daa1d2f79.svg
                                                    • Size 945B
                                                    • SHA256 6d10f336af16d43cef3b98c2506fadcbb2e4a96131433aaf1c0f782e93826324
                                                    • MD5 SHA1 SHA512 TLSH

                                                    d59a1307c364439b.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d59a1307c364439b.svg
                                                    • Size 674B
                                                    • SHA256 572e8b100f61e6802e561dc255c0cf5c7e7882cb2fad418e851838410ed68fc4
                                                    • MD5 SHA1 SHA512 TLSH

                                                    d78ba875312ee059.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d78ba875312ee059.png
                                                    • Size 17KB
                                                    • SHA256 cd09040e73647aa8edfb60dbd4c50b2bd462aa2fd0b0e8df205190a070051de6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    d7dc8f3dc0f234e6.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d7dc8f3dc0f234e6.svg
                                                    • Size 1KB
                                                    • SHA256 4147c78e34a2c7eba0d21dc26a45bc74d7459e73da4d18ee0d707acec09fff06
                                                    • MD5 SHA1 SHA512 TLSH

                                                    d841f4bcced2e8bc.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d841f4bcced2e8bc.svg
                                                    • Size 614B
                                                    • SHA256 bf1516f759e2e0a845425060a511e7fbf01b434e6ea7b52aeb0a2559ce34b0a8
                                                    • MD5 SHA1 SHA512 TLSH

                                                    d897a6873296312d.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d897a6873296312d.svg
                                                    • Size 234B
                                                    • SHA256 74def5cf4975a6c055fe5550dedaa0fe6c54e465d12b27f7dbc8aa2a7bb32aac
                                                    • MD5 SHA1 SHA512 TLSH

                                                    d9b97322b3dc4aee.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\d9b97322b3dc4aee.png
                                                    • Size 6KB
                                                    • SHA256 779291157f20990ddb9c6cfdd6181550cc7a31ae5ac25292d590eb20d2efa110
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    dbd42b49cf89fb00.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\dbd42b49cf89fb00.svg
                                                    • Size 16KB
                                                    • SHA256 975ba31e49918a0e1ab4f5900a638552affb881e666e95e35089ea18e32d8a41
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    defebccb46e071fb.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\defebccb46e071fb.svg
                                                    • Size 6KB
                                                    • SHA256 fbaa12b93ee17014b7c724abfa62545bf05e1dd805dfa6e5c1f51588142ac8d8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    df04cc6b3471fe0f.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\df04cc6b3471fe0f.svg
                                                    • Size 494B
                                                    • SHA256 5b67a74696b0cf0d76c60192825453971991441b6a5b6ad62d4c5366815e2dff
                                                    • MD5 SHA1 SHA512 TLSH

                                                    dfcd56774003574f.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\dfcd56774003574f.svg
                                                    • Size 587B
                                                    • SHA256 2d26d211cd091e758241941a40d1eb57711712fcc3eb1d705eef32547d9a282b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    e0355e3bf0f86483.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\e0355e3bf0f86483.svg
                                                    • Size 318B
                                                    • SHA256 e71096281ca6c7c1abb7c50e6fa2c3486f78b1dd4b5f5f5537f38bfefee317cb
                                                    • MD5 SHA1 SHA512 TLSH

                                                    e0753f4e4fd1f172.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\e0753f4e4fd1f172.svg
                                                    • Size 2KB
                                                    • SHA256 644b2a34a99a01eb62f923c483545c8ada2348ce5a0154dfecb8ebddd93dc7fc
                                                    • MD5 SHA1 SHA512 TLSH

                                                    e117838d3c5eda37.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\e117838d3c5eda37.svg
                                                    • Size 271B
                                                    • SHA256 b8adf2f0aeee2f2cc4cda4fecba7ba04db0043814c660d32c8ea92641d446762
                                                    • MD5 SHA1 SHA512 TLSH

                                                    e337c07cfdb9efce.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\e337c07cfdb9efce.svg
                                                    • Size 352B
                                                    • SHA256 405fb48c2c04f011f040a13623c3dd39a1905aab12b7070df47dfcfa70ec422a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    e8a8ba696fae21e8.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\e8a8ba696fae21e8.png
                                                    • Size 7KB
                                                    • SHA256 a9b90f8084a5ac0cbb4136dbb53eb6c163051046f06c61ca911cf67e24c9a462
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    e8bb6bfbe58f9668.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\e8bb6bfbe58f9668.svg
                                                    • Size 10KB
                                                    • SHA256 f195773404e0283872b84c104951749d80e678eefa8620bf91a72c8a15ce574a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    e95ff90adab8dab9.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\e95ff90adab8dab9.png
                                                    • Size 5KB
                                                    • SHA256 0eab88dde1bb6297c4da1fe29780391aed05f32b2d52bdd5cd02161ec061dec0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ee302686425de6d1.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\ee302686425de6d1.svg
                                                    • Size 1KB
                                                    • SHA256 d3010106cff7fc076de4f24f77aca90cd29ee94fd3675bb23f1107fe1817e88e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ef9a6d17d898fe64.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\ef9a6d17d898fe64.svg
                                                    • Size 660B
                                                    • SHA256 3dd662b1629341ac9efa38feac98107ad37568c0e6bc20fc9cbf357ab034e185
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f0c9814d841afa42.webp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f0c9814d841afa42.webp
                                                    • Size 18KB
                                                    • SHA256 4fe7d9933cfc5daf877acb90887ae5e039209a7dd7e6be78cb67358734bc93cd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    f156fe54a5a79b77.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f156fe54a5a79b77.svg
                                                    • Size 514B
                                                    • SHA256 511c586eb88a9c206735e3e3fba7aa46f07cbcd1b6e99be5eb885d803a05610d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f3bcc22345312f8d.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f3bcc22345312f8d.svg
                                                    • Size 3KB
                                                    • SHA256 6614961bc63bed06c36336bbf9e319036b57fde7bba1120d6a6f3efe16aafe48
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f45cbb00d6bb82cc.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f45cbb00d6bb82cc.svg
                                                    • Size 322B
                                                    • SHA256 d32b690b0525b4fa227dc01328f12cf5d6bf07bd2e8886cb839fde079e247419
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f515140b598dd3f7.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f515140b598dd3f7.svg
                                                    • Size 481B
                                                    • SHA256 133df0cdeb44eecd6381f3f97c7edacba9956d9ae6de1902f7c5a988b9e8f123
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f7b78d9433c9d476.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f7b78d9433c9d476.svg
                                                    • Size 406B
                                                    • SHA256 c3f7cbe95b88ab96679037aecc2a6fc59286b2f047d0b56b5777de5f27d7bbf3
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f7fc539ce7a13719.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f7fc539ce7a13719.svg
                                                    • Size 1KB
                                                    • SHA256 65d27f13b9a522ee5e6f21058684445eef0791866ef29fd0bd34d1f82c5ac538
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f8695cbe3a95268b.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f8695cbe3a95268b.svg
                                                    • Size 870B
                                                    • SHA256 8f9307e7950595d6edd6b89f898ff848a6d95b8f37d39849b6faa31ae45f9dc8
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f907caea9dc5c5af.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f907caea9dc5c5af.svg
                                                    • Size 1KB
                                                    • SHA256 6b250c1857cae345f3fb6c64f9a43302c86eb99e2e77941003398db5af0477d3
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f95f5a575299231b.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f95f5a575299231b.svg
                                                    • Size 402B
                                                    • SHA256 306ed4c0b1c53e5fa313a3396dafda9ba506e3cc69e29f270b76affee5ae2e94
                                                    • MD5 SHA1 SHA512 TLSH

                                                    f9ea9c071ead0706.webp

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\f9ea9c071ead0706.webp
                                                    • Size 4KB
                                                    • SHA256 7b5bbf60227043945dda8a4ca2cf98a34dc65260136da04911593a2ff1b1acc6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    fc431416b1024934.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\fc431416b1024934.svg
                                                    • Size 2KB
                                                    • SHA256 31a2447cb28df6dd58aea512fcc054b455b4d1cb7a70a71eac4989aaa1d4e240
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ff8d935c2abdcdac.svg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\assets\ff8d935c2abdcdac.svg
                                                    • Size 2KB
                                                    • SHA256 2e62797f1b6c866bd2c2a5d27889bf0fb093bd8a25bab5f9dc2690861994b767
                                                    • MD5 SHA1 SHA512 TLSH

                                                    blacklist.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\blacklist.js
                                                    • Size 76KB
                                                    • SHA256 859840e5f7717c5b0eca66167a5d1d940b8ef183c18cdc764f1eeb4237ee9740
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    favicon_opera_one.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\favicon_opera_one.png
                                                    • Size 2KB
                                                    • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                    • MD5 SHA1 SHA512 TLSH

                                                    favicon_opera_one.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\favicon_opera_one.png
                                                    • Size 2KB
                                                    • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                    • MD5 SHA1 SHA512 TLSH

