Resubmissions

10/11/2026, 23:27

261110-3fm3jscd568

10/11/2026, 23:24

261110-3dv1dacd348

10/11/2026, 23:23

261110-3c6qgscw2p3

10/11/2026, 11:00

261110-m36keah18w3

10/11/2026, 10:54

261110-mzrbbawy3m3

08/11/2026, 14:55

261108-saylzs1zat3

20/10/2026, 18:54

261020-xknxratzdv6

10/10/2026, 21:48

261010-1nv21sbx4z3

10/10/2026, 21:36

261010-1f5lgss14r8

10/10/2026, 19:09

261010-xt97cazth13

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-it
  • resource tags

    arch:x64arch:x86image:win11-20260911-itlocale:it-itos:windows11-21h2-x64systemwindows
  • submitted
    10/11/2026, 23:24

General

  • Target
    http://bad250ff179bd2fd670781af3dad12639bce29208f0c640ca387d8a28ec533bfN
  • Sample261110-3dv1dacd34

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 8 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 16 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 10 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 64 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 50 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 50 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 47 IoCs
  • Suspicious use of SendNotifyMessage 18 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://bad250ff179bd2fd670781af3dad12639bce29208f0c640ca387d8a28ec533bfN
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4596
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffa17e7c188,0x7ffa17e7c194,0x7ffa17e7c1a0
      2⤵
        PID:1956
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,9403951919045210623,13672811061889939142,262144 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=2160 /prefetch:2
        2⤵
          PID:592
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,13994058542730199257,2553836706420980761,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=2208 /prefetch:11
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:4964
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2272,i,5287763711866506354,5926069061207658302,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:13
          2⤵
            PID:2848
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3368,i,7256128323033363869,448245025179074657,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
            2⤵
              PID:2056
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3376,i,693603658962963444,10643494359825565214,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
              2⤵
                PID:3968
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=1704,i,18006574302547088523,15699902662497198927,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
                2⤵
                  PID:2628
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,18217453761139056904,14969022956052505446,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:9
                  2⤵
                    PID:4908
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4320,i,16206557968187439261,18128318371316530038,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:1
                    2⤵
                      PID:3972
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4348,i,13483318791778260570,3944969402012527839,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:9
                      2⤵
                        PID:3484
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3952,i,7325144733383819854,9832761728003547307,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:1
                        2⤵
                          PID:5116
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5352,i,15238734925099922320,8078789233391392729,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
                          2⤵
                            PID:4036
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=it --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4156,i,1145165590290019063,12256241446103887134,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:14
                            2⤵
                              PID:1480
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,18388462973792266350,7901492754778706404,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
                              2⤵
                              • Suspicious use of WriteProcessMemory
                              PID:2896
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                cookie_exporter.exe --cookie-json=1140
                                3⤵
                                  PID:2608
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=it --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4100,i,7474337075444913317,15192345483827994574,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
                                2⤵
                                  PID:4476
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,8392500377524267387,15632392602716536729,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
                                  2⤵
                                    PID:4544
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,8392500377524267387,15632392602716536729,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
                                    2⤵
                                      PID:4860
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6596,i,5169922907667555549,6351668716286728601,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:1
                                      2⤵
                                        PID:4892
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=it --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3496,i,6675791525176438881,12451956481097991692,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:14
                                        2⤵
                                          PID:1196
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6724,i,11672710466643646811,14442827211954608929,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:1
                                          2⤵
                                            PID:2428
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4352,i,13586455825300800928,4026454890406924595,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
                                            2⤵
                                              PID:5056
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3492,i,16523709203422783505,15031613806881186670,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
                                              2⤵
                                                PID:1160
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4476,i,10736480065409948954,6724897666215270621,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:1
                                                2⤵
                                                  PID:3868
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=it --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4180,i,3739110880651421374,9984496321412424677,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
                                                  2⤵
                                                    PID:1388
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5100,i,5935373479328265451,16236399529369851331,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:1
                                                    2⤵
                                                      PID:1144
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,3252178911284785516,10724764617919896257,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=7384 /prefetch:14
                                                      2⤵
                                                      • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                      • NTFS ADS
                                                      PID:276
                                                    • C:\Users\Admin\Downloads\OperaSetup.exe
                                                      "C:\Users\Admin\Downloads\OperaSetup.exe"
                                                      2⤵
                                                      • Executes dropped EXE
                                                      • System Location Discovery: System Language Discovery
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:1032
                                                      • C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe
                                                        C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe --server-tracking-blob=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
                                                        3⤵
                                                        • Executes dropped EXE
                                                        • Enumerates connected drives
                                                        • Reads the TCP/IP host and domain name from the registry
                                                        • Modifies system certificate store
                                                        • Suspicious use of SetWindowsHookEx
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:1888
                                                        • C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe
                                                          C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff687d4c498,0x7ff687d4c4a8,0x7ff687d4c4b8
                                                          4⤵
                                                          • Executes dropped EXE
                                                          PID:3908
                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\installer.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\installer.exe" --version
                                                          4⤵
                                                          • Executes dropped EXE
                                                          PID:3164
                                                        • C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe
                                                          "C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=it --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1888 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_20261110232508" --session-guid=7232f601-0642-4bc0-986a-79a39435b4c3 --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=040A000000000000
                                                          4⤵
                                                          • Executes dropped EXE
                                                          • Enumerates connected drives
                                                          • Enumerates system info in registry
                                                          PID:4060
                                                          • C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe
                                                            C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x298,0x29c,0x2a0,0x268,0x2a4,0x7ff687d4c498,0x7ff687d4c4a8,0x7ff687d4c4b8
                                                            5⤵
                                                            • Executes dropped EXE
                                                            PID:4140
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\installer.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\installer.exe" --backend --initial-pid=1888 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=it --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081" --session-guid=7232f601-0642-4bc0-986a-79a39435b4c3 --server-tracking-blob="OWYzODE3NDhlOWYxMjMzMWQ5OTlhNmJiM2Q0ZGZkNWY0MWYwOGMxYWM4NGViM2NkMzQzNzYzYzQ1N2ZjYmY0ZTp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYVNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhIn0sInF1ZXJ5IjoiL29wZXJhL3N0YWJsZS93aW5kb3dzP3V0bV9zb3VyY2U9YmluZyZ1dG1fbWVkaXVtPWJhX29zZSZ1dG1fY2FtcGFpZ249VUslMjUyMC0lMjUyMEJyYW5kJTI1MjAtJTI1MjBFTiZ1dG1fY29udGVudD1CcmFuZCUyNTIwLSUyNTIwRXhhY3QmdXRtX2lkPW1zY2xraWRfYjc0NjhiMTJjM2FlMTFmMjBmZTZlMWUxNjQ2N2ZkZWQmaHR0cF9yZWZlcnJlcj1odHRwcyUzQSUyRiUyRnd3dy5vcGVyYS5jb20lMkZpdCUzRnV0bV9zb3VyY2UlM0RiaW5nJTI2dXRtX21lZGl1bSUzRHBhJTI2dXRtX2NhbXBhaWduJTNEVUslMjUyMC0lMjUyMEJyYW5kJTI1MjAtJTI1MjBFTiUyNm1zY2xraWQlM0RiNzQ2OGIxMmMzYWUxMWYyMGZlNmUxZTE2NDY3ZmRlZCUyNnV0bV90ZXJtJTNEb3BlcmElMjUyMGRvd25sb2FkJTI2dXRtX2NvbnRlbnQlM0RCcmFuZCUyNTIwLSUyNTIwRXhhY3QmdXRtX3NpdGU9b3BlcmFfY29tJnV0bV9sYXN0cGFnZT1vcGVyYS5jb20lMkYmZGxfdG9rZW49MjUzMDUyMjAiLCJzeXN0ZW0iOnsicGxhdGZvcm0iOnsiYXJjaCI6Ing4Nl82NCIsIm9wc3lzIjoiV2luZG93cyIsIm9wc3lzLXZlcnNpb24iOiIxMSIsInBhY2thZ2UiOiJFWEUifX0sInRpbWVzdGFtcCI6IjE3OTQzNTMxMDMuNjk4OSIsInVzZXJhZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMzkuMC4wLjAgU2FmYXJpLzUzNy4zNiBFZGcvMTM5LjAuMC4wIiwidXRtIjp7ImNhbXBhaWduIjoiVUslMjAtJTIwQnJhbmQlMjAtJTIwRU4iLCJjb250ZW50IjoiQnJhbmQlMjAtJTIwRXhhY3QiLCJpZCI6Im1zY2xraWRfYjc0NjhiMTJjM2FlMTFmMjBmZTZlMWUxNjQ2N2ZkZWQiLCJsYXN0cGFnZSI6Im9wZXJhLmNvbS8iLCJtZWRpdW0iOiJiYV9vc2UiLCJzaXRlIjoib3BlcmFfY29tIiwic291cmNlIjoiYmluZyJ9LCJ1dWlkIjoiM2I4NzMyZjUtNjBkNi00YTQ2LTk1NjAtYzUxNzVhNDg0YmM3In0= " --desktopshortcut=1 --install-subfolder=140.0.6074.17
                                                            5⤵
                                                            • Executes dropped EXE
                                                            • Enumerates connected drives
                                                            • Enumerates system info in registry
                                                            • Modifies registry class
                                                            • Suspicious use of FindShellTrayWindow
                                                            PID:3964
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\installer.exe
                                                              C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff7d5e5c498,0x7ff7d5e5c4a8,0x7ff7d5e5c4b8
                                                              6⤵
                                                              • Executes dropped EXE
                                                              PID:1440
                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe
                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                                                              6⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Writes a Windows system DLL name to a user directory
                                                              • Adds Run key to start application
                                                              • System Location Discovery: System Language Discovery
                                                              • Enumerates system info in registry
                                                              • Modifies Internet Explorer settings
                                                              PID:1164
                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x98c9cc,0x98c9d8,0x98c9e4
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                PID:912
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • System Location Discovery: System Language Discovery
                                                                • Enumerates system info in registry
                                                                PID:2120
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x33c9cc,0x33c9d8,0x33c9e4
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:2232
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                                                                  8⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • Reads the TCP/IP host and domain name from the registry
                                                                  • System Location Discovery: System Language Discovery
                                                                  • Enumerates system info in registry
                                                                  • Suspicious use of FindShellTrayWindow
                                                                  • Suspicious use of SendNotifyMessage
                                                                  PID:3364
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                    9⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    PID:4860
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe
                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f23310
                                                                      10⤵
                                                                      • Executes dropped EXE
                                                                      PID:5000
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                    9⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    PID:5184
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe
                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x258,0x25c,0x260,0x224,0x264,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f23310
                                                                      10⤵
                                                                      • Executes dropped EXE
                                                                      PID:5204
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x288,0x28c,0x290,0x25c,0x294,0xea7324,0xea7330,0xea733c
                                                                    9⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    PID:5260
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                      10⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:5324
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f23310
                                                                        11⤵
                                                                        • Executes dropped EXE
                                                                        PID:5372
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                      10⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Enumerates system info in registry
                                                                      PID:5548
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x25c,0x260,0x264,0x258,0x268,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f23310
                                                                        11⤵
                                                                        • Executes dropped EXE
                                                                        PID:5636
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                      10⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:6764
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f23310
                                                                        11⤵
                                                                        • Executes dropped EXE
                                                                        PID:6916
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\de932af914ba00303d4a2778a383ac9c831101e2.crx"
                                                              6⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Adds Run key to start application
                                                              • Drops file in Windows directory
                                                              • Reads the TCP/IP host and domain name from the registry
                                                              • Checks processor information in registry
                                                              • Enumerates system info in registry
                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                              • Suspicious use of AdjustPrivilegeToken
                                                              PID:1380
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f23310
                                                                7⤵
                                                                • Executes dropped EXE
                                                                PID:2004
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAABgAAACAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1712,i,17304323812021269834,9765276613414735979,262144 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1984 /prefetch:2
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Enumerates system info in registry
                                                                PID:5564
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2116,i,8622563899713358813,13878742828496594186,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2196 /prefetch:11
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Reads the TCP/IP host and domain name from the registry
                                                                • System Time Discovery
                                                                PID:5600
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2468,i,16737433460390976040,12886541071186002140,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2508 /prefetch:13
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Enumerates system info in registry
                                                                PID:5668
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3608,i,5028463019062563456,8544787835008342122,1572864 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3708 /prefetch:9
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Checks processor information in registry
                                                                PID:6056
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4376,i,1343848926628069369,8050463786336878400,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4396 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                PID:6564
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4444,i,5777577271840525097,5439943008506686030,1572864 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4496 /prefetch:9
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Checks processor information in registry
                                                                PID:6584
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=it --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4832,i,347025326618827522,6221960925530004292,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4816 /prefetch:12
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Enumerates system info in registry
                                                                PID:6884
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4348,i,2012613475392913792,14922479603117862835,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4460 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                PID:7004
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4940,i,1908240742871593009,3174218319831763975,524288 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5060 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Enumerates system info in registry
                                                                PID:6188
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5268,i,13623260990843570948,8299257278908236104,1572864 --field-trial-handle=1988,i,6847315382652878094,2090285344230132864,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1992,i,14178339844709833866,4195804742450791685,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5280 /prefetch:1
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Checks processor information in registry
                                                                • Enumerates system info in registry
                                                                PID:8516
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                                                              6⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Adds Run key to start application
                                                              • Drops file in Windows directory
                                                              • Reads the TCP/IP host and domain name from the registry
                                                              • Checks processor information in registry
                                                              • Enumerates system info in registry
                                                              • Modifies registry class
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                              • Suspicious use of AdjustPrivilegeToken
                                                              PID:5644
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ff9f21c32f0,0x7ff9f21c3300,0x7ff9f21c3310
                                                                7⤵
                                                                • Executes dropped EXE
                                                                PID:6824
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --gpu-recent-crash-count=0 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAABgAAACAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1676,i,16943423180635834017,4140299824046516127,262144 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2108 /prefetch:2
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                PID:7944
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1952,i,7787322604274247291,8733004966925076828,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2200 /prefetch:11
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Reads the TCP/IP host and domain name from the registry
                                                                • System Time Discovery
                                                                • Enumerates system info in registry
                                                                PID:8016
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2524,i,17415287907953395886,12848741163701892361,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2752 /prefetch:13
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Enumerates system info in registry
                                                                PID:9156
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2816,i,17697162383436753460,9240123336294545550,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3228 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Enumerates system info in registry
                                                                PID:8612
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3208,i,8138836907745975389,4763377816662228285,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3348 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Enumerates system info in registry
                                                                PID:8624
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3148,i,16464814675036109498,13022433290563030647,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3248 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                PID:8600
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3160,i,7772185047394681945,14593357898193362655,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3268 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Enumerates system info in registry
                                                                PID:3372
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3172,i,2921656919409352209,17364256800040151702,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3288 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Enumerates system info in registry
                                                                PID:5924
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3184,i,13899610429807273873,4837750324175082437,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3308 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Enumerates system info in registry
                                                                PID:8648
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3196,i,3144097756593828043,17948200356097689373,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3328 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Enumerates system info in registry
                                                                PID:8660
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3388,i,5646146231119120315,8061151131549271432,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3412 /prefetch:1
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Checks processor information in registry
                                                                • Enumerates system info in registry
                                                                PID:7268
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4816,i,9514658663077897994,7905746976110586496,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4836 /prefetch:9
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Checks processor information in registry
                                                                PID:8256
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4992,i,10210106346508998623,117160968331452136,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5008 /prefetch:1
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Checks processor information in registry
                                                                PID:8196
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5360,i,4503699845511148525,13578889722242367741,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5368 /prefetch:1
                                                                7⤵
                                                                • Checks processor information in registry
                                                                • Enumerates system info in registry
                                                                PID:6388
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5524,i,6099878496355063681,13009170545666761184,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5536 /prefetch:1
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Checks processor information in registry
                                                                • Enumerates system info in registry
                                                                PID:8128
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6412,i,13428016344674400531,13789936837246279088,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6456 /prefetch:9
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Checks processor information in registry
                                                                • Enumerates system info in registry
                                                                PID:6312
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5708,i,6183353592231659353,3794936108993324235,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6904 /prefetch:9
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Checks processor information in registry
                                                                • Enumerates system info in registry
                                                                PID:8620
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=it --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6640,i,5940714800984453178,11647576992804909089,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6480 /prefetch:12
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Enumerates system info in registry
                                                                PID:5088
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6776,i,11132759222780533242,14328008616640716383,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6632 /prefetch:1
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Checks processor information in registry
                                                                PID:2236
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7212,i,3086849125773774706,2936334291840642296,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6504 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Enumerates system info in registry
                                                                PID:7360
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7244,i,18338220529873290024,6394539121946634555,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7340 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                PID:3408
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7348,i,2963104705848227966,9682089158863569115,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7516 /prefetch:14
                                                                7⤵
                                                                • Executes dropped EXE
                                                                • Enumerates system info in registry
                                                                PID:6836
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7384,i,1196126306409674771,15383198722772562186,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7496 /prefetch:14
                                                                7⤵
                                                                • Enumerates system info in registry
                                                                PID:1608
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7756,i,9783874161571329704,6374534263032138360,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7508 /prefetch:14
                                                                7⤵
                                                                • Enumerates system info in registry
                                                                PID:7188
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7776,i,6740261072300331180,6635557749767351108,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7804 /prefetch:14
                                                                7⤵
                                                                  PID:6236
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7788,i,7300752514107545297,7692542622697763449,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7828 /prefetch:14
                                                                  7⤵
                                                                  • Enumerates system info in registry
                                                                  PID:7248
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6728,i,18153909682560831830,13275245692162343139,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8236 /prefetch:9
                                                                  7⤵
                                                                  • Checks processor information in registry
                                                                  • Enumerates system info in registry
                                                                  PID:8236
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8336,i,7000241130014200798,2264177970725499097,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8356 /prefetch:14
                                                                  7⤵
                                                                  • Enumerates system info in registry
                                                                  PID:8272
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6492,i,6299790421240219051,18700504930534345,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8384 /prefetch:14
                                                                  7⤵
                                                                  • Enumerates system info in registry
                                                                  PID:8296
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8372,i,6895265222103702631,5897281251524249299,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8404 /prefetch:14
                                                                  7⤵
                                                                    PID:8320
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8436,i,10022005792997011516,2868738735908233967,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8664 /prefetch:14
                                                                    7⤵
                                                                      PID:8380
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8888,i,7329748903335088800,15042353790181624684,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8896 /prefetch:14
                                                                      7⤵
                                                                      • Enumerates system info in registry
                                                                      PID:7484
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                      7⤵
                                                                      • Reads the TCP/IP host and domain name from the registry
                                                                      PID:5608
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff6ea572698,0x7ff6ea5726a8,0x7ff6ea5726b8
                                                                        8⤵
                                                                          PID:6356
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9472,i,17952035444780396080,12190056093549105117,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=6656 /prefetch:14
                                                                        7⤵
                                                                          PID:1764
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7832,i,5087790960633937910,3909601723543666181,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9624 /prefetch:14
                                                                          7⤵
                                                                            PID:4536
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9772,i,9851518341620706915,2856209797254281530,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9664 /prefetch:14
                                                                            7⤵
                                                                            • Enumerates system info in registry
                                                                            PID:8160
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9796,i,13556669463167489130,9855659049149763961,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=1860 /prefetch:14
                                                                            7⤵
                                                                              PID:9076
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=10220,i,10661958000516064548,10918185386309355607,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10228 /prefetch:1
                                                                              7⤵
                                                                              • Checks processor information in registry
                                                                              PID:5396
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10436,i,392011902215176565,17787571701086522040,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10420 /prefetch:14
                                                                              7⤵
                                                                                PID:2952
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10444,i,3545457585191752584,1698930939268155561,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10456 /prefetch:14
                                                                                7⤵
                                                                                  PID:2840
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10608,i,6359448131727974851,17220229579225472097,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10440 /prefetch:14
                                                                                  7⤵
                                                                                    PID:6984
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6380,i,7188373335700627929,16657762270262300344,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10452 /prefetch:14
                                                                                    7⤵
                                                                                    • Enumerates system info in registry
                                                                                    PID:7468
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7204,i,13356837554157587930,6687732349834187061,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10408 /prefetch:14
                                                                                    7⤵
                                                                                      PID:8408
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7568,i,16117383573325582349,3323421861587657277,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=7560 /prefetch:14
                                                                                      7⤵
                                                                                        PID:6512
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10568,i,8537408151743859020,18313347080584975013,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10532 /prefetch:14
                                                                                        7⤵
                                                                                        • Enumerates system info in registry
                                                                                        PID:6004
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4100,i,17952364647431061546,8763878854493814938,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=9268 /prefetch:14
                                                                                        7⤵
                                                                                        • Enumerates system info in registry
                                                                                        PID:6748
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7608,i,7340188208927159737,888424377275214975,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10444 /prefetch:14
                                                                                        7⤵
                                                                                          PID:6828
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3236,i,14454975699349081284,4329582979697365018,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3348 /prefetch:14
                                                                                          7⤵
                                                                                            PID:8676
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5792,i,3732963627070506156,1936193467902683863,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=3224 /prefetch:14
                                                                                            7⤵
                                                                                              PID:492
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=7592,i,12396724440914957976,2347784531093743036,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=10560 /prefetch:9
                                                                                              7⤵
                                                                                              • Checks processor information in registry
                                                                                              • Enumerates system info in registry
                                                                                              PID:9128
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=10012,i,2388855276846922881,6293539599430631844,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=9984 /prefetch:9
                                                                                              7⤵
                                                                                              • Checks processor information in registry
                                                                                              PID:5952
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10460,i,10827704784827887454,13647617894703317285,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=10580 /prefetch:14
                                                                                              7⤵
                                                                                              • Enumerates system info in registry
                                                                                              PID:2020
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4580,i,14051781086507668987,5011989143780868270,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=3288 /prefetch:14
                                                                                              7⤵
                                                                                                PID:2536
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7580,i,4758265143331494597,3384723919424666640,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=4100 /prefetch:14
                                                                                                7⤵
                                                                                                • Enumerates system info in registry
                                                                                                PID:5496
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4656,i,4588643871883063851,9907657904824256858,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=6684 /prefetch:14
                                                                                                7⤵
                                                                                                  PID:6408
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=it --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8420,i,17264530155758085097,7738441647965401943,524288 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8004 /prefetch:14
                                                                                                  7⤵
                                                                                                    PID:7960
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8500,i,3679235578407924337,10945556879705247427,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10600 /prefetch:9
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:7736
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=5844,i,6408544512770834091,9988412005800799784,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8944 /prefetch:9
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:8484
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=4900,i,5162441640220767399,15568015661132249133,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8328 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:8424
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=4940,i,11533902080888398345,13787003612962743301,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=7668 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:4452
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=4876,i,3871065032000919579,16139731453637587614,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=8568 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:8840
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=8296,i,12846435165929402567,9712683823517091168,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=7708 /prefetch:9
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:8936
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7676,i,94233798715827650,4394811071918739544,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=7824 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:8624
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=6976,i,7870262162911416395,5595856238209701456,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=6904 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:2020
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=4272,i,3116642879131252585,12006821027639982435,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8944 /prefetch:9
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:8176
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10088,i,4181102740050208990,12109707312042516342,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=6880 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:5296
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=3288,i,13129082475768682190,15848701378519620187,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=8268 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:5828
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=4360,i,14736298830890862726,5582275037739024260,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=8332 /prefetch:9
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:4172
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=7996,i,2262705114341115144,2070801653508600629,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=7792 /prefetch:9
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:8944
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=8560,i,7595568307653397863,6041713376552105177,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=4884 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    PID:5564
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=8208,i,17020477894251728287,2165411998235452667,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=9688 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:3692
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=8560,i,592726584390351767,8242785795820625190,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=8028 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:8072
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=4628,i,3924362060665227939,2147438156080656482,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=7740 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:6572
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=7748,i,9627556160891172994,1063930994325349917,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=9684 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:8368
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:audio-analysis=on --with-feature:auto-gaming-intent-suggestion=on --with-feature:browser-operator-extension=on --with-feature:cashback-assistant=on --with-feature:cashback-extended-messaging=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-gaming-special-deals=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sidebar-update-notification=off --with-feature:sitecheck-age=on --with-feature:skia-graphite-default-params=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-free-autoconnect=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=4616,i,10982523777033536243,3646022790927784039,1572864 --field-trial-handle=2176,i,9153787142818044670,5115336489946865772,262144 --enable-features=AIDecisionModelAPI,AIDecisionModelAPIForWorkers,AIEmbeddingsAPI,AIEmbeddingsAPIForWorkers,AIPromptAPI,AIPromptAPIForWorkers,AIPromptAPIParams,AIPromptAPIToolUse,AIProofreadingAPI,AIRewriterAPI,AIRewriterAPIForWorkers,AISummarizationAPI,AISummarizationAPIForWorkers,AIWriterAPI,AIWriterAPIForWorkers,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SkiaGraphite,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,CanvasDrawElement,ExtendedDWCCollection,GcmStoreSelfRepair,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2180,i,13999866305043127026,16739440078049748527,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=4288 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks processor information in registry
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:7496
                                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                                                                              4⤵
                                                                                              • Executes dropped EXE
                                                                                              • Writes a Windows system DLL name to a user directory
                                                                                              • System Location Discovery: System Language Discovery
                                                                                              PID:1064
                                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe
                                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe" --version
                                                                                              4⤵
                                                                                              • Executes dropped EXE
                                                                                              • Loads dropped DLL
                                                                                              • System Location Discovery: System Language Discovery
                                                                                              PID:4344
                                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe
                                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x98c9cc,0x98c9d8,0x98c9e4
                                                                                                5⤵
                                                                                                • Executes dropped EXE
                                                                                                • Loads dropped DLL
                                                                                                • System Location Discovery: System Language Discovery
                                                                                                PID:1060
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7928,i,1630400033009690348,13869351858996280577,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:14
                                                                                          2⤵
                                                                                            PID:4908
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6852,i,2350983020195793163,4247424236843989408,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:14
                                                                                            2⤵
                                                                                              PID:2400
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,6337319248626327104,11491546864442755768,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:14
                                                                                              2⤵
                                                                                                PID:2352
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=it --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7084,i,5518713831721709485,9897750957673028780,524288 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:14
                                                                                                2⤵
                                                                                                  PID:1732
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5836,i,17735903263600788477,2911847531768919737,2097152 --field-trial-handle=2164,i,16970973909203178173,13236893688718446275,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5708
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                  1⤵
                                                                                                    PID:3192
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                                                    1⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    PID:6200
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe
                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ff9e0f232f0,0x7ff9e0f23300,0x7ff9e0f23310
                                                                                                      2⤵
                                                                                                      • Executes dropped EXE
                                                                                                      PID:6676
                                                                                                  • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                    C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                    1⤵
                                                                                                      PID:6852
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                                      1⤵
                                                                                                      • Reads the TCP/IP host and domain name from the registry
                                                                                                      PID:6940
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=140.0.6074.17 --initial-client-data=0x280,0x284,0x288,0x260,0x28c,0x7ff6ea572698,0x7ff6ea5726a8,0x7ff6ea5726b8
                                                                                                        2⤵
                                                                                                          PID:9200
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                                          2⤵
                                                                                                            PID:3280