                                                    KaTeX_AMS-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_AMS-Regular.woff2
                                                    • Size 27KB
                                                    • SHA256 0cdd387c9590a1a9f9794560022dbb59654a7d86f187aa0c81495ad42d3a7308
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Caligraphic-Bold.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Caligraphic-Bold.woff2
                                                    • Size 6KB
                                                    • SHA256 de7701e42cf1f4cf0b766c03fb27977207eee2f4fd5d76fa82188406da43ea4c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Caligraphic-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Caligraphic-Regular.woff2
                                                    • Size 6KB
                                                    • SHA256 5d53e70ad607c2352162dec9e0923fb54ecdafaccbf604cd8dcf7d00facb989b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Fraktur-Bold.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Fraktur-Bold.woff2
                                                    • Size 11KB
                                                    • SHA256 74444efd593c005e3f4573b44524704c0af0a937fe911cca9e94068d0d140d3f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Fraktur-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Fraktur-Regular.woff2
                                                    • Size 11KB
                                                    • SHA256 51814d270d06ff0255dba0799994fa4d8c84d11f09951d47595f4abb1f3602dc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Main-Bold.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Main-Bold.woff2
                                                    • Size 24KB
                                                    • SHA256 0f60d1b897938ec918c8ce073092411baf9438f6739465693ff18b0f9d20b021
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Main-BoldItalic.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Main-BoldItalic.woff2
                                                    • Size 16KB
                                                    • SHA256 99cd42a3c072d918f2f44984a807cf7aa16e13545fd0875fc07c6c65f99e715b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Main-Italic.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Main-Italic.woff2
                                                    • Size 16KB
                                                    • SHA256 97479ca6cce906abc961ecac96faa5f9ca2e61b8e7670d475826bcdee9a7c267
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Main-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Main-Regular.woff2
                                                    • Size 25KB
                                                    • SHA256 c2342cd8b869e01752a9321dc17213fc40d4d04c79688c1d43f2cf316abd7866
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Math-BoldItalic.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Math-BoldItalic.woff2
                                                    • Size 16KB
                                                    • SHA256 dc47344dbb6cb5b655c8460d561f4df5f501b90c804ad3c6cec65fe322351ab1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Math-Italic.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Math-Italic.woff2
                                                    • Size 16KB
                                                    • SHA256 7af58c5ec8f132a2ddde9027c6d7814decce4d3b822a11192a42a20e2e973264
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_SansSerif-Bold.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_SansSerif-Bold.woff2
                                                    • Size 11KB
                                                    • SHA256 e99ae51144bf1232efcc1bfe5add36262c6866b0faab24fa75740e1b98577a62
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_SansSerif-Italic.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_SansSerif-Italic.woff2
                                                    • Size 11KB
                                                    • SHA256 00b26ac825e2095056396e0553b8ac26d3f8ad158c3826e28b4c45b385c4714a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_SansSerif-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_SansSerif-Regular.woff2
                                                    • Size 10KB
                                                    • SHA256 68e8c73ef42afd3ccec58bf0fba302cce448938e7fc020a5e31f8a952eee1342
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Script-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Script-Regular.woff2
                                                    • Size 9KB
                                                    • SHA256 036d4e95149b69ff9bcc0cd55771efeb25ffa3947293e69acd78d5ac328c684b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Size1-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Size1-Regular.woff2
                                                    • Size 5KB
                                                    • SHA256 6b47c40166b6dbe21a5dfca7718413f2147fd2399be1ba605d8ad39cedf25dfe
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Size2-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Size2-Regular.woff2
                                                    • Size 5KB
                                                    • SHA256 d04c54219f9eaec6d4d4fd42dfb28785975a4794d6b2fc71e566b9cd6db842dd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Size3-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Size3-Regular.woff2
                                                    • Size 3KB
                                                    • SHA256 73d591271b1604960cb10bb90fee021670af7297017e0e98480b332d11f51995
                                                    • MD5 SHA1 SHA512 TLSH

                                                    KaTeX_Size4-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Size4-Regular.woff2
                                                    • Size 4KB
                                                    • SHA256 a4af7d414440a1c1790825cfb700cf9cf43b0f2c4b04f0ebc523011ad9853ec0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    KaTeX_Typewriter-Regular.woff2

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\fonts\KaTeX_Typewriter-Regular.woff2
                                                    • Size 13KB
                                                    • SHA256 71d517d67827787cfabdf186914cc3358eda539e37931941f2b2fd4a21f68c0b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    handleReloadUI.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\handleReloadUI.js
                                                    • Size 4KB
                                                    • SHA256 556c8e62ece4a3ba53682c08c28d900a44f840b85428d7908903679e528a4a61
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    html_preview_sandbox.html

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\html_preview_sandbox.html
                                                    • Size 3KB
                                                    • SHA256 84ef907a752006e3f061a3bf2afac9eba4522db4ef7a86d27265049e2f2b4c7c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    manifest.json

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\manifest.json
                                                    • Size 3KB
                                                    • SHA256 48fa6b36251758210278d4693bbc072c250928e5a7de955c60d3d9d3a45afb62
                                                    • MD5 SHA1 SHA512 TLSH

                                                    neon_tab_update.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\neon_tab_update.js
                                                    • Size 15KB
                                                    • SHA256 40b7247abe2020140d233a787acd4927eccc5700090c6012fe61ff0896079887
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    operator_animations.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\operator_animations.js
                                                    • Size 8KB
                                                    • SHA256 0dda317a5802db6fe260c7116dc22d0186f238b5765de628c7d8a3caf771a8c3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    operator_startpage.html

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\operator_startpage.html
                                                    • Size 1KB
                                                    • SHA256 feef004a899808449ffbe7f234df43dbd28cef557a1153b52d74a4a03d0b1da0
                                                    • MD5 SHA1 SHA512 TLSH

                                                    operator_startpage.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\operator_startpage.js
                                                    • Size 398KB
                                                    • SHA256 7ac90117688760509f097ca737958afd46038be4e0ad7899af6d2c9d3d9e3e34
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    prevent_new_tab_opening.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\prevent_new_tab_opening.js
                                                    • Size 7KB
                                                    • SHA256 1f6ffbffc721ec9af89d9627441b5233b8c2df4aa7872a5b22e3f692be33e9f5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    prompt.html

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\prompt.html
                                                    • Size 752B
                                                    • SHA256 aeec9f8aac847c98d3f54f6c625e6903df9e87c27317053efe517b8b444ba82e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    prompt.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\prompt.js
                                                    • Size 25KB
                                                    • SHA256 3dde08aad78080a12b91045a04ae5a10d6a96448493d724c989f0dc17fe35554
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    reader_mode.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\reader_mode.js
                                                    • Size 112KB
                                                    • SHA256 a2207ded91252ef908e619b4903310995660fe8e1f1c447b4841e18ba9ff801b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    operator-scan.glsl

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\shaders\operator-scan.glsl
                                                    • Size 6KB
                                                    • SHA256 d5d880f6f3cd7180c2e97c5da22b59b11e01682f8af0d8b44e691da40f4b57e2
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    spotify_frame_interceptor.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\spotify_frame_interceptor.js
                                                    • Size 5KB
                                                    • SHA256 4b6bea6d84e29c8d430c8e907fd3d55e4f39a727bafe0452bdcb843748950e43
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    voice_capture_worklet.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5896_1155335690\CRX_INSTALL\voice_capture_worklet.js
                                                    • Size 9KB
                                                    • SHA256 8200fe8fd498e327a10ebf4952455fb56fd07688373c56d7381f2afa4201cf27
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    logo_128.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_100954141\CRX_INSTALL\public\icons\logo_128.png
                                                    • Size 7KB
                                                    • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    logo_16.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_100954141\CRX_INSTALL\public\icons\logo_16.png
                                                    • Size 653B
                                                    • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                    • MD5 SHA1 SHA512 TLSH

                                                    logo_32.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_100954141\CRX_INSTALL\public\icons\logo_32.png
                                                    • Size 1KB
                                                    • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                    • MD5 SHA1 SHA512 TLSH

                                                    logo_48.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_100954141\CRX_INSTALL\public\icons\logo_48.png
                                                    • Size 2KB
                                                    • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                    • MD5 SHA1 SHA512 TLSH

                                                    logo_64.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_100954141\CRX_INSTALL\public\icons\logo_64.png
                                                    • Size 2KB
                                                    • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                    • MD5 SHA1 SHA512 TLSH

                                                    main.js

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_1165174472\CRX_INSTALL\main.js
                                                    • Size 48KB
                                                    • SHA256 c2d961a8340848930aa0b7141ec03b973639d119756904d35fc8efe1a4cb8ec7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    manifest.json

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_1165174472\CRX_INSTALL\manifest.json
                                                    • Size 1KB
                                                    • SHA256 a2829f3f71f076f86b10bf610d9d35c45d8b653ab501c9cc5d7fe4634cbf4f9a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    icon-128.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_1197444366\CRX_INSTALL\assets\icon-128.png
                                                    • Size 9KB
                                                    • SHA256 8a909845237ef287d26ee417ab15fa924b0c16351f5b31dea656940bf09111f2
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    icon-16.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_1197444366\CRX_INSTALL\assets\icon-16.png
                                                    • Size 654B
                                                    • SHA256 8e6ff8ab8b4dedec067b7cb06d5f4dcad566d1174430f5e5156be4c196e6af66
                                                    • MD5 SHA1 SHA512 TLSH

                                                    icon-32.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_1197444366\CRX_INSTALL\assets\icon-32.png
                                                    • Size 1KB
                                                    • SHA256 7bafbbc53c7baf9cad8e417945ceff6298b6316dfd89f213f68accd888076aac
                                                    • MD5 SHA1 SHA512 TLSH

                                                    icon-512.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_1197444366\CRX_INSTALL\assets\icon-512.png
                                                    • Size 46KB
                                                    • SHA256 2f0ef2b9ecaf5773ec985141a2020497348eb77e71fc852e5823313adddd96ed
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    icon-64.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_1197444366\CRX_INSTALL\assets\icon-64.png
                                                    • Size 4KB
                                                    • SHA256 69d4bdc94e86a99d29d0d78300b246d08f4957b957cd81d400a2cff2ed815477
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    messages.json

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_22805008\CRX_INSTALL\_locales\en\messages.json
                                                    • Size 396B
                                                    • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Icon_Light_Neutral.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_22805008\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                    • Size 2KB
                                                    • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Icon_Light_Neutral.png

                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6416_22805008\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                    • Size 962B
                                                    • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    settings.dat

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                    • Size 40B
                                                    • SHA256 93f440dffffc238121ab2bbf487a5aa19baad1155ae7276ffe2223805b9c2da9
                                                    • MD5 SHA1 SHA512

                                                    BookmarkMergedSurfaceOrdering7f88fab7-ed71-4f92-89a2-0a97fea58817.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering7f88fab7-ed71-4f92-89a2-0a97fea58817.tmp
                                                    • Size 6B
                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                    • MD5 SHA1 SHA512

                                                    Bookmarks4f412a5f-18c6-4913-9cca-3d4b64e90e51.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks4f412a5f-18c6-4913-9cca-3d4b64e90e51.tmp
                                                    • Size 34KB
                                                    • SHA256 dc53006c9de1dbe5adc4f789d4729deca7199048b530b52b3a87e9f215bf1fa1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    BookmarksExtras2645c2ac-167a-4237-9b38-35b3f0f9fe23.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras2645c2ac-167a-4237-9b38-35b3f0f9fe23.tmp
                                                    • Size 223KB
                                                    • SHA256 8ec7a056aaf7acc36eeeaad2c563f129dfe4a68e7d913f8d526677d764abaff8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    temp-index