                                                                                                        Network

                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                              Replay Monitor

                                                                                                              Loading Replay Monitor...

                                                                                                              Downloads

                                                                                                              698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB

                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                                                              • Size 471B
                                                                                                              • SHA256 5f1a19b878f128f589a60c29fe9d02ff3358b088f3aaec07e0bf75d2508d4102
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253

                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253
                                                                                                              • Size 727B
                                                                                                              • SHA256 2601cb8556899959a1fd59fac9fbf92205be1d0e9557d0c26121aa7ed8748daa
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141

                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                                                              • Size 727B
                                                                                                              • SHA256 9fbf78682aafa571331eb73dd361eed2a906eef684a92a28e29be4b610e48b20
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB

                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                                                              • Size 400B
                                                                                                              • SHA256 4481f0f3ef4df65f362158a2033942cff041fa78a71cf822c202611b60bcd461
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253

                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_43FE3B5369585E743ADE74618614C253
                                                                                                              • Size 408B
                                                                                                              • SHA256 db9c951d0fa328a78d488d7a6f5ba7fef709e11863363a642cb65f8d76444c23
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141

                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                                                              • Size 412B
                                                                                                              • SHA256 bc4adad1960096e3fa5c7520a31f3f7637797ad59ca5d452326d5491502b6521
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              12e407d4-3ccd-40b9-a2b9-c1eef3cfc20d.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\12e407d4-3ccd-40b9-a2b9-c1eef3cfc20d.tmp
                                                                                                              • Size 31KB
                                                                                                              • SHA256 5317457a12768575524885155344081c250dd24bdb04e4f1cc60a1133b12f0ac
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              2a74456a-cbb4-4d5c-b140-8edbf5c724c3.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2a74456a-cbb4-4d5c-b140-8edbf5c724c3.tmp
                                                                                                              • Size 26KB
                                                                                                              • SHA256 93e88dbefa3d0179cd53d3a9396f02eb06f3a7682094836db406b85882c3c24c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3a47fa97-7097-4285-95a3-a65e8be9c8ab.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3a47fa97-7097-4285-95a3-a65e8be9c8ab.tmp
                                                                                                              • Size 8KB
                                                                                                              • SHA256 9d667b813255f9dfd88f7155143423df5690af14d08b64fdb3e4a7d74a8ca8e3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3e219373-2499-4797-9cf4-a87d8209c2ba.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3e219373-2499-4797-9cf4-a87d8209c2ba.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 8ce69f48e5d529c4ea5e2ec7a06f721a94764d1716a15edf412867752e18bb8a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              46ff77ac-baf4-4bc1-9a75-23accd3625a4.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\46ff77ac-baf4-4bc1-9a75-23accd3625a4.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 7d7de3c0e1cf3143f45b3b956f5900afd77ec4678ca0e051db9a5e5cc9e128ca
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              5088ab20-6766-42a1-b897-9442b2ccab6c.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5088ab20-6766-42a1-b897-9442b2ccab6c.tmp
                                                                                                              • Size 8KB
                                                                                                              • SHA256 0319cc9941e7e4784740a964b5f24d87cb8ee11f83c7e877b9f3293492734a92
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              settings.dat

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                              • Size 280B
                                                                                                              • SHA256 6bf18510fc5524b37686ebea24fc002479a4d9bac5b3e6fb1f83b409dc1bbe32
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              settings.dat

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                              • Size 280B
                                                                                                              • SHA256 0f7109cda4c37ea8424815fbdafb9fdf6fd2dde3bfb80550af9aa9cd228e5614
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              settings.dat

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                              • Size 280B
                                                                                                              • SHA256 4eebdc04ff118e9cd3cbb614d205d2b777bd24419c5ba2ae742de33b0ae98212
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              2954b0ec-3475-4d2e-b491-e58a064ed257.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2954b0ec-3475-4d2e-b491-e58a064ed257.tmp
                                                                                                              • Size 70KB
                                                                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              61ae442e-6422-4693-b351-8cdbf31bf7af.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\61ae442e-6422-4693-b351-8cdbf31bf7af.tmp
                                                                                                              • Size 9KB
                                                                                                              • SHA256 a0241c5ca45226cbd881d1042f1adbae5bcc0ae0abfdbcd2493b1cca51ce7a84
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              960abaf8-8510-4bfc-8e88-b87be386d7d5.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\960abaf8-8510-4bfc-8e88-b87be386d7d5.tmp
                                                                                                              • Size 13KB
                                                                                                              • SHA256 a512308ee2c7005357ec6e3b1b73e47a5d23ba48e07461cb0630b5327d25be54
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_00004c

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004c
                                                                                                              • Size 154KB
                                                                                                              • SHA256 d602204b96b0cbb6b8dcdfd465aa4839e66f6826c0500abfc23f0b90096da3fe
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_00004d

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004d
                                                                                                              • Size 66KB
                                                                                                              • SHA256 77df21477abc909a61db33e0f54965cdb1588e475d46dee935168b4721f73152
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_00004e

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
                                                                                                              • Size 61KB
                                                                                                              • SHA256 300ab06fa3ab93bf62406e4c6f56950cbfe38716910a90e8d68a05daad52c6e2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_00004f

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004f
                                                                                                              • Size 68KB
                                                                                                              • SHA256 2033d4c0dcdab8b765e78c9c1845742d2589b0f1c56a06b701e91f536035f85c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000050

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
                                                                                                              • Size 65KB
                                                                                                              • SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000051

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
                                                                                                              • Size 75KB
                                                                                                              • SHA256 f0b2216568bb538a00ee14c13ad49ea15b1653044a219a698889610edcf9bf05
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000052

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
                                                                                                              • Size 45KB
                                                                                                              • SHA256 44c44c5e9cca81e4e3a8b88e6c45ef531d9ec84d198955739a4e3ca82e76f0f3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000054

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
                                                                                                              • Size 29KB
                                                                                                              • SHA256 2d24b1b7218be356a51787a3e3c2efb33d3cfcbcf875f7477e8af5a9a7caecbb
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000055

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
                                                                                                              • Size 20KB
                                                                                                              • SHA256 971403e1a6059c9970dd640d3890320c70f5679f1d5dee811d18b3788f566f19
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              temp-index

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                              • Size 5KB
                                                                                                              • SHA256 d2d9ff916d7123e2aca6a9669e18cbbfaab7eca773a583aea81af3c336f7bc8c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              temp-index

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                              • Size 5KB
                                                                                                              • SHA256 61e9d72d28f9c90fa8e001dcb46d3591eda25f206d9b2bf5d376e8bc3a4fb967
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              the-real-index

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                              • Size 2KB
                                                                                                              • SHA256 b180208f07bd9cc17baef430eeeafa60f176ad5558ac329bc4f178118e227fac
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              data_1

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
                                                                                                              • Size 264KB
                                                                                                              • SHA256 9e705be2d92a04ce5d9ce804c481ae95385edb9249fcef8d2fbfbc0c025a08f4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              60713046-cbef-4573-b67a-a027cfb30b1e.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\60713046-cbef-4573-b67a-a027cfb30b1e.tmp
                                                                                                              • Size 2B
                                                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              571fb4d0-e3f8-4255-b32a-ff1619481c39.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\571fb4d0-e3f8-4255-b32a-ff1619481c39.tmp
                                                                                                              • Size 111B
                                                                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              9c34c2be-2cd0-4477-898f-bb2597c05e90.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9c34c2be-2cd0-4477-898f-bb2597c05e90.tmp
                                                                                                              • Size 4KB
                                                                                                              • SHA256 45da012684c4b28c87276ceb5baa3771a4fdfd1fdd5e8b7771a49c0eb2bb7fb0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Sdch Dictionaries

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                              • Size 40B
                                                                                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              b945e8a5-710e-4e61-8251-a8b41d94f862.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b945e8a5-710e-4e61-8251-a8b41d94f862.tmp
                                                                                                              • Size 2B
                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              caa9c773-a470-4a62-8b22-99aae1294068.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\caa9c773-a470-4a62-8b22-99aae1294068.tmp
                                                                                                              • Size 4KB
                                                                                                              • SHA256 c8fab0ab1118d02efa7dfd9ad1081c1321e546a8b2df20ac2aced37df5a30ced
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              da76e692-14db-4b12-ad4e-727b9209d0d1.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\da76e692-14db-4b12-ad4e-727b9209d0d1.tmp
                                                                                                              • Size 210B
                                                                                                              • SHA256 19039ab53180b7ec2fd1536eaa92ead2df6f6a3490b2416092699c1a202840c1
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              sync_diagnostic.log