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                    • Size 1KB
                                                    • SHA256 8ba25cc7e6ccbda6580d202de94a67a6c95a2a56406b784b5cc7dc63154e7685
                                                    • MD5 SHA1 SHA512 TLSH

                                                    temp-index

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                    • Size 336B
                                                    • SHA256 a2777d8d760ca2ff8962c39ac73178ec438216527397b9215d502c89ff45c525
                                                    • MD5 SHA1 SHA512 TLSH

                                                    the-real-index

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                    • Size 48B
                                                    • SHA256 d64765dd3c51ab5359863f510b8230e20d4e42fa92acce161545b2657a593776
                                                    • MD5 SHA1 SHA512

                                                    data_0

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                                    • Size 8KB
                                                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                    • MD5 SHA1 SHA512 SSDEEP

                                                    data_1

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
                                                    • Size 264KB
                                                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                    • MD5 SHA1 SHA512 SSDEEP

                                                    data_2

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_2
                                                    • Size 8KB
                                                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                    • MD5 SHA1 SHA512 SSDEEP

                                                    data_3

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_3
                                                    • Size 8KB
                                                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                    • MD5 SHA1 SHA512 SSDEEP

                                                    index

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\index
                                                    • Size 256KB
                                                    • SHA256 4e26e67dfd8e71777080119aa435993df53f6e829a898627bd4f4b8bcbab9959
                                                    • MD5 SHA1 SHA512 SSDEEP

                                                    service_worker.js

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir5896_470316174\CRX_INSTALL\service_worker.js
                                                    • Size 1.1MB
                                                    • SHA256 b8131bf3d1520a70c0a42a45a74da16e6b1b24a271623851f143b5169e272a48
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    manifest.json

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6416_860762957\CRX_INSTALL\manifest.json
                                                    • Size 1KB
                                                    • SHA256 8b3312d3adb43c2f1b3e88d0941c8c0edbf038f9056a734f8b1495a1b1d1a51a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    scraping-method-Dq4mm50p.js

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                                    • Size 6KB
                                                    • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    service-worker.ts-fle0M1Xd.js

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                                    • Size 13KB
                                                    • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    service-worker-loader.js

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                    • Size 49B
                                                    • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                    • MD5 SHA1 SHA512

                                                    icon-32.png

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.7_0\assets\icon-32.png
                                                    • Size 1KB
                                                    • SHA256 92a8f864ce76af0bc1dc7fd186589d464b1f696a35d10bd94fcef5d0db608661
                                                    • MD5 SHA1 SHA512 TLSH

                                                    messages.json

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\_locales\en\messages.json
                                                    • Size 429B
                                                    • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    background.js

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\background.js
                                                    • Size 105KB
                                                    • SHA256 a0fcb8e352a16eebcfc67a4d2358f9b3e1175abb0bc4e8a26e8d5bf8dc6aeca8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    content.js.LICENSE.txt

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\content.js.LICENSE.txt
                                                    • Size 1KB
                                                    • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Icon_Light_Active.png

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\icons\128\Icon_Light_Active.png
                                                    • Size 2KB
                                                    • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Icon_Light_Available_Red.png

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\icons\128\Icon_Light_Available_Red.png
                                                    • Size 2KB
                                                    • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Icon_Light_Available_Yellow.png

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\icons\128\Icon_Light_Available_Yellow.png
                                                    • Size 2KB
                                                    • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Icon_Light_Neutral.png

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\icons\128\Icon_Light_Neutral.png
                                                    • Size 2KB
                                                    • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Icon_Light_Active.png

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\icons\32\Icon_Light_Active.png
                                                    • Size 883B
                                                    • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Icon_Light_Available_Red.png

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\icons\32\Icon_Light_Available_Red.png
                                                    • Size 895B
                                                    • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Icon_Light_Available_Yellow.png

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\icons\32\Icon_Light_Available_Yellow.png
                                                    • Size 895B
                                                    • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Icon_Light_Neutral.png

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\icons\32\Icon_Light_Neutral.png
                                                    • Size 932B
                                                    • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    index.html

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\index.html
                                                    • Size 222B
                                                    • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    rules.json

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.88.1082_0\rules.json
                                                    • Size 839B
                                                    • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                    • MD5 SHA1 SHA512 TLSH

                                                    076ecb77-f317-460f-8d01-c7011b164253.tmp518d6f64-096a-48ec-88bf-4619fca767e7.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\076ecb77-f317-460f-8d01-c7011b164253.tmp518d6f64-096a-48ec-88bf-4619fca767e7.tmp
                                                    • Size 27KB
                                                    • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    3adda6c1-090b-435c-800f-c0e16efeabe4.tmp8f0edc8b-9cb3-4526-afc9-0ab0518656dc.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\3adda6c1-090b-435c-800f-c0e16efeabe4.tmp8f0edc8b-9cb3-4526-afc9-0ab0518656dc.tmp
                                                    • Size 27KB
                                                    • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    54a5d5cf-ca30-4540-b6f1-76662e983222.tmpc8744d99-3cc3-4c57-be88-7c59e5042f61.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\54a5d5cf-ca30-4540-b6f1-76662e983222.tmpc8744d99-3cc3-4c57-be88-7c59e5042f61.tmp
                                                    • Size 27KB
                                                    • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    59bb7576-2f6a-4fac-a811-f859203c27c0.tmp7831e4b8-f543-4c93-8f2b-5b62f0eb3a38.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\59bb7576-2f6a-4fac-a811-f859203c27c0.tmp7831e4b8-f543-4c93-8f2b-5b62f0eb3a38.tmp
                                                    • Size 27KB
                                                    • SHA256 f79057f51183f6efa9c93c2a864f9a4165992119cf38c938cff219619aefe2d2
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    5ff95801-3f32-4c44-8b2d-026253ec840d.tmp484992ef-4bc6-4c05-b931-8c1a1139f7c2.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\5ff95801-3f32-4c44-8b2d-026253ec840d.tmp484992ef-4bc6-4c05-b931-8c1a1139f7c2.tmp
                                                    • Size 27KB
                                                    • SHA256 24683ea67b7b390d33c1d607fc44a309989ada5a9fa5fb4ec96a96fda96d44ff
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    d07d4f82-6848-49b8-a938-a7d1a7cf8953.tmp158a8348-b7da-45e7-ae80-b22299f533b9.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\d07d4f82-6848-49b8-a938-a7d1a7cf8953.tmp158a8348-b7da-45e7-ae80-b22299f533b9.tmp
                                                    • Size 27KB
                                                    • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Network Persistent State.backup

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State.backup
                                                    • Size 111B
                                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                    • MD5 SHA1 SHA512 TLSH

                                                    SCT Auditing Pending Reports

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
                                                    • Size 2B
                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                    • MD5 SHA1 SHA512

                                                    Preferences48e8431f-444d-42b3-949d-09143d321b0b.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences48e8431f-444d-42b3-949d-09143d321b0b.tmp
                                                    • Size 15KB
                                                    • SHA256 e72219844a47e24b7a57397d0974ad9d5b4bf1887c56f7217574451bf6aa2cbd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Preferences9ea25b4a-d031-4d91-9265-3f491137f375.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences9ea25b4a-d031-4d91-9265-3f491137f375.tmp
                                                    • Size 10KB
                                                    • SHA256 c53f34211f7e5d3420dec07c0812cab79e1b3d1cc646fde0d101fba709a977d0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Preferencesac8ad75d-d0ab-46e7-beae-6418a3cd9f95.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesac8ad75d-d0ab-46e7-beae-6418a3cd9f95.tmp
                                                    • Size 15KB
                                                    • SHA256 7f66518ae8c98212f049ba4468e55d69877253424e59e7721d069fac3aa590cc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Preferencesfae197b3-eab0-41e3-9e14-8ce006dbfd91.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesfae197b3-eab0-41e3-9e14-8ce006dbfd91.tmp
                                                    • Size 16KB
                                                    • SHA256 70589b557a2aa1c8522f03a250acd54fb2d3fcb961974f7e281524895525b07d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Secure Preferences.backup

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences.backup
                                                    • Size 82KB
                                                    • SHA256 fdd70d32c833f4b8de252b44395fac5f2f1e2b42bf7082da31b57b02a0538602
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Secure Preferences0bd3fead-dfa7-4e24-b8c4-d27a23a033b7.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences0bd3fead-dfa7-4e24-b8c4-d27a23a033b7.tmp
                                                    • Size 82KB
                                                    • SHA256 537496262151dcf534d6afb4eead20d05f3e88328fecf6a9b86cfea88338230e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Secure Preferencesfed1ea2b-1a8e-4f4b-aeaf-7c89ad140c29.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencesfed1ea2b-1a8e-4f4b-aeaf-7c89ad140c29.tmp
                                                    • Size 113KB
                                                    • SHA256 182f384990aed4681a82b41c9c9690a8b10a576be4d4d44f07b600eaa6ba7be8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    index

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index
                                                    • Size 24B
                                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                    • MD5 SHA1 SHA512

                                                    temp-index

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                    • Size 480B
                                                    • SHA256 058765c9d113eebc43d219499c025316f3ff5d147429aa84aec03530477cef3e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    temp-index

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                    • Size 96B
                                                    • SHA256 8847a82a13f684551f94852086bb35af1528cdea1b0ad490c8989fb555d49901
                                                    • MD5 SHA1 SHA512 TLSH

                                                    the-real-index

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                    • Size 72B
                                                    • SHA256 b3e9cde4b85d88d1a477fb63dc483bb3f568263a0b4e04e6986090d828e80387
                                                    • MD5 SHA1 SHA512 TLSH

                                                    CURRENT

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\CURRENT
                                                    • Size 16B
                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                    • MD5 SHA1 SHA512