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                              • Size 4KB
                                                                                                              • SHA256 1fca83f16c726b62dae3bf6c29b6d59118acdf48530aa36827ea4f5678605804
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              b127b2d4-1557-449c-a403-819bafb94f4a.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b127b2d4-1557-449c-a403-819bafb94f4a.tmp
                                                                                                              • Size 14KB
                                                                                                              • SHA256 cf7679b33ddc3b33b82fe9d1103c300f8947c0af931662823f02f2d6e5a2a36b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              b8f45033-7a71-4037-a6bc-950eb133d64f.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8f45033-7a71-4037-a6bc-950eb133d64f.tmp
                                                                                                              • Size 12KB
                                                                                                              • SHA256 e1ae98006042e00e316c11b782fda30c5fc5529d7aaaa218bc9e157fe3f5ece9
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              d2977491-16dd-4c3a-b120-aef8766affe9.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d2977491-16dd-4c3a-b120-aef8766affe9.tmp
                                                                                                              • Size 28KB
                                                                                                              • SHA256 bbeb940547130648274b96cccdd8ec1eb26a07745aa57e112429cacfa0169357
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              db9b32af-31fc-42dd-9555-c37b93e8bda9.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\db9b32af-31fc-42dd-9555-c37b93e8bda9.tmp
                                                                                                              • Size 12KB
                                                                                                              • SHA256 6f785ca09ecb5b925fedd3abc0277e1ddf78674cca20d74b2da421fda818147e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              OperationConfig

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                              • Size 3KB
                                                                                                              • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              edb3f8f9-a283-414a-ac87-d9505623309d.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\edb3f8f9-a283-414a-ac87-d9505623309d.tmp
                                                                                                              • Size 22KB
                                                                                                              • SHA256 f429961ace041200b0a6f4a3fb8e693fbc03721c6ac63bcc34c17d3e99ae0e7a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              abd6165a-c7ae-47a2-a829-4219734c511c.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\abd6165a-c7ae-47a2-a829-4219734c511c.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 6cad8027d559d7944d8b39f0b41542a88a0fdcecdbd81a0efe096648774bd14f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              0c29defa-c410-499f-958c-f3514eb8fbca.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0c29defa-c410-499f-958c-f3514eb8fbca.tmp
                                                                                                              • Size 13B
                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              f_000001

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000001
                                                                                                              • Size 960KB
                                                                                                              • SHA256 8b83a0d4bba4cfcd4a4e7ee89b703014a00a5c08e721e568a5c552a732827fff
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000002

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000002
                                                                                                              • Size 25KB
                                                                                                              • SHA256 a1ff7b3cf1549f9152aee9bf7d475ec69f4a5d844c4054fa53a68102c758100f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000003

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000003
                                                                                                              • Size 27KB
                                                                                                              • SHA256 8073ff708bc0b02ec62325fcc119b7cc6ee9df9a47627167da0d48128781891c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000005

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000005
                                                                                                              • Size 76KB
                                                                                                              • SHA256 f7c6a2161feb10ddf828b88fcf0d56d99853a80158fca5fb954c7714691bad1f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000006

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000006
                                                                                                              • Size 22KB
                                                                                                              • SHA256 27c2d618c0d47325ae3ad0844d3ed96d03ef6d9019b779335abb3932f1025dc1
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000032

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000032
                                                                                                              • Size 22KB
                                                                                                              • SHA256 eb3e110e5c4f7805813955280eb54efcae731771a7232357756604390b34b247
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000033

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000033
                                                                                                              • Size 28KB
                                                                                                              • SHA256 71bb0d19ad3f11bb93779b9a23791a9020c9fc39c04c5bd03ef53d8daae50277
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000036

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000036
                                                                                                              • Size 128KB
                                                                                                              • SHA256 e4db38f15f04c4d78ef8ebd7a4d9337e2fad670e2bff7fe4e5f3505577bd8fb5
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_00003a

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00003a
                                                                                                              • Size 16KB
                                                                                                              • SHA256 53c7c08337b4f5be6f7942897b364afd73bf4753786664659d303b5e660b118b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_00003b

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00003b
                                                                                                              • Size 23KB
                                                                                                              • SHA256 e50bbfa9012881b4393ab4989a200e78647ee3ae3c0d1ff4bb0f80e6b4bb7bd0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000041

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000041
                                                                                                              • Size 24KB
                                                                                                              • SHA256 e6f2cbe338e55c7522e28cbfeeca2c624afedb61ee3f03e960c2d80dd0a73a13
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f_000049

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000049
                                                                                                              • Size 490KB
                                                                                                              • SHA256 d24943c4bd534f78779d3c43d5fdb42652418603581314281e8b32dad2747ee8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              snapshot-new.baf

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                                                                                              • Size 20B
                                                                                                              • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              f_000001

                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                                                              • Size 164KB
                                                                                                              • SHA256 66fe85533072ad345a12562addcfc82a49732cf8dd6d0227348a3470664705a2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              140.0.6074.17.manifest

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\140.0.6074.17.manifest
                                                                                                              • Size 225B
                                                                                                              • SHA256 c330e359a269c3722083dd78922fa313b9c6ee4f464435d455ccbacb09e17c6e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              150x150Logo.scale-100.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\Assets\150x150Logo.scale-100.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              150x150Logo.scale-100_contrast-white.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              150x150Logo.scale-140.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\Assets\150x150Logo.scale-140.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              150x150Logo.scale-140_contrast-white.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              installer.exe

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\140.0.6074.17\installer.exe
                                                                                                              • Size 8.5MB
                                                                                                              • SHA256 2551baf6e946a6b3845c0dc50fd041713c112db426ac40f66209f3aa62a1cca3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              browser_assistant.exe

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                              • Size 5.3MB
                                                                                                              • SHA256 f399f3c94ce8b3d6666a8f19a0c33d1e3e0b09ceef4887d323e7c4a35cfbd686
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              opera_autoupdate.exe

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                              • Size 7.6MB
                                                                                                              • SHA256 884c7766c26c12d51520cb95f805644cdfdcb443ab76207f11ba21fd682eefd3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              installer_prefs.json.backup

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json.backup
                                                                                                              • Size 2KB
                                                                                                              • SHA256 7858fd99235b2911dae168b051b2fc7607edb986ce0b297902fe4f3954b89005
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              installer_prefs.jsonbf59a6b5-639b-4a5a-a232-cfc56588dad0.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.jsonbf59a6b5-639b-4a5a-a232-cfc56588dad0.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 89f9a0001055d018cb80b6623ab7f5e227d768cd3f7fe65a62237808e8c6a85f
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              opera.exe

                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              • Size 3.0MB
                                                                                                              • SHA256 9f1f130391f2727c07ee911b38b208dbe33d5ea2cab4004d8c190ffa3b08cfd2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Browser Opera.lnk

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\Browser Opera.lnk
                                                                                                              • Size 1KB
                                                                                                              • SHA256 b553c34a4686a3c8110471264816aaa1e1319584aba2622a05589432968dcf9e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              additional_file0.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\additional_file0.tmp
                                                                                                              • Size 2.9MB
                                                                                                              • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              assistant_installer.exe

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\assistant_installer.exe
                                                                                                              • Size 2.4MB
                                                                                                              • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              dbgcore.dll

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\dbgcore.dll
                                                                                                              • Size 196KB
                                                                                                              • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              dbghelp.dll

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\assistant\dbghelp.dll
                                                                                                              • Size 1.8MB
                                                                                                              • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              de932af914ba00303d4a2778a383ac9c831101e2.crx

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                                              • Size 3.9MB
                                                                                                              • SHA256 5addd9824f7f56c94297975ee8e59a68bb4f0a9618b792a66b38de617870abab
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              installer_prefs_include.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\installer_prefs_include.json
                                                                                                              • Size 883B
                                                                                                              • SHA256 d840499f86327d7916a424b7ae029032d0d95ad76def7c67f846af1c79141710
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              installer_prefs_include.json2a8ce33a-964b-42de-819e-ac583ad33388.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\installer_prefs_include.json2a8ce33a-964b-42de-819e-ac583ad33388.tmp
                                                                                                              • Size 898B
                                                                                                              • SHA256 2ef52af3142f5a0dd7be7012e80684706cd8675b3d7cfea42f8f5c2cdd3baf6d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              installer_prefs_include.jsond530daa9-64bd-4968-bdfa-a5cd17d56088.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\a9bef073-c9fc-4f02-9986-379d2d5acd8b Opera Installer Temp\opera_package_202611102325081\installer_prefs_include.jsond530daa9-64bd-4968-bdfa-a5cd17d56088.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 1c8a1378133510221f0109d12c9d3f131362c48d8c41a9857fd523977e5b9590
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              27f96776-5835-41ba-8263-b1d81acb7819.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\27f96776-5835-41ba-8263-b1d81acb7819.tmp
                                                                                                              • Size 46KB
                                                                                                              • SHA256 176a736c95c08746480a0e25f7acf323d502d0f6aac4b4dfbeb2713513af8a52
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              2c14ce2e-0085-461b-9ed2-dae62298ae51.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\2c14ce2e-0085-461b-9ed2-dae62298ae51.tmp
                                                                                                              • Size 711KB
                                                                                                              • SHA256 b72090a10c10084d62e29a29f9c23805f0117c1f8c3dfcc914776bad7c9b560f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              686c9962-4e59-48c0-86e4-6d47649f2520.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\686c9962-4e59-48c0-86e4-6d47649f2520.tmp
                                                                                                              • Size 1.9MB
                                                                                                              • SHA256 058f5fb5f248f11781e935db57faac037177392547a40c23f20a95a00b53a49c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              76e68a34-5a4f-4ecc-b59f-d5ed70bb821f.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\76e68a34-5a4f-4ecc-b59f-d5ed70bb821f.tmp
                                                                                                              • Size 390KB
                                                                                                              • SHA256 13377ca30d27f34562732dd2f4d7d41dfa28364705742449aedcdd8a72406326
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              installer.exe