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw
                                                    • Size 381B
                                                    • SHA256 41b6dc15eed15eae9b37c6ad8f21860e4da759d4aed7b8cc3e4d4d9eadbe9dd1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw1750406b-7a1a-425b-bcba-a5248b63dd8a.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw1750406b-7a1a-425b-bcba-a5248b63dd8a.tmp
                                                    • Size 1KB
                                                    • SHA256 841deb5fa24a5150d033c10d52b0f0bf1d9f9f9913421e7e807ff58402c6fe69
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw1bd4f19a-4aa7-4cd0-8502-9bc21137bc88.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw1bd4f19a-4aa7-4cd0-8502-9bc21137bc88.tmp
                                                    • Size 797B
                                                    • SHA256 80e764254c33b692bdd25eedb9b5a229b8a12798d7acb6fd51f80d982f4c19f8
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw2273ceaa-d2dd-44e3-a9f6-70b72a6caf64.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw2273ceaa-d2dd-44e3-a9f6-70b72a6caf64.tmp
                                                    • Size 797B
                                                    • SHA256 7e5757400857b82ed31dd85229a1e1ce71338d78b24bfd9b7053404eb6582045
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw36cab6f5-b802-4795-aab6-4d77df084f54.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw36cab6f5-b802-4795-aab6-4d77df084f54.tmp
                                                    • Size 957B
                                                    • SHA256 34d91bca5b3be8061b0d8eb941dd44519423525d400529016ebdfd3150f1f3f8
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw3747e2d6-0a57-4b03-9f63-8542c1092b3f.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw3747e2d6-0a57-4b03-9f63-8542c1092b3f.tmp
                                                    • Size 493B
                                                    • SHA256 ba07382c2427627da972dc35b518c0e2ff612ae0451c7a45981850727d52d7f8
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw4b55325f-eacd-4f20-a5ce-612d55c45020.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw4b55325f-eacd-4f20-a5ce-612d55c45020.tmp
                                                    • Size 605B
                                                    • SHA256 4c393bcded5087c2c39789d5b37cf451377dda0ddd5e79ba7c4de7eb6e0c8b4c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw78166a50-d69e-4f4b-8e11-553762b4236f.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw78166a50-d69e-4f4b-8e11-553762b4236f.tmp
                                                    • Size 781B
                                                    • SHA256 baf7082a209ab8249fae009384d720b521e2cd2fe21ca9b966078cad40215f78
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw90f0fa58-3d10-48a3-b725-1071bc25c1b7.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.raw90f0fa58-3d10-48a3-b725-1071bc25c1b7.tmp
                                                    • Size 1KB
                                                    • SHA256 fc0dbe2639b18e43e1f1388d4146a71a2e3e739f0779a2aae97108200455e2ee
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.rawb5760c51-5b32-4022-966b-d441bc2ecd52.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.rawb5760c51-5b32-4022-966b-d441bc2ecd52.tmp
                                                    • Size 1KB
                                                    • SHA256 3e53123c46e1d4c0362d3402ffe88da97e10dd5d5eb546e65bd1b8ec5df0e948
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.rawec356731-7bc7-4b42-9c70-7ef04b39d00f.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.rawec356731-7bc7-4b42-9c70-7ef04b39d00f.tmp
                                                    • Size 1KB
                                                    • SHA256 46ef4b105a8c30d31ffde039485cce44e797243935d519198d36eec9c92ce352
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.rawf5d9ed30-b86a-42ef-9b65-390eb782ca6e.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.rawf5d9ed30-b86a-42ef-9b65-390eb782ca6e.tmp
                                                    • Size 1KB
                                                    • SHA256 f910d71e30ef9ad41cd7e31d3be61f45b0bb38b4be9b4aef492e8fc5c77ce0a8
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.rawf9a006c9-822a-4410-ba0e-2f2da1f0169c.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3a0e41b5-199e-4eb4-b9f3-b917040ab4f8.rawf9a006c9-822a-4410-ba0e-2f2da1f0169c.tmp
                                                    • Size 1KB
                                                    • SHA256 77e39378f785bc4f3037267e1401b30dcd55d746ed9a8afab7a18b153a6c1a8d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw
                                                    • Size 12KB
                                                    • SHA256 93737ff40b459d5dca85d52442affb1c393c9a524de4fc4dc2619e213552d397
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw
                                                    • Size 381B
                                                    • SHA256 6ba51f959995ca3daf7eea847f6f7d4eee5e1750a0cfabcfbb9b7dbc4e9c9025
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw020cf87c-d74c-40cd-b982-8832ca2d3947.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw020cf87c-d74c-40cd-b982-8832ca2d3947.tmp
                                                    • Size 13KB
                                                    • SHA256 8ca154a5b2aa7e2210815bd87ccfc6acdf159f4149dd5e232d48c9b7d845dc3a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw0594c7a8-25c4-4ec5-ae0a-b2074e8f001e.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw0594c7a8-25c4-4ec5-ae0a-b2074e8f001e.tmp
                                                    • Size 9KB
                                                    • SHA256 e90638651bb86062fa0297578be0709a88036c82a3327037f0ab0fc365b5c2c9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw0c59ddf6-e937-44d5-bb18-9f3906650895.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw0c59ddf6-e937-44d5-bb18-9f3906650895.tmp
                                                    • Size 749B
                                                    • SHA256 02154ac53428d44643d1c753907e1a559de6ce09c9a645a8e9d9578210b97a4a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw139ac8ff-3c4b-4cbd-8dac-0df6f3462336.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw139ac8ff-3c4b-4cbd-8dac-0df6f3462336.tmp
                                                    • Size 9KB
                                                    • SHA256 380d0c84a218be38ac083025eb44870e4df2037b105dee78e2c4fcf94b281829
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw153bb2bc-6dd6-4808-bd7b-74b6108ac23a.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw153bb2bc-6dd6-4808-bd7b-74b6108ac23a.tmp
                                                    • Size 9KB
                                                    • SHA256 a2171103ea94b898f3719550a576e22f41365b7e4111871147d2b5435f997d8d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw15942454-9c63-4baa-afb1-81595033a2c4.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw15942454-9c63-4baa-afb1-81595033a2c4.tmp
                                                    • Size 9KB
                                                    • SHA256 73378c6a5e4c06b2a8ea8651c9d057fec440a896b204036ec0cf67e0aea7d2e4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw16a71989-9623-4de8-ba74-f7537bd473ba.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw16a71989-9623-4de8-ba74-f7537bd473ba.tmp
                                                    • Size 1KB
                                                    • SHA256 958186088d43d8355edb56574649096630f5fa6bf595269e734f06efff1d9288
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw1b962802-8291-4df5-b23e-1b675e006328.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw1b962802-8291-4df5-b23e-1b675e006328.tmp
                                                    • Size 10KB
                                                    • SHA256 072cfa653dcf204c3547fe68f86da20ad98cba2874d7a3f3d6468687fa3130af
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw1cd51856-2725-4d30-ab9b-8cef69afea01.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw1cd51856-2725-4d30-ab9b-8cef69afea01.tmp
                                                    • Size 10KB
                                                    • SHA256 193d78fd3bb17410ddecdb32cd33d53c588db26a4bfc9c75b39186250aa721de
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw20835f4e-fc9f-4608-afca-da6c4a69177c.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw20835f4e-fc9f-4608-afca-da6c4a69177c.tmp
                                                    • Size 925B
                                                    • SHA256 fa0950dfa7a496d4d693329d155d240e5a403ffbc39bca7b878f0701c8734537
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw24016ced-d182-4456-b3fa-23978be9a0f3.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw24016ced-d182-4456-b3fa-23978be9a0f3.tmp
                                                    • Size 8KB
                                                    • SHA256 1de8d7b8c5c33120442f57811e04482b88a7f6885dd982862c2bc6833b882d6f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw253e7f6b-13a7-44c6-8d94-371091f28903.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw253e7f6b-13a7-44c6-8d94-371091f28903.tmp
                                                    • Size 12KB
                                                    • SHA256 9bfb7c92a7d02b41e3f83275401b45c2f020f64d06e3ad6ecc5be3f12500af6b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw2559ea26-4a32-489d-9585-a49a77a7f592.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw2559ea26-4a32-489d-9585-a49a77a7f592.tmp
                                                    • Size 8KB
                                                    • SHA256 3f39b047bc5c2d5246cd7c3484ef7c54881acf9b1a9dc2fb2ffa7ea28f5afe7f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw25abbb8b-2f00-4f6b-a488-2a5fd8c52588.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw25abbb8b-2f00-4f6b-a488-2a5fd8c52588.tmp
                                                    • Size 8KB
                                                    • SHA256 16f59982be74ae055b497d696a920bbb981fe1d21b0a652b9e9157e42469a7e9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw2806570b-e3fa-47bb-b468-25f070a58cb1.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw2806570b-e3fa-47bb-b468-25f070a58cb1.tmp
                                                    • Size 1KB
                                                    • SHA256 b79435f6bb393f4263a4f8e9c7e912d791ee6104967fb8d7c9ab393ec52c530f
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw290c446d-69cb-4532-8671-80ea178d4cb4.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw290c446d-69cb-4532-8671-80ea178d4cb4.tmp
                                                    • Size 9KB
                                                    • SHA256 11a64a1a0baba3a3aa77658cca0c4c1470987b447d4f9d92769081aeeebb191a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw3bee598a-dc5c-4c8f-8032-66d42eb5693c.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw3bee598a-dc5c-4c8f-8032-66d42eb5693c.tmp
                                                    • Size 8KB
                                                    • SHA256 a5dfbbf593dbe7f074e8beff030b2121ae79cb6f9f2c5e48e32fb5b96505a0fd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw3d3efc02-806e-4c21-8834-13352d80ecea.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw3d3efc02-806e-4c21-8834-13352d80ecea.tmp
                                                    • Size 10KB
                                                    • SHA256 56f23a064dd65fb4f62db5fbef0cec3413e724cb0b0a91ad9d4f2ea52d595297