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\7zS8040D0C8\installer.exe
                                                                                                              • Size 8.5MB
                                                                                                              • SHA256 c006d928ad6d42dcc951d76ee120b23bfeeefbe279f03b98a6f9eee958982f53
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              c8926bb4-674a-41c5-b2ca-9a5c8cf73921.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\c8926bb4-674a-41c5-b2ca-9a5c8cf73921.tmp
                                                                                                              • Size 14KB
                                                                                                              • SHA256 99dfb50b062db90ac585e2a877192973b88522ceb257a78345f1f1ca5da98e1b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              1423.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\1423.js
                                                                                                              • Size 121KB
                                                                                                              • SHA256 215c630b7d6f721c662372b4af570b99a62dd774a03d546901f7fe9e6558edc0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              1567.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\1567.js
                                                                                                              • Size 516KB
                                                                                                              • SHA256 695436605ab7a07b6edc3cd2ef32d37e6089c1180ec53b118fc5eb0b6d66a1f3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              1622.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\1622.js
                                                                                                              • Size 61KB
                                                                                                              • SHA256 8f9a0edfb20942ea069e98aa03c6a08d86cf0821f130c54a1d74c09fa82d3d47
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              2667.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\2667.js
                                                                                                              • Size 130KB
                                                                                                              • SHA256 26ff518485a5907762d168b9838d90aadfc9a90a6e00c25fcab9ebbd55e54b0c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              269.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\269.js
                                                                                                              • Size 80KB
                                                                                                              • SHA256 34c3fcd0a9703355eff5993ee143b459da9dac9430284a5df69c84fa1093a686
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3168.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3168.js
                                                                                                              • Size 71KB
                                                                                                              • SHA256 7f717cd67c29e915cdfaa8d405bf5331955234fdc8f8ef1ec5e44e08fad0fcae
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3186.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3186.js
                                                                                                              • Size 166KB
                                                                                                              • SHA256 d136fbe8aeeaad978f449ee2a6501eee92bb88c51e935da76cb08d7008424b54
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              326.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\326.js
                                                                                                              • Size 116KB
                                                                                                              • SHA256 3684d03f0d8dd3252021a8f3ccd2a7f47e81d2bf39b8f28845d4038d1cc3b126
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3544.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3544.js
                                                                                                              • Size 1.4MB
                                                                                                              • SHA256 c09be62097e73999f17904adcbb1f3f4caba6220061996687d8621955dfbbab2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3624.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3624.js
                                                                                                              • Size 69KB
                                                                                                              • SHA256 438f3ff2ccb12d96fd7084b0bb63441e1ea694c3a87caf3bfffd315bd47b78a1
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3642.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3642.js
                                                                                                              • Size 68KB
                                                                                                              • SHA256 a0725e894e8389d083c9122e35f18ced43a829575083e2a2a8d2b085fda05066
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3812.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3812.js
                                                                                                              • Size 35KB
                                                                                                              • SHA256 f030d6bcddc1a0af09fb47106faabca019e0a8fabb4acee607d8843031c9e6d5
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3937.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3937.js
                                                                                                              • Size 99KB
                                                                                                              • SHA256 830495431512a7465288ed0ecafd3b9dad6e77b24f5c78d3ddf1a6ebde2cb736
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              395.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\395.js
                                                                                                              • Size 4KB
                                                                                                              • SHA256 8f33cce183dc32de026a9a00a8dc7bd03eec428daeb5cabaaf8fa068c1063651
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3995.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\3995.js
                                                                                                              • Size 65KB
                                                                                                              • SHA256 705dd5fad1551ebaab7e41266ece9706900e3226e3c0cc958e8e7f8c8692e686
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4032.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4032.js
                                                                                                              • Size 23KB
                                                                                                              • SHA256 ce34b68d39c7415eb0a65085d362152ef3a800b673dc4a9d2570d4ab9883c437
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4142.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4142.js
                                                                                                              • Size 278KB
                                                                                                              • SHA256 cef4b8e0c41eb950ff1be891fcf8ebf6f09064378878d536cccbb6838db8230e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4198.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4198.js
                                                                                                              • Size 513KB
                                                                                                              • SHA256 3bcc4ca06f0ef3f020d6385ee2ef5188f3e030bcd5992b844a7651b287320624
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4257.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4257.js
                                                                                                              • Size 181KB
                                                                                                              • SHA256 85f7eb1057e458611e3698c0b9914f95a24b273f4563d80540207553c6e874e3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4294.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4294.js
                                                                                                              • Size 66KB
                                                                                                              • SHA256 8bba1d21ca3c99b3ceb4772a58cb43ce4e2b3b2b8bb884c6fc3af9f61651358c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4398.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4398.js
                                                                                                              • Size 68KB
                                                                                                              • SHA256 89ce7e4ed7e795306e034b5729eebaeba01e97b26972b923d4cc95aa99ee4cbf
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4547.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4547.js
                                                                                                              • Size 52KB
                                                                                                              • SHA256 de2b0adbb72fec4dd75903465ab20338f88e101ddd92260d5a1fcd08b955244e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4583.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4583.js
                                                                                                              • Size 69KB
                                                                                                              • SHA256 d274f695de4316fdc9422354db89984713808617b4d58bc75d594f7b54c1e5cf
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4669.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4669.js
                                                                                                              • Size 65KB
                                                                                                              • SHA256 f7f4e54fa44d92dbaee73c911312bc78a7947870e2f8b7269f7df2a7b9598d31
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4699.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4699.js
                                                                                                              • Size 206KB
                                                                                                              • SHA256 21f743b690d8316c23b61415115b21818dc28220bdf4beee82b26c9ef0e6e465
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4730.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4730.js
                                                                                                              • Size 110KB
                                                                                                              • SHA256 a959b0057aa3dce05777621123b7d2d25b64ef1456ceb6aa175746246ecf37e7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4829.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4829.js
                                                                                                              • Size 92KB
                                                                                                              • SHA256 90955651290c13017942082dc21cb843fda462039cb651602b7a3ac0b4986a82
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              4958.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\4958.js
                                                                                                              • Size 69KB
                                                                                                              • SHA256 fbb281fc555269c4704f706fa532078f3cbbb89a5c10d20dc9a68efbc8ff9356
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              511.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\511.js
                                                                                                              • Size 111KB
                                                                                                              • SHA256 330897ed8cae2537b8bc642db9603a5e57c776d088e513173d9bf2cb5cf8baae
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              5336.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\5336.js
                                                                                                              • Size 62KB
                                                                                                              • SHA256 da8f8ac243a06fb0aff3c74d859159a3eeb38facedc8b26c87f3931924a7f165
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              5345.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\5345.js
                                                                                                              • Size 89KB
                                                                                                              • SHA256 ccd100d5ede7e4c384cb66af7be82af4263ed6a52c22ff93d498c99b4d2449a9
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              5570.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\5570.js
                                                                                                              • Size 61KB
                                                                                                              • SHA256 7fee38050c373f0ba090f96f34bde0c3c860694ce512c96892af047ded7cfb17
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              5649.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\5649.js
                                                                                                              • Size 79KB
                                                                                                              • SHA256 a43637a97132c7790251dbce024ab5e10667cdf218a28e80b04f7bf05f89d0d8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              5907.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\5907.js
                                                                                                              • Size 62KB
                                                                                                              • SHA256 3ccce33aa210bdee42bdc6bb13794e013f5cd5c25e6a4e93929657638dc3f0b4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              6046.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6046.js
                                                                                                              • Size 61KB
                                                                                                              • SHA256 d89d4425183ae5a30ab20705b1e82d4389afb262c744be67b3feeb411632222e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              6166.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6166.js
                                                                                                              • Size 91KB
                                                                                                              • SHA256 5fb161b3771b70e4fd4eb25e5aeab460e031150363c4d0e79f93316c0c9fff67
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              6260.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6260.js
                                                                                                              • Size 66KB
                                                                                                              • SHA256 c261e191c92d5fea22e6aed06a76ebcf63957bea4382880956384bf6377384a9
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              630.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\630.js
                                                                                                              • Size 73KB
                                                                                                              • SHA256 c2fae08112fb3d9efa1bd4132ac09d35833a1e279fe612625f447565d2623b0b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              649.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\649.js
                                                                                                              • Size 11KB
                                                                                                              • SHA256 23e179dd962c393d749154f17f119c0e22d93fe72c99e05ebfa68b104cdb8da7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              6589.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6589.js
                                                                                                              • Size 58KB
                                                                                                              • SHA256 98fd6afc9a03038ff4a889d8a05933108c21fc82843afaa303dc30767ca96571
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              6699.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6699.js
                                                                                                              • Size 367KB
                                                                                                              • SHA256 e98af2f31c91d108e64f21cdc7ab1f7d54da0dd12a8ce5e3c47cb0b5bc32dc1e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              685.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\685.js
                                                                                                              • Size 68KB
                                                                                                              • SHA256 0b3c32c5228913a3314f9c8882ad13f2441aed379f0aa08008672acd9c4bbefd
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              6980.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\6980.js
                                                                                                              • Size 66KB
                                                                                                              • SHA256 ccb2eefbb03a1349baf2735c71e2a47b8ba7bcc11046b32f8b52dc917077d83b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7090.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7090.js
                                                                                                              • Size 69KB
                                                                                                              • SHA256 603c81c90a555aa9afcf5b745b211a56ad71b758fece144cae590c5114078ad0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7103.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7103.js
                                                                                                              • Size 69KB
                                                                                                              • SHA256 99824e3820b75b6578f5a3723ea1678ff974f94a08b9c6d9a9d6ed05632f1aa6
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7219.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7219.js
                                                                                                              • Size 76KB
                                                                                                              • SHA256 39e9a80f5664089505dc8d9d7c39de7cefacc89b6d129b55f1213dcaaaf73584
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7390.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7390.js
                                                                                                              • Size 65KB
                                                                                                              • SHA256 613e188d006e9dab60cb13ea7920b20f224dd9d46aef12cbf9a31f7740ad49ef
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7565.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7565.js
                                                                                                              • Size 40KB
                                                                                                              • SHA256 072db223b760c94690519124132f26fb86b927cc67ee0e5e514f9260ca2068b4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7615.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7615.js
                                                                                                              • Size 84KB
                                                                                                              • SHA256 89e232d294822b9ffbe116a00323c79faaa3e8181b6d4dbdf4f3763ea72c86e0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7755.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7755.js
                                                                                                              • Size 545KB
                                                                                                              • SHA256 bec6d041ac5b9b3c0e26d51b2deb2b257c1f108846f6913f657ddb2f2a1b8113
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7946.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7946.js
                                                                                                              • Size 69KB
                                                                                                              • SHA256 dc16c8929b9e7c7d8eaeaa481804f7f3ca5b7ed28a838be43a4eb1f37e04d352
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7997.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\7997.js
                                                                                                              • Size 70KB
                                                                                                              • SHA256 2f4141b7f232b0da2c6885498f0c916679c2aeb26d93d021547b90b24d935186
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              8122.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8122.js
                                                                                                              • Size 8KB
                                                                                                              • SHA256 74eac130c6b456b6ca32e8d5d69122c741b2e4b98e3488f669876c2a480e55d1
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              8242.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8242.js
                                                                                                              • Size 749KB
                                                                                                              • SHA256 d3b03bb49093eb3829d9ec08bc942409edd5625806c361667e932a1a0341704a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              8319.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8319.js
                                                                                                              • Size 27KB
                                                                                                              • SHA256 d71b842d3ef7ca903df5c4d133cb2e9aec9cfc1f2331d1d05eb0b361b4616679
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              8345.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8345.js
                                                                                                              • Size 69KB
                                                                                                              • SHA256 102fae8be55e9e4beda3de4adbf291237112b4304eb3b4c961392efa54883701
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              8395.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8395.js
                                                                                                              • Size 70KB
                                                                                                              • SHA256 d1555d1b417dcacb15136bd77613a28dfc5b9eae7e8b8daa0409d0646d4a6a8b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              8671.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\8671.js
                                                                                                              • Size 70KB
                                                                                                              • SHA256 56ed127ce00939e95e640a68763dfa8be07260d15022f32eea9dd2b988b0855c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9025.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9025.js
                                                                                                              • Size 58KB
                                                                                                              • SHA256 77c5d3d978d21c5fb11084f04d2593fd4abcadba21e90c9c7e65a46fdb4b1fc8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9028.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9028.js
                                                                                                              • Size 71KB
                                                                                                              • SHA256 babd1347ec20562b6e57fc0ff095577e824b0077a133b40bdc10d233ee621ad6
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9135.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9135.js
                                                                                                              • Size 24KB
                                                                                                              • SHA256 246546df40a3df3c709bfe74fce86e73eb3b5feddd79f4a1ee66b4a8b23c9c92
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9213.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9213.js
                                                                                                              • Size 331KB
                                                                                                              • SHA256 8907e966d66be4d0c7d44102c7260a37067b4d6d9a20a2080f3fac5756b3fe0a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9221.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9221.js
                                                                                                              • Size 16KB
                                                                                                              • SHA256 0117882839ba08237f8fae9352e12a033d472ebd8e59bf4886c29b70e1526593
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9432.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9432.js
                                                                                                              • Size 70KB
                                                                                                              • SHA256 20988874be16ce6d45a36481469b0de7393ccb75577b14df2b99d1fab8e38e33
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9460.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9460.js
                                                                                                              • Size 52KB
                                                                                                              • SHA256 b9491e17db642268455953b650580d95a9247db131e890734b4c563113071beb
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              951.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\951.js
                                                                                                              • Size 92KB
                                                                                                              • SHA256 fddca854f2cf2e97823530abb22f16f8c3da23e70ebce241d59f5e8a4f51f28a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9600.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9600.js
                                                                                                              • Size 69KB
                                                                                                              • SHA256 dd8f928142a42978cf468a4627dffafd6b86b95e2c760e59b5b40310802ece3d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9736.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9736.js
                                                                                                              • Size 67KB
                                                                                                              • SHA256 1c003396553fdab3b043a88c99b72a4cf151b64ef96c753a3e42b90ed54c4415
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9844.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9844.js
                                                                                                              • Size 68KB
                                                                                                              • SHA256 25a99ccda428ae00702c2c5c805eee827daa291648ce6e1c806a5c6cbb5be0bc
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9887.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9887.js
                                                                                                              • Size 32KB
                                                                                                              • SHA256 80db3d65218411ad68740a1051866dd3b2c3de5f54e5088cbd9b875de856dba9
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              9901.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\9901.js
                                                                                                              • Size 68KB
                                                                                                              • SHA256 763338539fd2c11af1896852febcfed64d7e8b600b2f80a07580167fc34f3b14
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              aria.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\aria.html
                                                                                                              • Size 531B
                                                                                                              • SHA256 4e06e363ec440e54c47825436157f4458572af415118f665a4159b934564fd16
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              aria.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\aria.js
                                                                                                              • Size 12KB
                                                                                                              • SHA256 a8dd935de8166585f954d16a41c59c4d117599abf4f00718635f1d65cfc838f1
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              045499a2e328133d.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\045499a2e328133d.svg
                                                                                                              • Size 861B
                                                                                                              • SHA256 70b9447762b68963f066c8de71bae342d4c3734f614d9f6ff4beb74c7b9e29ea
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              04927c4c4e30821a.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\04927c4c4e30821a.woff2
                                                                                                              • Size 34KB
                                                                                                              • SHA256 beb9246f2bc1eb09b536f5c59f83cf792c21872e6c321da35847c28a759d2878
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              0561eac25d821104.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0561eac25d821104.svg
                                                                                                              • Size 779B
                                                                                                              • SHA256 446715e6df1a2374bfff30544a99755ad6eca4c499e7311ff51fe68638d6992b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              0647aa53f7a1ab03.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0647aa53f7a1ab03.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 9651739b361d80c22490b05e1c370756327ad96a3893ea10b21043c01e1e3d89
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              0666508ddb76e695.webp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0666508ddb76e695.webp
                                                                                                              • Size 6KB
                                                                                                              • SHA256 3209b65910b034a54f1916100a1e70900f5833e83429bf1300a5ac4dc81fefdd
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              0c065981a363e375.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0c065981a363e375.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 7ac85af03d05ac66458d94ad4442a5b64ce2ef29bc642d42d34237025855b3e2
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              0c31e8f306b5f2d6.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0c31e8f306b5f2d6.svg
                                                                                                              • Size 686B
                                                                                                              • SHA256 ae5af18df50e69fd4fa99cdb32e4192524c6ec491e1da5a6496d5bb35bb33b9a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              0cbcfc6fe4cb443b.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0cbcfc6fe4cb443b.svg
                                                                                                              • Size 200B
                                                                                                              • SHA256 1edbe3fa1e31ec007617a1eae760cb7fb3c68c4dc7ecac0bb635088763d51c3e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              0ce1e0471c22d650.webp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0ce1e0471c22d650.webp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 fc6275888a83ec3ea6fb5e8ee9ad009f7b1afe05adde781f3260acf4809c6244
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              0d0d0fdaeacb5e45.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\0d0d0fdaeacb5e45.svg
                                                                                                              • Size 670B
                                                                                                              • SHA256 0e05484cdf319c42cbcda83f3ab2ec3cee7942079992da158afa0760fc9b6f3f
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              103eff58785ab58b.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\103eff58785ab58b.svg
                                                                                                              • Size 534B
                                                                                                              • SHA256 ea28a57c2b4c803116566db0c483cc910a6ab9c725db874ff12569222b3d340a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              1046c13174d8b145.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1046c13174d8b145.svg
                                                                                                              • Size 653B
                                                                                                              • SHA256 4c2332c75081ae314df7f476041d1b25aa718e7d943e36a31d46333208dcbedf
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              123ab2cc0ee9e515.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\123ab2cc0ee9e515.svg
                                                                                                              • Size 22KB
                                                                                                              • SHA256 0f0b994c8670200d3c137a916de9601812b414bd75cbad42f136d9f9d0c82bda
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              12e3fff4ce882c02.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\12e3fff4ce882c02.svg
                                                                                                              • Size 706B
                                                                                                              • SHA256 ca84cea75231be8426df1ddaa5c4902440419b43e92f6d5677ab3e9a919c9596
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              14e91cb3dc3fa6da.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\14e91cb3dc3fa6da.svg
                                                                                                              • Size 467B
                                                                                                              • SHA256 4c9290c24d3db4812a64e96509a46dced9fe3bb639c25e8882e2e662845332e8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              1688c4091f2a2e26.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1688c4091f2a2e26.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 f60f4f3a9a21fa2a0937e510ec3b858bff041b0559fa6cdfafe801c43fc8b220
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              17cbd66168518049.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\17cbd66168518049.svg
                                                                                                              • Size 308B
                                                                                                              • SHA256 9ab7570e0639a79235fa71e3bc496d9bc05dd4a74aae7f5dcd4bff3812623663
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              181d51d89dd58b1c.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\181d51d89dd58b1c.svg
                                                                                                              • Size 619B
                                                                                                              • SHA256 7022b29d52ca3620157810b76f3fd4665f728d1ede361afb15937c5793f43ac1
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              18b4316285d3185b.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\18b4316285d3185b.svg
                                                                                                              • Size 6KB
                                                                                                              • SHA256 e72e1f02c8cd530c46a4d756f41be3ec41c3c86ae290b73a27c0fdbe72a6a392
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              1c9159e6d6d5b88c.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1c9159e6d6d5b88c.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 4e6f66ab1e0836fd18a8ff605ec3b4d12a5bfc60062887c3850d434d33aba205
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              1c94572b8a82384e.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1c94572b8a82384e.png
                                                                                                              • Size 6KB
                                                                                                              • SHA256 96ee3e674f0fda9b8a73c3c4242738468405aa0d7c04dc1a4d54e9e548a57a32
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              1eb51cb7434ba396.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1eb51cb7434ba396.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 c569f486ac99a73a4276a731ee171aaef40e27ec821e755faf50d2fe6f47785d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              1f8c89981dfc2af2.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\1f8c89981dfc2af2.svg
                                                                                                              • Size 266B
                                                                                                              • SHA256 dd5f359286947d808937b99b2e8e61fe14d96938524cb056ca42fbd05863357a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              2108d437d813d94a.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\2108d437d813d94a.svg
                                                                                                              • Size 322B
                                                                                                              • SHA256 6cafb6ce0b52ceaef8798eee7c818cfbee01cf91b1790106038d8500835fe345
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              22d2121364e44949.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\22d2121364e44949.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 a5fce2fb360c19b93d2df2d1cd3adba1dc88c655bc51cbf6639fa0df61e67af6
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              243e789a53847976.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\243e789a53847976.svg
                                                                                                              • Size 585B
                                                                                                              • SHA256 fce585879f0a3fc6103d7abbb4fe492f9051f47d6bf82fddaea6083748955e3c
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              253f1599e4c715f7.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\253f1599e4c715f7.png
                                                                                                              • Size 10KB
                                                                                                              • SHA256 944f79c9d166538e47eee1709dc35adceea233beed204491759f35f83b7c0fe4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              2dfdd8918d195c58.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\2dfdd8918d195c58.svg
                                                                                                              • Size 6KB
                                                                                                              • SHA256 16dc2921e1f5d89c99aac9914dc98eba54ffa2f4fcf7a942fc2356391c7a46b6
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              2edf079df2181fc4.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\2edf079df2181fc4.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 10fd7fdec3af7b54ed8ac68ca5f6b2426e00e86a34c12213810f9c3270dccc77
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              2f4d0c616cea0666.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\2f4d0c616cea0666.svg
                                                                                                              • Size 589B
                                                                                                              • SHA256 32499717ae28339dbbba06154107872c5769810f691d68db46d9409be5365127
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              31ba446b2ad075f0.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\31ba446b2ad075f0.svg
                                                                                                              • Size 635B
                                                                                                              • SHA256 ad2ef1213f1a7f67e875a5edb473da0879522ba9946fb2ebf53f226fc795da79
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              33bd9ebd264104a0.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\33bd9ebd264104a0.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 978a0ac5cf228e0fcfbdb7f7058bb26f7c7c3183f58fe3b0e1dbf1ac13516e89
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              3607fe7f996c064b.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3607fe7f996c064b.svg
                                                                                                              • Size 4KB
                                                                                                              • SHA256 37ef05845a8c85f25659be2e12a0143d98e5bc605a954ad3baf1b84744bc51f3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              36bf914fc5de6f1a.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\36bf914fc5de6f1a.svg
                                                                                                              • Size 3KB
                                                                                                              • SHA256 231ceb827eaeda96d3f47c045ac59e23d40710cdfbde54945cd89ccff412aa12
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              37192a2a129f5ff9.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\37192a2a129f5ff9.svg
                                                                                                              • Size 224B
                                                                                                              • SHA256 aba7f75c37591227dfec88b8b83fe1e7700271192d2d38350d047a96a609fd8d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              3a2ea7738b340340.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3a2ea7738b340340.png
                                                                                                              • Size 6KB
                                                                                                              • SHA256 fbdb9fe48083d513b0b946b35a95a157c2434e817f0a11cb2d2963ff144b50c9
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3b9545916efb17d9.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3b9545916efb17d9.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 8ba7bd78ad289a668c7d017266888b7fbf978525cfdfccbdba5f90084fee6dda
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              3c91fce8ee8453fd.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3c91fce8ee8453fd.svg
                                                                                                              • Size 3KB
                                                                                                              • SHA256 2725c1bf08181aab08cc46e8ed47467dddeafe891e310bf67fbfa148d91e1cdd
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              3c9e7cbca1e6a295.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3c9e7cbca1e6a295.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 fb0b1e92b7017f202702168117ee6e278708a06815294a796acc6cb4f8600558
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              3d5e7395e9ffbdbd.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3d5e7395e9ffbdbd.svg
                                                                                                              • Size 537B
                                                                                                              • SHA256 c314723545b36fdfd4c9c340095ed4a3c06367e630321b3bad8d61068cfe827e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              3dad3b5da9993b6c.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\3dad3b5da9993b6c.svg
                                                                                                              • Size 767B
                                                                                                              • SHA256 b4281b6b31da12dfce039b3c29ead495e4c3d4588b7f49e2d352070b2b80c893
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              436b779e283e4cec.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\436b779e283e4cec.svg
                                                                                                              • Size 304B