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw4182432a-df9c-42ce-b3c8-b8f2b6b462b4.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw4182432a-df9c-42ce-b3c8-b8f2b6b462b4.tmp
                                                    • Size 9KB
                                                    • SHA256 8c09cd6306f8001245fc644772534d84bbe97c4a98f91bc8ea81dd9c9238de91
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw41c01cee-a8e9-41c0-9744-1f72d95cc822.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw41c01cee-a8e9-41c0-9744-1f72d95cc822.tmp
                                                    • Size 13KB
                                                    • SHA256 3c50bf752c659ac9dbbed1cdd5a26df941fa16f04fd435d4efae29204501d8c6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw432a9435-f231-4b5d-8ec4-a69f34d2d650.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw432a9435-f231-4b5d-8ec4-a69f34d2d650.tmp
                                                    • Size 13KB
                                                    • SHA256 8c5891b42b4f0c34ff0780497f47914cc0d88ea2796b66e0992054ad8e9e60df
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw4899848d-bb1c-4a04-b342-653739f18208.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw4899848d-bb1c-4a04-b342-653739f18208.tmp
                                                    • Size 13KB
                                                    • SHA256 7969e191870504ee3c6187a3e573fce209d773bcb97b5e96baf0bbd81de6e742
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw49d331ce-0f04-4d8d-87ed-120b98d441a7.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw49d331ce-0f04-4d8d-87ed-120b98d441a7.tmp
                                                    • Size 11KB
                                                    • SHA256 5824200c4fa42bec0212a7abdb3b7313c360edbfecf71a1c7cb8a8f70a697869
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw4d8f6c3d-e0c5-4d55-8c08-ed0b793c34e4.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw4d8f6c3d-e0c5-4d55-8c08-ed0b793c34e4.tmp
                                                    • Size 12KB
                                                    • SHA256 db7c9d1d6101ae85857d7b905be3c8516946e587794fc6992b1ad414981f14d7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw4f6c57dd-6dfb-4473-8659-4058ff2fd94c.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw4f6c57dd-6dfb-4473-8659-4058ff2fd94c.tmp
                                                    • Size 9KB
                                                    • SHA256 aea267e6c02bc8f767f5da0de2bd19cad1e7523c02978337daaa1be58a2fa633
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw5a42ecd1-8786-4418-b856-45e056909505.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw5a42ecd1-8786-4418-b856-45e056909505.tmp
                                                    • Size 13KB
                                                    • SHA256 870862c44d331c1f7938af46b19854236cc9870a3e554587ad35971ec763b51d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw5d2ecb9b-0dac-4172-9320-dfc1e905881f.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw5d2ecb9b-0dac-4172-9320-dfc1e905881f.tmp
                                                    • Size 10KB
                                                    • SHA256 c7a1ce6afbf3fa0bcdd0df80da66c07c390194ffc9dd1b98ff52c973036631db
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw5f82de10-29cb-4a7f-b09c-9df4e5523f24.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw5f82de10-29cb-4a7f-b09c-9df4e5523f24.tmp
                                                    • Size 13KB
                                                    • SHA256 1a8c3cb728e4405327eb94e2fb6298549bb82049e979c094c09229391e01348e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw6a4fa9a7-6456-4f48-a4a5-8c46de7e0415.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw6a4fa9a7-6456-4f48-a4a5-8c46de7e0415.tmp
                                                    • Size 11KB
                                                    • SHA256 2714b060120d5c176a146081bb21cb28c98c4790527adc56e126d6bdbc3235c0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw6ae7158f-b624-4f3e-aa5a-754926216a03.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw6ae7158f-b624-4f3e-aa5a-754926216a03.tmp
                                                    • Size 9KB
                                                    • SHA256 6579cde493e632c89f2459a60c26506fe5d5f6ed40f82aefbbf21d22e7968f0c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw700cf607-cc40-47c0-9c9e-b7015489a047.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw700cf607-cc40-47c0-9c9e-b7015489a047.tmp
                                                    • Size 10KB
                                                    • SHA256 13871052369ff7de4ea9e7d312b08fad6c717c4a79382ce152e864d63e066902
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw70130863-fd38-492c-8c66-8c380d91aeda.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw70130863-fd38-492c-8c66-8c380d91aeda.tmp
                                                    • Size 7KB
                                                    • SHA256 d1f2d44a9c99bc173179ce477bf1a9dbc84574d20a0306603b8dc1867a436eb1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw706def08-ba1f-4cc9-a32c-3a13b149d9fb.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw706def08-ba1f-4cc9-a32c-3a13b149d9fb.tmp
                                                    • Size 1KB
                                                    • SHA256 f073c3f79754a0992ab84e31740a74dfedccbe2f9cd86ceb30e9e2023dcdc077
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw70cba85b-fc0b-47e5-ac56-5bcc339546b8.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw70cba85b-fc0b-47e5-ac56-5bcc339546b8.tmp
                                                    • Size 9KB
                                                    • SHA256 06db66704377457b4395bee5dedd73493ec6f9de5075e4ff38ec83660e12c767
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw7121d0e8-c5e2-4fc2-b5c6-2a5336df2cd1.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw7121d0e8-c5e2-4fc2-b5c6-2a5336df2cd1.tmp
                                                    • Size 13KB
                                                    • SHA256 204e1073c113d389642f72ec3d7dede0d1968a8076810e19416160778545d388
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw713c6b86-d539-4b3d-88e7-f19e6ed72825.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw713c6b86-d539-4b3d-88e7-f19e6ed72825.tmp
                                                    • Size 13KB
                                                    • SHA256 8a7298f1b8c319e78b23c676cf7164ed1c52d4511e3e25eab613c2506fe8fecc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw73687da4-2459-4906-adb1-54e1ad113985.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw73687da4-2459-4906-adb1-54e1ad113985.tmp
                                                    • Size 8KB
                                                    • SHA256 b5db7e9037ea40c0973f1cbc63a86fcf8314b13ffddbfa4ebe9b249d9130c94f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw757dbfce-b0ad-4091-848a-bbbee99a9209.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw757dbfce-b0ad-4091-848a-bbbee99a9209.tmp
                                                    • Size 10KB
                                                    • SHA256 a8d26cb9ef76d64d31b2eef0398cd1844a922ca0f5f0fd48ddcb730f68d8e974
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw7a473bd4-fbbf-4ab4-83f3-6f37f1797493.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw7a473bd4-fbbf-4ab4-83f3-6f37f1797493.tmp
                                                    • Size 11KB
                                                    • SHA256 500da0ea8259bc1959ea5a8cb2abadbe518009d73ece9bc35ccf3d5d5e08d3c6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw835b40df-493e-4723-a80c-8aa22c2b6f02.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw835b40df-493e-4723-a80c-8aa22c2b6f02.tmp
                                                    • Size 6KB
                                                    • SHA256 30b37b564b2b2f9cb2ab29ce328c3b3517c54a6b0af3bbc8f39449ebe5016204
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw85bbccc3-d461-4b40-ab42-6ebe1caab161.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw85bbccc3-d461-4b40-ab42-6ebe1caab161.tmp
                                                    • Size 12KB
                                                    • SHA256 4651dcaa6e80bcc8d8a22a3b57820e93738db531257d6dd1b0015a0c6f9e4c1f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw872a5e73-c7ba-4e52-926c-60567c5ec360.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw872a5e73-c7ba-4e52-926c-60567c5ec360.tmp
                                                    • Size 13KB
                                                    • SHA256 fbe7ff846d607c386383d96b3c44daf40e8613ec5adc347c644e02ade4f2069b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw8740158e-df42-4208-afad-10af4c253b4d.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw8740158e-df42-4208-afad-10af4c253b4d.tmp
                                                    • Size 11KB
                                                    • SHA256 7e879e0c683be0ad6cb43750b656b6841f3df361e74cf82a4c26fc1750cacb2b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw88b40b3d-a9f4-4ca1-98d3-688b311379cb.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw88b40b3d-a9f4-4ca1-98d3-688b311379cb.tmp
                                                    • Size 10KB
                                                    • SHA256 b6d4af01da66400fc800793374f23beb519fd19797e2d0e720a344939bb78b9b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw8b0c9f9b-5f25-485b-abc7-0bb67632dda8.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw8b0c9f9b-5f25-485b-abc7-0bb67632dda8.tmp
                                                    • Size 1KB
                                                    • SHA256 1be6c21260c97a8c7b408f806968dfb9a7c1e5bac190e4d0a3d38956a2d55b03
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw8e55ccd9-c6c0-4161-bfa0-6723514fed84.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw8e55ccd9-c6c0-4161-bfa0-6723514fed84.tmp
                                                    • Size 8KB
                                                    • SHA256 0cb728b48766be96004e73ba2f9e8885fc732891f3cf354f218f0b114bb958e0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw90f549c1-4295-44cf-b703-7808825926d1.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw90f549c1-4295-44cf-b703-7808825926d1.tmp
                                                    • Size 13KB
                                                    • SHA256 0433a820e434d6a064c85cb072ef6c9216be598834eee25478377b4db7f6930b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw93786d58-c7f2-44d0-9c13-b4a46b5e854d.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw93786d58-c7f2-44d0-9c13-b4a46b5e854d.tmp
                                                    • Size 9KB
                                                    • SHA256 6a3e822f56794c5b71a7991b959e94a430ba16ca14b74ae199dae374a778f738
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw94fa9634-d012-4823-aaad-34d8c8f6b11a.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw94fa9634-d012-4823-aaad-34d8c8f6b11a.tmp
                                                    • Size 13KB
                                                    • SHA256 56ce58881b3c74c375d96475337b9998f2f3f712801e5620c8b56d7b9e9d4c04
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw967e7a88-5466-4241-ba4c-4e223a50f0db.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw967e7a88-5466-4241-ba4c-4e223a50f0db.tmp
                                                    • Size 1KB
                                                    • SHA256 7c43c084ce2aa6f46fa04365fdcc36c92c1f404792d60b57778a00e8ec632d16
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw98da530f-922b-4c0a-9fb0-8c76dab66c00.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw98da530f-922b-4c0a-9fb0-8c76dab66c00.tmp
                                                    • Size 13KB
                                                    • SHA256 b441523c80f3939ae04bf3bf92218768372bc047e7269935838dc47cb8c8ff8b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw98ed75a5-3d98-4854-aeeb-fde5c2751c75.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw98ed75a5-3d98-4854-aeeb-fde5c2751c75.tmp
                                                    • Size 13KB
                                                    • SHA256 021e7f69dc41ea29ef6f5c99249fd62da7764c6f34eaa136dc505c7e061e2ba7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw9af41a58-1242-46c9-92a8-bd885922a3f7.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.raw9af41a58-1242-46c9-92a8-bd885922a3f7.tmp
                                                    • Size 13KB
                                                    • SHA256 d3a61b276f5ad165e9671dea763efef38ca124cfb64aa3854d736ae1f3c7114f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawa31fc95d-c2c3-4445-938a-fe5d8e1d855e.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawa31fc95d-c2c3-4445-938a-fe5d8e1d855e.tmp
                                                    • Size 973B
                                                    • SHA256 2bf6dd8a5526d2ce300e963ee2b45c12f630d7e9a7658df9cfe2d00114040c68
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawa42e19cf-7d56-461f-92ac-4a072a8366eb.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawa42e19cf-7d56-461f-92ac-4a072a8366eb.tmp
                                                    • Size 1KB
                                                    • SHA256 ccaa039c6a09cb597c285fe09f5e8dae1f0e0ef2b4668ebedff36dcda1eaaeb2
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawa4a7d2ea-f0c3-41ad-8bfe-a4dc6e3b1cdb.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawa4a7d2ea-f0c3-41ad-8bfe-a4dc6e3b1cdb.tmp
                                                    • Size 13KB
                                                    • SHA256 1a83ae0ce84248c684bec760d8193d3047251152110ebb033ca276a424f8edd3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawa95afdab-ca50-4638-8bcb-7cc3300f04d8.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawa95afdab-ca50-4638-8bcb-7cc3300f04d8.tmp
                                                    • Size 9KB
                                                    • SHA256 1c62515fef521e9d0381995f457ac8886e8b0386fc0ab4e454788f8c221abf21
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawad6cbfdc-f0bc-4b45-9a30-369e212b9a73.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawad6cbfdc-f0bc-4b45-9a30-369e212b9a73.tmp
                                                    • Size 11KB
                                                    • SHA256 9c743a8b7dbbda28e0cc0d9f0253c82cf8726753715b4d35af2e3db6c1aaf518
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawb1115c9b-490d-4ae7-afad-ae24619114d7.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawb1115c9b-490d-4ae7-afad-ae24619114d7.tmp
                                                    • Size 10KB
                                                    • SHA256 dfd90040bf5c8044861c9370c694538a57521e944a04b4acd7a07e1b45d89591
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawba89d463-e034-40f2-8e6a-29ae223e4712.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawba89d463-e034-40f2-8e6a-29ae223e4712.tmp
                                                    • Size 11KB
                                                    • SHA256 c577bd57ddb569bfa1d73fc0b3959ab0a853350b8db55eaa905cd56a9a01458a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawbd2a62e1-d495-44f9-bc3f-07e66b354290.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawbd2a62e1-d495-44f9-bc3f-07e66b354290.tmp
                                                    • Size 621B
                                                    • SHA256 814c99c0581435ec209aab6c76aee4176c6884013ece0e5bad010ffd9e94dce5
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawbd88c6ab-1b65-4fff-b6a2-a8f334f66112.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawbd88c6ab-1b65-4fff-b6a2-a8f334f66112.tmp
                                                    • Size 9KB
                                                    • SHA256 1790d2bad2503c6de2f8142da77304e6d2af0e8e89758b00f14ed53b512921eb
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawbdcb3dd2-b4ae-4aa5-b0ef-ac9e22da8c6e.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawbdcb3dd2-b4ae-4aa5-b0ef-ac9e22da8c6e.tmp
                                                    • Size 11KB
                                                    • SHA256 7ea1f5049d8b477de46348f5cb4d31ec4c49fb96bccd2820dd21f0ff49094f2b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawbdf3b937-ca73-421a-ba53-2e333344cbc2.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawbdf3b937-ca73-421a-ba53-2e333344cbc2.tmp
                                                    • Size 493B
                                                    • SHA256 393fa45b1cee6bbda04ac0409403974cb1b2e93891a80bc87ac5850630ffb9fc
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawbe1ef4f5-1a89-409c-93d9-faf8901549c0.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawbe1ef4f5-1a89-409c-93d9-faf8901549c0.tmp
                                                    • Size 10KB
                                                    • SHA256 d4996b34790588b499b99e21cf0804b84faebca3eb497a3349f80899584c852d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawc133f83b-9cfd-4a79-8ae3-c19a957af2e9.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawc133f83b-9cfd-4a79-8ae3-c19a957af2e9.tmp
                                                    • Size 1KB
                                                    • SHA256 c9334753087665eafb550f67a5f6ba200aead0236a39cac4a354c4859f96ddc4
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawc14ad271-09bd-4915-a2c8-1e76eaa419c8.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawc14ad271-09bd-4915-a2c8-1e76eaa419c8.tmp
                                                    • Size 7KB
                                                    • SHA256 39acfd72824100c7ada56c1daddf15b26ada6327790fd4456b011c8bf4b26d3f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawc6d284dd-0bc0-44b8-b9c7-31f093ad2bf6.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawc6d284dd-0bc0-44b8-b9c7-31f093ad2bf6.tmp
                                                    • Size 13KB
                                                    • SHA256 603f53abababc4fd7fe4221843471acda04e5d9aa43928c03fa9c6d3cce65c5e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawcb174be7-c18a-4109-87f7-2d453c848ed7.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawcb174be7-c18a-4109-87f7-2d453c848ed7.tmp
                                                    • Size 9KB
                                                    • SHA256 59624d42239ff5a2510a7e9ca95e97a9fad77825b79ee7d000960920394d6559
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawcf4af403-8524-42c4-8344-fc5a2cb8d861.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawcf4af403-8524-42c4-8344-fc5a2cb8d861.tmp
                                                    • Size 6KB
                                                    • SHA256 234e8c5a04d593e72156ddc24e5828274c24010f3fe640606ed1a87bbfdd9c65
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawcf538a3b-530b-457c-b168-e892fad9d8b0.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawcf538a3b-530b-457c-b168-e892fad9d8b0.tmp
                                                    • Size 13KB
                                                    • SHA256 b896f6e74ec19b74764d72bf7d340206aa3779de545a63af4dbec6138cfd04d9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawd01f0638-f882-4418-8130-104ee8712768.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawd01f0638-f882-4418-8130-104ee8712768.tmp
                                                    • Size 12KB
                                                    • SHA256 862fcc812bcfe7e12d73f26a10c28cd3d356089b32bdee6737edf8961b043d0d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawd1ded271-3fb5-43f3-abfe-6ad506e46283.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawd1ded271-3fb5-43f3-abfe-6ad506e46283.tmp
                                                    • Size 7KB
                                                    • SHA256 b45c499098804d75e435161e9bd21d77a829aa6b189b70b401cd49530735792a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawd756ceef-dd6f-41dc-9753-35d74c1dc2f8.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawd756ceef-dd6f-41dc-9753-35d74c1dc2f8.tmp
                                                    • Size 9KB
                                                    • SHA256 6d997541892a1f4ef9bed09d384e975b50d9fb98fca7320fcb4eaa4d075fa925
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawdce102e4-2089-4455-afc1-9493c1e72c1d.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawdce102e4-2089-4455-afc1-9493c1e72c1d.tmp
                                                    • Size 9KB
                                                    • SHA256 4bcdc6929752d7f1e190cf500445a71b0414dd87deb36e578b0558b4c0a9db2d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawddfc1757-41c7-44b2-b562-53a780851eba.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawddfc1757-41c7-44b2-b562-53a780851eba.tmp
                                                    • Size 8KB
                                                    • SHA256 fc4dfcca77b25f57f1450adde16c95bde39f21b486a984dde74926df79867284
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawe3fa3cb5-9435-4948-ae34-f8d694e32ec8.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawe3fa3cb5-9435-4948-ae34-f8d694e32ec8.tmp
                                                    • Size 1KB
                                                    • SHA256 491b9e5c53298295506b1666d33ec861ef59fd89c5ce0191fb47ebbdc1a40113
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawe8657e1e-c8e6-4a1e-885b-4e1db9feb25f.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawe8657e1e-c8e6-4a1e-885b-4e1db9feb25f.tmp
                                                    • Size 1KB
                                                    • SHA256 d99df5ee515113e0e37afde2a0bd04f9b09972cfdc93240e99eec5d77801c6f2
                                                    • MD5 SHA1 SHA512 TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawf09c91dd-22aa-4d0f-83eb-c58515618da5.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawf09c91dd-22aa-4d0f-83eb-c58515618da5.tmp
                                                    • Size 10KB
                                                    • SHA256 f73f3ce6db032fa9eaddfbd539c0df7fc7a66fca4e18fb215eb9bca3ace31761
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawf16eadbd-e855-4779-8a97-7cccc296b3e5.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawf16eadbd-e855-4779-8a97-7cccc296b3e5.tmp
                                                    • Size 13KB
                                                    • SHA256 cfd52025a7e302568fe88d2c8908b38fa41a29122ce2ed5600c230fd55630a0d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawfb775e22-9339-40c9-acbc-3a9d23089706.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawfb775e22-9339-40c9-acbc-3a9d23089706.tmp
                                                    • Size 13KB
                                                    • SHA256 a38de798344c029e3850e23e235d588afc09a8820e81c653024786beed35b5d3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawfd449f8d-257b-4f9a-85d7-703c6db5e808.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_b29dbc3c-3756-4f80-a3e4-ee08fe916d5d.rawfd449f8d-257b-4f9a-85d7-703c6db5e808.tmp
                                                    • Size 12KB
                                                    • SHA256 0318c366915066c9b7c81e2889a6bd2a085a619f630bb7b3eb3921c798521084
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    MANIFEST-000001