                                                                                                              • SHA256 5ff297046ceba4068df96fedcd122d47010943085c278c3b1d66559a1dce096e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              467465eb8fa50b5b.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\467465eb8fa50b5b.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 5c427c31f74ac7b88a574c9822c95a75a330fa768ddb8f02b94ad5e3defcf644
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              48d7ceaf46faf1a6.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\48d7ceaf46faf1a6.png
                                                                                                              • Size 16KB
                                                                                                              • SHA256 1b530b8562aaba7d4c9bca32501696bd0473c1bd2b1281941779f48a9d75ff06
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              49c99c607978a8f1.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\49c99c607978a8f1.svg
                                                                                                              • Size 343B
                                                                                                              • SHA256 57f9b1c710d6d4e2e333df1ba9f4e285192fff0e7e7facc2e2950deba2da5f24
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              49f7d977039c303e.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\49f7d977039c303e.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 b14c989ba44526446d5259189ad12e7bdd1261a8f7a6c95490ab30b69684de82
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              4a39a099362c32de.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\4a39a099362c32de.svg
                                                                                                              • Size 477B
                                                                                                              • SHA256 f49cbed3efadd4afb2ce84feb2844c7bca8ebb1388b29b160b2754d7e53d4bc9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              4a903e15f57d70f2.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\4a903e15f57d70f2.svg
                                                                                                              • Size 608B
                                                                                                              • SHA256 582e51dbb3ad1f89b5cf9d9e6c0f760fca3c1e5a8684934ded51f819175b178a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              4cad3768b65a46fe.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\4cad3768b65a46fe.svg
                                                                                                              • Size 8KB
                                                                                                              • SHA256 83dadcbf80cb980a6a142a7f916305136ff8d44fa2b30444b04dc85bd862b076
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              51f491f244f5f86b.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\51f491f244f5f86b.svg
                                                                                                              • Size 13KB
                                                                                                              • SHA256 50d5932c16de127f00ac4d4e944510798787a7f3cea6f495f0d5f24d9bcbaad7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              52630788a25809fa.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\52630788a25809fa.svg
                                                                                                              • Size 503B
                                                                                                              • SHA256 2c4eff17d2184891f880027b9bb5eb9158bc69b69c7724085847cf6905fed97a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              535cb5713fe4ca16.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\535cb5713fe4ca16.svg
                                                                                                              • Size 365B
                                                                                                              • SHA256 2600be0ed823e560f4c93df470afec7ac95a1efa8898651e0190730695a67dcb
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              53d73708b13075be.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\53d73708b13075be.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 3f95bf152dd430c7dca4f6d3e1c58376731eb3998c49caa567aab2741bf4e4e9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              578e94e35aa16d97.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\578e94e35aa16d97.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 90ac01ccda1d73a4076858bfdc567bc22a9100c55b83f6f1c411e917cdea0b66
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              581fa70608c7fb8c.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\581fa70608c7fb8c.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 1e9f16d4e00e445a3ffd0c5e83301bea528c169e0dbe4fb2f0a2116f7ec3aba8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              5bddb929efb23217.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\5bddb929efb23217.svg
                                                                                                              • Size 813B
                                                                                                              • SHA256 1d1c2f5a54824e3a71f6d31709d4d7cad656c328224a7936b5b67cb6957d1a4c
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              5d5360751452a836.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\5d5360751452a836.svg
                                                                                                              • Size 6KB
                                                                                                              • SHA256 1305f3b977b3dfd8018798fc496b76909014ff48183bb94710c6417741ed3b42
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              625b924eeceb153e.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\625b924eeceb153e.svg
                                                                                                              • Size 3KB
                                                                                                              • SHA256 f41e2968b2610bafbd81dff830cdc9f6362ffd14838ec74ce20b52d154af6d77
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              62b733d362f51663.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\62b733d362f51663.svg
                                                                                                              • Size 505B
                                                                                                              • SHA256 3033a3f8ba457ed2ad317685ed075f38e5ca78a861350f4729c9cb64611d8a48
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              62dc31e3f318054a.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\62dc31e3f318054a.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 6342e5e66aaff11a87b88bd2dedd38a1c23405778adb77710f494c83228a7a02
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              6327ab0f8e3c16d7.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\6327ab0f8e3c16d7.svg
                                                                                                              • Size 37KB
                                                                                                              • SHA256 9b4c1dbe8257876b21d1ec0a6e50b0ad408f1e1bb70cca9c09b7d0ad07ad4ef4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              634f72a779327aba.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\634f72a779327aba.svg
                                                                                                              • Size 249B
                                                                                                              • SHA256 9a3fbf6fb2d458eae45fbff9e36faede8305a76b1f09aef0123aae918b1504d1
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              65c1db15d2c85dc2.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\65c1db15d2c85dc2.svg
                                                                                                              • Size 695B
                                                                                                              • SHA256 40d637c10c1b119b0beaf4db4a1c53bdf423331b0b5a15553f4602ab06effef4
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              692666c0b9f55408.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\692666c0b9f55408.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 f24ecd9281c6b917fa5ac620fdbda865cd9989211b64d5e54f24ed3b4f389fda
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              6b1f3d57b04e487d.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\6b1f3d57b04e487d.svg
                                                                                                              • Size 3KB
                                                                                                              • SHA256 8502e540946b516dd25701f9a9ab2be74f14ab0248b8a381b02499c9e91afb8d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              6e3ebbcd0a39edc2.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\6e3ebbcd0a39edc2.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 dd42d346b5cf1d7174cd49882c035bd4822e4b813e53927e857bab438d66246e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              6e6472b3e10aeb93.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\6e6472b3e10aeb93.svg
                                                                                                              • Size 224B
                                                                                                              • SHA256 d0c0e652606ab8b51dad6a57141330141fd11a410ee9baa0f0c6033a11502918
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              6ef20e0ce2751205.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\6ef20e0ce2751205.svg
                                                                                                              • Size 202B
                                                                                                              • SHA256 1ad10d17d3d99d5cdd66aec44133e284f47d9474d76eff04693896e77e673903
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              700fa70309836a11.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\700fa70309836a11.svg
                                                                                                              • Size 804B
                                                                                                              • SHA256 91b1c6e46527889d2bdf4c542103f7a9b7f517eba1e5eb6bb18817c51febae74
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              717cc4781a98e1ef.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\717cc4781a98e1ef.svg
                                                                                                              • Size 517B
                                                                                                              • SHA256 d3a68e1933cef3dde3741fe0a35d3521d731ab4f51781b94d636497b67eb89d9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              72c1fd3caec7d678.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\72c1fd3caec7d678.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 811214139ddf84ffa87833724528d3e109f2fd66fedf8004064ec4b8477c85e5
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              72db340eafb58783.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\72db340eafb58783.svg
                                                                                                              • Size 515B
                                                                                                              • SHA256 d4735286d501aa072cbcc71ef7805d06398da367bbb3d9a884827d7eedf2ac40
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              74ab371d1003b3d3.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\74ab371d1003b3d3.svg
                                                                                                              • Size 609B
                                                                                                              • SHA256 e0b9e22259671c1d486c4bc77575f3d08c23d2476b5d75525239329498fefd3d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              74ef97b398a3165f.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\74ef97b398a3165f.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 81d1f973976ed12e6d25c4ea758e88b024083871bc19f774b6fb1df72e153f54
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              77a9dc64dd93830f.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\77a9dc64dd93830f.svg
                                                                                                              • Size 568B
                                                                                                              • SHA256 1ca557b79f24e093d91478753655bdf9377c0eaa7665e882384c0a168c9a17a3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              77d97894772b8d2f.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\77d97894772b8d2f.svg
                                                                                                              • Size 5KB
                                                                                                              • SHA256 2679bf41033c426cdc8260adb99b351b234e8b8de764ad126659dcaee6020278
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              785ed704eb4b0eb2.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\785ed704eb4b0eb2.woff2
                                                                                                              • Size 34KB
                                                                                                              • SHA256 be536d8595b860ef2346d7a590a1112782e479ac132d6d59ad0f7db9a638794d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              78f56f56b149154f.webp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\78f56f56b149154f.webp
                                                                                                              • Size 116KB
                                                                                                              • SHA256 839b4e0a8deab0fe9eb13c59595dd23f7251839d8a1ad89abf7faeaf983ad1d1
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              791eead8725e14fa.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\791eead8725e14fa.png
                                                                                                              • Size 6KB
                                                                                                              • SHA256 6bc5f3f9ca3b409c6124aecc4c3a666c9472f6c769994175870b6b794458b736
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7bc841d9002787a9.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\7bc841d9002787a9.svg
                                                                                                              • Size 573B
                                                                                                              • SHA256 d7c91b330a747d8617bc87c8b6217325ffeed7f50fca124d6fe47429cec9aa4b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              7ca3462510c989f2.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\7ca3462510c989f2.svg
                                                                                                              • Size 429B
                                                                                                              • SHA256 bb1f4b7d266f983d3dbb9445e9738b78a574190b1437dbc6527e3df60c4874eb
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              7e16ca1274952ee7.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\7e16ca1274952ee7.svg
                                                                                                              • Size 8KB
                                                                                                              • SHA256 6531422220b89b50dc51f0c04ca3dc8bb3402c7d89bf63d89119e2b277acf0ed
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7e28f70725b144c5.webp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\7e28f70725b144c5.webp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 f011b0ad31fec9033752f9c406f352a6835b6f2821ef591404ca4a72fa4fbead
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7fe0482b83201fc0.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\7fe0482b83201fc0.svg
                                                                                                              • Size 750B
                                                                                                              • SHA256 055bcaae2a14a4d012ea7ec758e2a5171412f7346da52c82e750c76c75f64d77
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              809a1e218234bed0.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\809a1e218234bed0.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 ddf381ed309da6ec689983cac97396bc46ca8bf6895e4caa1ae8297fc3b18a27
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              823861837143cdc9.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\823861837143cdc9.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 fd11e4f3442db2eeadaffb5b404dc7fb043e60ff57760edcec2098a01cfe9b48
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              833aa64d0b4e0fae.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\833aa64d0b4e0fae.svg
                                                                                                              • Size 25KB
                                                                                                              • SHA256 7657944e8398514c563319c54cdbae80c74c07fe258d6d8bc05009ddbcb1ee0f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              83a9049d6e0cae5a.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\83a9049d6e0cae5a.svg
                                                                                                              • Size 251B
                                                                                                              • SHA256 00ed74d7462e2fd6246acd171f2df6dfc3a434f05136781e9f5cf8fe3a3251ed
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              85004375da840fda.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\85004375da840fda.svg
                                                                                                              • Size 694B
                                                                                                              • SHA256 b385cd1d778679fc5312217a0ecb1aa70c81b97981f898871c3a0b1d2e950373
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              86235b4464b5fafd.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\86235b4464b5fafd.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 79058973147da9ae959eada5388b205cca8adc13787482267157004018c4e313
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              869ca107851f570d.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\869ca107851f570d.png
                                                                                                              • Size 30KB
                                                                                                              • SHA256 a8b29679f9ae04c818d8abad257b3de8fcf07924ef5cb14b998eb52fd1f2130f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              86f46fb860e9ed7a.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\86f46fb860e9ed7a.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 adef3224e62a8db8a5f0d7b6dd80df3b3ffc4abc03ed51a119fb1fed318c8644
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              87869749858a9270.webp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\87869749858a9270.webp
                                                                                                              • Size 4KB
                                                                                                              • SHA256 771ce803a984293c15bb4fd950f58f77fe8ba3aebe9c1cb41a209ee928bb7761
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              878f446ee6de2255.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\878f446ee6de2255.png
                                                                                                              • Size 7KB
                                                                                                              • SHA256 5515a8451464f22c220ac7beb66bd2cdfb8b60a63ee2921d90e36aca9332bc80
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              87dc241b2c0177c7.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\87dc241b2c0177c7.svg
                                                                                                              • Size 42KB
                                                                                                              • SHA256 195b7cca25841a9745ece97fb1a20f17379e02f1bbee8df68259aa2578157499
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              881503b944af06d9.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\881503b944af06d9.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 8b8b7b1d850ff7319857ccc9a683229617506f6fb60d9ec478ebdb488d457ae6
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              885856d657cdfb17.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\885856d657cdfb17.svg
                                                                                                              • Size 272B
                                                                                                              • SHA256 7a0a881ca68c4ede97a7988ea9099ec1663718e1fb2cad856793a776bd94540b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              896669c7450ccc86.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\896669c7450ccc86.png
                                                                                                              • Size 6KB
                                                                                                              • SHA256 70327650ac97f7f1eb527848ae31b363f1c49b298b9c2f48abb1c5a0ae3a3015
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              8987293ae7ba4469.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\8987293ae7ba4469.svg
                                                                                                              • Size 388B
                                                                                                              • SHA256 260c7166ff9dd09523c168413274b0f01f14e09cdc85cd75437fbfd0553d6bc3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              8a62bca7498ca4cb.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\8a62bca7498ca4cb.svg
                                                                                                              • Size 343B
                                                                                                              • SHA256 8db5ec0d6a3202d7837433fb51a37f146fe9e17d46d881b9c6166cc223e937aa
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              8bf0bcc9a3301fbb.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\8bf0bcc9a3301fbb.svg
                                                                                                              • Size 798B
                                                                                                              • SHA256 ca36df9cd20e38a361265a3338d41898397f43ae61bc5953356b2dcb72d7bfe2
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              8bf79756f58263e4.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\8bf79756f58263e4.svg
                                                                                                              • Size 3KB
                                                                                                              • SHA256 50bd8be39e536e80d0e9cf731857749fa0689dd18fec8a8d6d7b767f6d82c816