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\MANIFEST-000001
                                                    • Size 41B
                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                    • MD5 SHA1 SHA512

                                                    ssdfp5896.0.1227631169

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5896.0.1227631169
                                                    • Size 203B
                                                    • SHA256 16dfaf293655e94933ace027930d5ea49cd124f5120851988125e0110e13d7d1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp5896.0.12276311692b194a02-8dd0-46ff-9f17-da08b93a0e5b.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5896.0.12276311692b194a02-8dd0-46ff-9f17-da08b93a0e5b.tmp
                                                    • Size 265B
                                                    • SHA256 d656ce019eda1c796319d18fcbe9fa5870d1ed3b9da2c1e75e565fc7e161d4a7
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp5896.0.12276311698e6d819c-7867-4714-9859-53e2295b8a59.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5896.0.12276311698e6d819c-7867-4714-9859-53e2295b8a59.tmp
                                                    • Size 1KB
                                                    • SHA256 23b72f577cc180faf4ef77dec443a89f3b5150f55339063dc9ca9f1b25277e49
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp5896.0.1227631169ae443bf5-1d00-4e81-96da-3ddc90e29694.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5896.0.1227631169ae443bf5-1d00-4e81-96da-3ddc90e29694.tmp
                                                    • Size 1KB
                                                    • SHA256 f701efd8d265de90dbef67c7274693fbfa1b675950385b746af290bc1497edfb
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487
                                                    • Size 457B
                                                    • SHA256 83ba5d49a28b7ac0eab6a7f506d0bffca8827f7260f204c0e9cd8ff8233bee6d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.1913244871ed9be3b-fd68-438f-b0d2-d1b89471d7ad.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.1913244871ed9be3b-fd68-438f-b0d2-d1b89471d7ad.tmp
                                                    • Size 3KB
                                                    • SHA256 6e0ad4ebc44e2d3bcb459755d745c7c160ab98a233b54c83e6e3c13a11afc436
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.19132448736c112a6-f994-48cd-b3ff-ca776b2768fb.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.19132448736c112a6-f994-48cd-b3ff-ca776b2768fb.tmp
                                                    • Size 3KB
                                                    • SHA256 857c60307e9217f0c197efb75212a57d3a15c8cfd5a8f130896d453143516ebd
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.1913244874e915fc8-b4f5-469e-8e0c-0ca02ee200bb.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.1913244874e915fc8-b4f5-469e-8e0c-0ca02ee200bb.tmp
                                                    • Size 732B
                                                    • SHA256 a9d93afe8c7cc44ad6b8220addc94f801596373a91add10081dcb06e39830bd3
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.1913244875ef678bd-832b-4619-982c-b90cd8ed63c3.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.1913244875ef678bd-832b-4619-982c-b90cd8ed63c3.tmp
                                                    • Size 1KB
                                                    • SHA256 a19ed4e13f855459ed61860a61f739476df5976b17f26b0c1f1c1a570e4ba1d1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.19132448763d9cc49-7d4c-4765-828d-7ad15ed67269.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.19132448763d9cc49-7d4c-4765-828d-7ad15ed67269.tmp
                                                    • Size 3KB
                                                    • SHA256 d1424853c4aea8c4041ac9a66cf566e6261bf7d25f3d3441e78b842286c176c4
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.19132448766d8748a-6f64-463a-8d04-faab697d49e6.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.19132448766d8748a-6f64-463a-8d04-faab697d49e6.tmp
                                                    • Size 1KB
                                                    • SHA256 8be2bee400c5a1682b58eb59faa76bee9f1789ab926c0b4e4ef33c0de79517c7
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.19132448774b1fd5d-0b09-4dc1-879e-07534ff80f1a.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.19132448774b1fd5d-0b09-4dc1-879e-07534ff80f1a.tmp
                                                    • Size 555B
                                                    • SHA256 1dd02f7432243e02c688a3d1f84c3a6dde389d4a2a35de7d3bcf6b5f9680bc8d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.19132448777d5b6bf-46ce-4099-9fb9-d558b63183b3.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.19132448777d5b6bf-46ce-4099-9fb9-d558b63183b3.tmp
                                                    • Size 2KB
                                                    • SHA256 76e9f2b92c896b1a21a1bf530abf8417585fd3dfd7ea34c9d7233353355b304a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.19132448786f1e876-85e5-40ae-b6e9-ab82dd1c45de.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.19132448786f1e876-85e5-40ae-b6e9-ab82dd1c45de.tmp
                                                    • Size 924B
                                                    • SHA256 ced91862d5d1499fdde7632a1ad4a9723c14cd724784329ac2a0608b238943ad
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487a73a540e-4964-4d6c-af54-d136efb7226e.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487a73a540e-4964-4d6c-af54-d136efb7226e.tmp
                                                    • Size 3KB
                                                    • SHA256 9cdaafcce2bb584068445f7c6628361f3960db977297aaef902e409892d0448f
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487ae7027a3-9dcc-49da-a5bb-0146a781ad7a.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487ae7027a3-9dcc-49da-a5bb-0146a781ad7a.tmp
                                                    • Size 3KB
                                                    • SHA256 a1fdcef744abcc04aa3835bc7b32b874d384377219c27b3c74d5d8b32a41bfd2
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487b31b29c2-5019-47b6-8cc2-e22d3d1663e4.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487b31b29c2-5019-47b6-8cc2-e22d3d1663e4.tmp
                                                    • Size 1KB
                                                    • SHA256 2e15b163d1caa286372dd7436e5335ec0f647250d16ba30b3f87da13f30736bb
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487b322af65-22e0-4c4e-8f3f-80bdfa8e098e.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487b322af65-22e0-4c4e-8f3f-80bdfa8e098e.tmp
                                                    • Size 1023B
                                                    • SHA256 de8c3aa8fb0a3e04e4ecf096ee5615c2990ecfef3ade32e4aae3fa4e9c05f4c8
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487b981321b-790a-485f-8739-062fb0d84584.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487b981321b-790a-485f-8739-062fb0d84584.tmp
                                                    • Size 1KB
                                                    • SHA256 bc427b6252a121ca6075d6fe020cd7077fb4863c0ad37cdb8509703e10317704
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487b9d30cd8-80f3-4ef4-b102-1452b249fc11.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487b9d30cd8-80f3-4ef4-b102-1452b249fc11.tmp
                                                    • Size 3KB
                                                    • SHA256 87f04674c3ba9cd26b1036f2eeaa477348b7d8e4b8fce4748aa604ecdeabc147
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487cd48454f-3c85-4136-96cf-7028d37d226e.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487cd48454f-3c85-4136-96cf-7028d37d226e.tmp
                                                    • Size 828B
                                                    • SHA256 8b03765047da691b2b676c280720286e84582c9add2be63ba7522bec279eff68
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487d1744299-27b9-402e-8d08-28788ccae397.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487d1744299-27b9-402e-8d08-28788ccae397.tmp
                                                    • Size 1KB
                                                    • SHA256 814188031978442d7d4aed1a5c0dd2a63107fb30e329e0372e4ea21e44cfcf3a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487d9afde1b-2c84-45b9-842b-6399b9585e75.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487d9afde1b-2c84-45b9-842b-6399b9585e75.tmp
                                                    • Size 1KB
                                                    • SHA256 dfd38d64af33c4b665eeb6affbea0489b012a5554f6271d3c63d3037097d235b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487dd51b0de-142c-4b1e-8dce-88d90f84dab6.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487dd51b0de-142c-4b1e-8dce-88d90f84dab6.tmp
                                                    • Size 645B
                                                    • SHA256 62015a8507d19ffe2ffec48aef1f4943850cf48c621bc8cca7f8ff7ccda9f788
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487e0c6336f-26d2-4b2a-86bb-18c041a3d6cd.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487e0c6336f-26d2-4b2a-86bb-18c041a3d6cd.tmp
                                                    • Size 1KB
                                                    • SHA256 d0e795cd975d2eb41d527fc9cd9f40d6388be85294569f03862ab03d97b93c7e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487f204943c-5a24-43c5-83eb-841f804bad8c.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487f204943c-5a24-43c5-83eb-841f804bad8c.tmp
                                                    • Size 3KB
                                                    • SHA256 548c42f11388085b2d41f5d2cca31cb0ba55986e1f30a742b459d6e850b3756b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.0.191324487ff1f2a12-9b04-4333-933c-bf3d43043765.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.0.191324487ff1f2a12-9b04-4333-933c-bf3d43043765.tmp
                                                    • Size 3KB
                                                    • SHA256 80dca7e0800ca8ead6373b693c89578d119113855dfac10ca72ed6d3f3db08d7
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.141942203

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.141942203
                                                    • Size 171B
                                                    • SHA256 5b1f18e1ed83f755aaacc062172a32da7c819c080afaa8d7d006562743700f01
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.14194220307426ad4-4830-400b-9669-b5325b17e741.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.14194220307426ad4-4830-400b-9669-b5325b17e741.tmp
                                                    • Size 830B
                                                    • SHA256 c3ac3df8743ff7aae2b9e36a6491bf20b5913e187af629675e05ab548a2b8e2e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.1419422035d23b4de-495b-41c3-906f-273f04793f53.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.1419422035d23b4de-495b-41c3-906f-273f04793f53.tmp
                                                    • Size 557B
                                                    • SHA256 739b1156359d503101c61fe3b319c63dccb62252d903095c9fdc2917129d1058
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.141942203660f68e7-26d7-4e19-8b8c-86fe0d6f5755.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.141942203660f68e7-26d7-4e19-8b8c-86fe0d6f5755.tmp
                                                    • Size 1KB
                                                    • SHA256 a895d750ee732830e5caea2c0c0517babb7422ce9a0c433114daa3e2d1a688e9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.14194220366fcf513-f636-490e-8ac1-c8f901fc889d.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.14194220366fcf513-f636-490e-8ac1-c8f901fc889d.tmp
                                                    • Size 1KB
                                                    • SHA256 9b6c0d17268df325e780bc0e96d65606525f2357a94ad40878733f59131d06c4
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.1419422037588bc41-c1d6-4e16-a8a4-f0c1d64b8c09.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.1419422037588bc41-c1d6-4e16-a8a4-f0c1d64b8c09.tmp
                                                    • Size 1KB
                                                    • SHA256 55dd95080f577ab81d911544d7fc9dc0333ba1739a3b0f00e80307971a2d1181
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.1419422037dc97f19-2b04-4c2f-bfdd-c96767349b97.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.1419422037dc97f19-2b04-4c2f-bfdd-c96767349b97.tmp
                                                    • Size 200B
                                                    • SHA256 dbeea3452c8c090220ae780e172f696adeeab7b9acab51de4c95278cf7ce9597
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.141942203921f25bf-9a77-4f6a-819f-061b3457ca9e.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.141942203921f25bf-9a77-4f6a-819f-061b3457ca9e.tmp
                                                    • Size 926B
                                                    • SHA256 ed931aad1e40f383a37cc3f83cb78161e0b6a24e534d65252935127268993d43
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.1419422039f59be59-bb37-426c-bbc7-3990e614175e.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.1419422039f59be59-bb37-426c-bbc7-3990e614175e.tmp
                                                    • Size 734B
                                                    • SHA256 359f72f7189de86bb714cb82806e65b83b77f6b5dda5c4beb20ca0863ccb4a51
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.141942203ba64264a-85c3-4214-a985-e1542b444161.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.141942203ba64264a-85c3-4214-a985-e1542b444161.tmp
                                                    • Size 1KB
                                                    • SHA256 0dccd5de5f61643f40f434acc58c47fee5ff2f8b6bbb224037a2c7a15889d37d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.141942203bf0f1417-46c5-4be1-952f-9c2613884478.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.141942203bf0f1417-46c5-4be1-952f-9c2613884478.tmp
                                                    • Size 459B
                                                    • SHA256 1f1e1921c5023bb37c8933e4572ffc5b53617f1ace100f673723114c9b94d9f9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.141942203cb88fabf-12de-471c-a0df-3f98be8ed37c.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.141942203cb88fabf-12de-471c-a0df-3f98be8ed37c.tmp
                                                    • Size 647B
                                                    • SHA256 3e9d784b57a4e1025c2dbaee52b69d8401dd2230c4b4640603da6bb7e9690e8b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.141942203dafb44e7-bbb9-405c-a79b-d414cc2964ca.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.141942203dafb44e7-bbb9-405c-a79b-d414cc2964ca.tmp
                                                    • Size 1KB
                                                    • SHA256 b9543bf931e45ca2345eef4d11544d01b5c7f35b8202bf4e34fd1540f4553b78
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ssdfp6416.1.141942203f2380caf-c23c-4d81-94a4-6789927518ef.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6416.1.141942203f2380caf-c23c-4d81-94a4-6789927518ef.tmp
                                                    • Size 224B
                                                    • SHA256 f3a6df26b365ee1726563bda214d9b757397f25925d762c20cdb4ec56d2779fb
                                                    • MD5 SHA1 SHA512 TLSH

                                                    suggestions_cache.jsonc501f4ee-cd29-4524-a73d-77bdbbd1bdc8.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsonc501f4ee-cd29-4524-a73d-77bdbbd1bdc8.tmp
                                                    • Size 652KB
                                                    • SHA256 01248688d45433fc0705a22956b01267f1926304da13c463fbcbe2a704a7c4e5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State46295bf3-3ac8-4b6e-a7e6-cfc33b54c3ae.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State46295bf3-3ac8-4b6e-a7e6-cfc33b54c3ae.tmp
                                                    • Size 3KB
                                                    • SHA256 35d972ea73c379cfc6fbcbe052dc6a73ecf3105096f0f1973c4272b55f07ee0c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Local State4ab62b29-cf6a-48f0-8d5e-f9917e8ae438.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State4ab62b29-cf6a-48f0-8d5e-f9917e8ae438.tmp
                                                    • Size 3KB
                                                    • SHA256 03f937b2f853e7ca75b9ba542e30fe9cc1be7a68beba35b2eaf7522a548854ac
                                                    • MD5 SHA1 SHA512 TLSH

                                                    VariationsSafeSeedV2e7405c85-c806-4967-9596-1badc18a3e86.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSafeSeedV2e7405c85-c806-4967-9596-1badc18a3e86.tmp
                                                    • Size 19B
                                                    • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                    • MD5 SHA1 SHA512

                                                    VariationsSeedV23183778b-5972-4a3c-8e01-63c71a8a77a3.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV23183778b-5972-4a3c-8e01-63c71a8a77a3.tmp
                                                    • Size 11B
                                                    • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                    • MD5 SHA1 SHA512

                                                    metadata.json0e69d90c-c72a-4658-91da-bcba84bf4268.tmp

                                                    • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.json0e69d90c-c72a-4658-91da-bcba84bf4268.tmp
                                                    • Size 13B
                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                    • MD5 SHA1 SHA512

                                                    opera-one-dark.jpg

                                                    • Path C:\Windows\SystemTemp\scoped_dir6416_1845974584\opera-one-dark.jpg
                                                    • Size 349KB
                                                    • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    persona.ini

                                                    • Path C:\Windows\SystemTemp\scoped_dir6416_1845974584\persona.ini
                                                    • Size 217B
                                                    • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                    • MD5 SHA1 SHA512 TLSH

                                                    opera-one.jpg

                                                    • Path C:\Windows\SystemTemp\scoped_dir6416_740572232\opera-one.jpg
                                                    • Size 194KB
                                                    • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    persona.ini

                                                    • Path C:\Windows\SystemTemp\scoped_dir6416_740572232\persona.ini
                                                    • Size 207B
                                                    • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                    • MD5 SHA1 SHA512 TLSH

                                                    memory/492-4043-0x000002880E420000-0x000002880E451000-memory.dmp

                                                    memory/696-4495-0x0000016CE4960000-0x0000016CE4991000-memory.dmp

                                                    memory/1388-4648-0x000002AD7EAC0000-0x000002AD7EAF1000-memory.dmp

                                                    memory/2284-4649-0x000002057EE20000-0x000002057EE51000-memory.dmp

                                                    memory/2668-3133-0x0000024A76940000-0x0000024A78200000-memory.dmp

                                                    memory/2668-4041-0x0000022212780000-0x00000222127B1000-memory.dmp

                                                    memory/2724-545-0x00007FFAFDF90000-0x00007FFAFDF91000-memory.dmp

                                                    memory/2724-3132-0x0000028AE36E0000-0x0000028AE3711000-memory.dmp

                                                    memory/2724-544-0x00007FFAFD650000-0x00007FFAFD651000-memory.dmp

                                                    memory/3464-3074-0x000001E720420000-0x000001E720451000-memory.dmp

                                                    memory/4108-4018-0x000001F89DB20000-0x000001F89DB51000-memory.dmp

                                                    memory/4868-4650-0x0000022DF9B30000-0x0000022DF9B61000-memory.dmp

                                                    memory/5508-4017-0x000001E39E1E0000-0x000001E39E211000-memory.dmp

                                                    memory/5708-3075-0x000001F374D00000-0x000001F374D31000-memory.dmp

                                                    memory/6080-3073-0x0000018EE32B0000-0x0000018EE32E1000-memory.dmp

                                                    memory/6684-4008-0x0000016A97C20000-0x0000016A97C51000-memory.dmp

                                                    memory/7040-5054-0x00000205A95E0000-0x00000205AAEA0000-memory.dmp

                                                    memory/7040-4698-0x00000205A95E0000-0x00000205AAEA0000-memory.dmp

                                                    memory/7040-3946-0x00000205A95E0000-0x00000205AAEA0000-memory.dmp

                                                    memory/7312-4205-0x000001DC9EB30000-0x000001DC9EB61000-memory.dmp

                                                    memory/7448-4014-0x000001ADB84E0000-0x000001ADB8511000-memory.dmp

                                                    memory/7484-4015-0x000001FECC870000-0x000001FECC8A1000-memory.dmp

                                                    memory/7516-4203-0x00000258020B0000-0x00000258020E1000-memory.dmp

                                                    memory/7932-4579-0x000001F220450000-0x000001F220481000-memory.dmp

                                                    memory/8188-4576-0x0000027099190000-0x00000270991C1000-memory.dmp

                                                    memory/8200-3948-0x000002A0F19B0000-0x000002A0F19E1000-memory.dmp

                                                    memory/8260-3949-0x000001D604AB0000-0x000001D604AE1000-memory.dmp

                                                    memory/8264-3951-0x00000276F5260000-0x00000276F5291000-memory.dmp

                                                    memory/8272-3950-0x0000020EC8DC0000-0x0000020EC8DF1000-memory.dmp

                                                    memory/8276-3952-0x000001F15D2D0000-0x000001F15D301000-memory.dmp

                                                    memory/8284-3953-0x000001A32EAB0000-0x000001A32EAE1000-memory.dmp

                                                    memory/8292-3954-0x000001C3D8540000-0x000001C3D8571000-memory.dmp

                                                    memory/8944-3955-0x00000140EF030000-0x00000140EF061000-memory.dmp

                                                    memory/9008-4202-0x000001E7FE1D0000-0x000001E7FE201000-memory.dmp

                                                    memory/9260-4206-0x00000265C3050000-0x00000265C3081000-memory.dmp

                                                    memory/9364-3998-0x000001CC41E20000-0x000001CC41E51000-memory.dmp

                                                    memory/9412-3999-0x0000022AB4CB0000-0x0000022AB4CE1000-memory.dmp

                                                    memory/9436-4000-0x000001BA04600000-0x000001BA04631000-memory.dmp

                                                    memory/9440-4204-0x00000171BB120000-0x00000171BB151000-memory.dmp

                                                    memory/9484-4010-0x000001C775550000-0x000001C775581000-memory.dmp

                                                    memory/9508-4001-0x000001C5AF4C0000-0x000001C5AF4F1000-memory.dmp

                                                    memory/9700-4002-0x0000023902CB0000-0x0000023902CE1000-memory.dmp

                                                    memory/9736-4004-0x00000284491D0000-0x0000028449201000-memory.dmp

                                                    memory/9772-4011-0x00000269202F0000-0x0000026920321000-memory.dmp

                                                    memory/9796-4006-0x0000021635ED0000-0x0000021635F01000-memory.dmp

                                                    memory/9820-4005-0x000002B2EBB10000-0x000002B2EBB41000-memory.dmp

                                                    memory/9844-4012-0x000001B844DF0000-0x000001B844E21000-memory.dmp

                                                    memory/9856-4577-0x000001BFE3110000-0x000001BFE3141000-memory.dmp

                                                    memory/9916-4013-0x000001F2A5180000-0x000001F2A51B1000-memory.dmp

                                                    memory/9928-4007-0x0000022BD3E10000-0x0000022BD3E41000-memory.dmp

                                                    memory/10040-4494-0x0000021D11060000-0x0000021D11091000-memory.dmp

                                                    memory/10060-4009-0x000002BA4B990000-0x000002BA4B9C1000-memory.dmp