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              8e2cf4504754d310.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\8e2cf4504754d310.svg
                                                                                                              • Size 272B
                                                                                                              • SHA256 178e3bd6928ffbc19687e48fac480e711f147ff2ef9b0e9b39f17fa9e52c97af
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              91ede6982d00ebc1.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\91ede6982d00ebc1.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 fddceb3e8f58e36954ec380e301e2653df8315941158262adb295c85ea8c58d4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              931d0abe7a9ac97b.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\931d0abe7a9ac97b.svg
                                                                                                              • Size 485B
                                                                                                              • SHA256 e4f65bc15816d84478fc8e67aaf2ea627fe4a5a6745f671d39e02737706e1730
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              96cc5bea8cfdcdd1.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\96cc5bea8cfdcdd1.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 36488700d3357641fdce4ef5ddd0b0e8a70ea92d997e7899c97ec977022f333b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              96fa9a8683ad0a32.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\96fa9a8683ad0a32.svg
                                                                                                              • Size 534B
                                                                                                              • SHA256 ef4b7e503a3ebbbe173c71e57a7873602194dd5c1687a424b98f6b36516174aa
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              97e3abd934c12f4e.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\97e3abd934c12f4e.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 d881de46dd3e77af8549f8ff60e826d0e8a41d2f598aba698ec595e58b974837
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              9819b4866b7e8233.webp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\9819b4866b7e8233.webp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 9a9ed20b388d3ec5c9a0297d2b995ebd330f683c2d944174f9f0f31b2904f794
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              982d29750cf2efe8.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\982d29750cf2efe8.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 276e3c7721aaa1a451ac87c0c75aaba7636725710742d78993c64e946c77084b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              98fd046c4f286143.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\98fd046c4f286143.svg
                                                                                                              • Size 346B
                                                                                                              • SHA256 9723ff176ddfd31ad74a4bad9e14dc6265e8042018621fba64d7110f2b82e322
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              9a23d988229f3c4f.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\9a23d988229f3c4f.svg
                                                                                                              • Size 501B
                                                                                                              • SHA256 ea91ccb62f0ffc02e271e6a5318aa82b69ef61177b8f56b965966c90d012cbbd
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              9b8afed344c17eb7.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\9b8afed344c17eb7.svg
                                                                                                              • Size 196B
                                                                                                              • SHA256 24cf5aed7c4d57067744a9785c0dad71155d1090b8de8ce44b9c1506d87280df
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              9fd27840422642a9.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\9fd27840422642a9.svg
                                                                                                              • Size 365B
                                                                                                              • SHA256 7c1dd95fae58b545a40ff1ee264a97dc41428554d4259ff901d7a7ee4008c515
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              9fe4e4ead173d4dd.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\9fe4e4ead173d4dd.svg
                                                                                                              • Size 643B
                                                                                                              • SHA256 032a838269d065fc262c6156b2c132fc0d234d473021112d96ce78ac97aa8924
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              a0ee19f03b9940aa.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a0ee19f03b9940aa.svg
                                                                                                              • Size 227B
                                                                                                              • SHA256 39938a98231b768d985fbe5abdea560bb2b5f31d7011e84be730d92d796d9542
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              a1a3ecb5c68b205c.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a1a3ecb5c68b205c.svg
                                                                                                              • Size 166B
                                                                                                              • SHA256 1c90e13a94cb36e3061af78bba58216843b9511c9712d1b4b4b4517a24eec840
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              a49ea8daf7467bb0.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a49ea8daf7467bb0.svg
                                                                                                              • Size 599B
                                                                                                              • SHA256 a9a5d95e4cc0a0e0ec5cdc8f986308cdda7d1d80992412f8881cfff65143e4d9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              a58a2e93a4b54988.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a58a2e93a4b54988.svg
                                                                                                              • Size 304B
                                                                                                              • SHA256 11f8d51df24951971552bcf6317d592b2920f73dcba177caa272b70b0627e5de
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              a658c46672ad28f5.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a658c46672ad28f5.svg
                                                                                                              • Size 198B
                                                                                                              • SHA256 c7fd1566d975fd06461e0b3dc308e0d06a76f1f08f497670d7c6908a6b58d820
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              a7a18b10642bfd5f.webp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a7a18b10642bfd5f.webp
                                                                                                              • Size 7KB
                                                                                                              • SHA256 a3cbb2fe889c660e3c2031f36e41dc48fa201b9345ecb62dc78317fe4e1131fe
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              a7dbf1405144b262.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\a7dbf1405144b262.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 cc91055c156950e590c3484782daf4fd82da79a36c568739c7af88f7cc4793aa
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ac28779d03531772.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ac28779d03531772.svg
                                                                                                              • Size 452B
                                                                                                              • SHA256 22bd354a581ff101fd23929bd9b9d4f95e4e78ee7b61b02934c76d036bd8d215
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ae846f7eddd04278.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ae846f7eddd04278.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 b29819aa59d21fdc24b45cf3546cce9c3b5a4151d970b1efe94f6d49ea9299b8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              aeba9f15ecf7f43b.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\aeba9f15ecf7f43b.svg
                                                                                                              • Size 224B
                                                                                                              • SHA256 2e1900037f584a61efd75d74176733ec9722d9409bafbf8db37df79508ea11d6
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              af5f97cd7e418012.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\af5f97cd7e418012.svg
                                                                                                              • Size 973B
                                                                                                              • SHA256 05f47fb3ffb7323bdbf6b397330229a7f32a3a1f2d17365e748f8777a82dd6c0
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              b294d3d2f70d508c.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b294d3d2f70d508c.svg
                                                                                                              • Size 515B
                                                                                                              • SHA256 e593d97979df385b1c6e2270af9a87bee796d70e7c84099ea449839bcba81008
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              b37bf551ac569d00.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b37bf551ac569d00.svg
                                                                                                              • Size 939B
                                                                                                              • SHA256 55369f30e6b56ea039d0e71e55aa81d85264efb57b231163c72060670fad713a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              b4e5db2f8e466503.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b4e5db2f8e466503.svg
                                                                                                              • Size 534B
                                                                                                              • SHA256 1278a6c6c37a0745eb9d3f919dc5aa19078b021a7360046cbfb7d3195f82bae0
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              b631c209ab478391.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b631c209ab478391.svg
                                                                                                              • Size 913B
                                                                                                              • SHA256 90e0f9b6b878cc11b47456104b02bffab635964bf58260f693356af8f680be7e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              b80fc20fe385bc09.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b80fc20fe385bc09.svg
                                                                                                              • Size 870B
                                                                                                              • SHA256 b8c1bd8dc96665c3656cc96cc02f5b91954d4b19d8016a0fd17badab678c4fbd
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              b87ddd7d399ff7d2.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b87ddd7d399ff7d2.svg
                                                                                                              • Size 795B
                                                                                                              • SHA256 ef2c417a4822198f775e6a043e815068d50597dab195a20c361f892ef453db87
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              b8ddd3b0a5acfb1f.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b8ddd3b0a5acfb1f.svg
                                                                                                              • Size 916B
                                                                                                              • SHA256 9fa8322e2025b75254a164876192790e0b99b33e1b8907c7f10852100909a642
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              b9e2526d946fd3cd.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\b9e2526d946fd3cd.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 048bee5d83dae709f1ec6053ed1f37d2baeb3fbd81e471ae4c7416a492ccb166
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ba9bf1c3957e59f0.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ba9bf1c3957e59f0.png
                                                                                                              • Size 10KB
                                                                                                              • SHA256 d88cfe3f564100986936c848d6b7b3830942901c908b7a5a5c39150547af8753
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              bc4e54d6f0276d36.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\bc4e54d6f0276d36.svg
                                                                                                              • Size 8KB
                                                                                                              • SHA256 2a886f41916a813d93a2a17f230c10f6a714b92c85d2109eb0c5fd5c43c8364b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              bccd629ae7cb011d.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\bccd629ae7cb011d.svg
                                                                                                              • Size 217B
                                                                                                              • SHA256 f6dedb2e1102582c17b6a4424b86fe6181ae22f7c4a09015f1a1d2360830a831
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              be50ce6d9253a5a9.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\be50ce6d9253a5a9.png
                                                                                                              • Size 30KB
                                                                                                              • SHA256 41aa6176ec702cc098347a51403f0299c0209c8722999af957a04d6115517903
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              befe724adae4279e.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\befe724adae4279e.svg
                                                                                                              • Size 297B
                                                                                                              • SHA256 8cad02aaee30ae0131cf45f0c2127e4ffbd9e99a5a5877c5a23c3372c35ac6e1
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              c2975b0d0a40a4fd.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c2975b0d0a40a4fd.png
                                                                                                              • Size 2KB
                                                                                                              • SHA256 f6a35bdbdd9251aea9aaa2ef7e15ba466c39169b940424110bc0676de2d9ba7e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              c3c4018a4fd62a9a.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c3c4018a4fd62a9a.svg
                                                                                                              • Size 520B
                                                                                                              • SHA256 78c13a1cabf0d0caab6c5dedcf2c0de5737a3fbeb14391d2e32366c19da3195d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              c57ac42a27678f77.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c57ac42a27678f77.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 3a5d63fc899063db5eb8a48e421f52dead3e10031e1c8093425449df8ca32bbb
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              c5e2e5518ff4a597.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c5e2e5518ff4a597.svg
                                                                                                              • Size 884B
                                                                                                              • SHA256 f144a22baba0ebd9eb2e0b8f9ec4203bb48f8d35a2e533994c427f9e90a463ad
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              c5ed42bd4f1a6974.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c5ed42bd4f1a6974.svg
                                                                                                              • Size 394B
                                                                                                              • SHA256 d93b470b2fe89d945653c2bb3ae0a6c3b80164bdfd4774664e6260d599b790c9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              c6b3624b8cf9684a.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c6b3624b8cf9684a.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 f9658376f26164948ab72dca9692ac812d3420d8b7ec0dadd1fb09aff809653d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              c7c6749d23d7b7f6.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\c7c6749d23d7b7f6.svg
                                                                                                              • Size 221B
                                                                                                              • SHA256 201cb9465adedd0fd56784d027ece0b539ba644ec0ed515de4b5a3c54cb5d112
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ccdd22e861d21d30.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ccdd22e861d21d30.svg
                                                                                                              • Size 936B
                                                                                                              • SHA256 a9026d4e66a703b1576160f9ac407d382c3301575c7f699bd6e78d46a4063253
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              cf4e50b4c6dd3858.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\cf4e50b4c6dd3858.svg
                                                                                                              • Size 711B
                                                                                                              • SHA256 b77cf5b08305ec526632cbad0ff3356d4386f00e5d88c76732bf7e9348a4e0f5
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              cf589dea802c8964.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\cf589dea802c8964.svg
                                                                                                              • Size 221B
                                                                                                              • SHA256 8f2a24e72ccb25219d49ab352eba207262587b56eb20d1ffd5320bd1f5812d70
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              cf9e121c611b5d0e.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\cf9e121c611b5d0e.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 8eba6969e00d42f30a2b31881b43d6219f73288c381adf9d09659189d63bcfe3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              d05dd34996b64d16.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d05dd34996b64d16.svg
                                                                                                              • Size 16KB
                                                                                                              • SHA256 7d4c4169954fe742a59cd5c390f8fb362a82c7c4bc42942f8c8ef0eb29eda5b4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              d065dd41270e47f7.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d065dd41270e47f7.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 356c07a3cf412098080594e9faf780f09581eb2ffd6bf2254405af8074651614
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              d28440c6dc230bf9.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d28440c6dc230bf9.svg
                                                                                                              • Size 290B
                                                                                                              • SHA256 ec9362b2f09d1fd635057a48910bde5d75971169c9c4e3abdc8f7c21c16828bc
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              d2cf554ccc93ffff.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d2cf554ccc93ffff.svg
                                                                                                              • Size 263B
                                                                                                              • SHA256 95c04a4a17f3b696b617a0b3bc222d85410f10349bc7ee616cb6b937c9006718
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              d2e19878110efee6.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d2e19878110efee6.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 6c0b3e2a8ba624f2a859c4fd9939b89dfa37699cb6d92f1393881ecc74760c1b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              d46d147daa1d2f79.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d46d147daa1d2f79.svg
                                                                                                              • Size 945B
                                                                                                              • SHA256 6d10f336af16d43cef3b98c2506fadcbb2e4a96131433aaf1c0f782e93826324
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              d59a1307c364439b.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d59a1307c364439b.svg
                                                                                                              • Size 674B
                                                                                                              • SHA256 572e8b100f61e6802e561dc255c0cf5c7e7882cb2fad418e851838410ed68fc4
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              d78ba875312ee059.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d78ba875312ee059.png
                                                                                                              • Size 17KB
                                                                                                              • SHA256 cd09040e73647aa8edfb60dbd4c50b2bd462aa2fd0b0e8df205190a070051de6
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              d7dc8f3dc0f234e6.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d7dc8f3dc0f234e6.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 4147c78e34a2c7eba0d21dc26a45bc74d7459e73da4d18ee0d707acec09fff06
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              d841f4bcced2e8bc.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d841f4bcced2e8bc.svg
                                                                                                              • Size 614B
                                                                                                              • SHA256 bf1516f759e2e0a845425060a511e7fbf01b434e6ea7b52aeb0a2559ce34b0a8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              d897a6873296312d.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d897a6873296312d.svg
                                                                                                              • Size 234B
                                                                                                              • SHA256 74def5cf4975a6c055fe5550dedaa0fe6c54e465d12b27f7dbc8aa2a7bb32aac
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              d9b627af8bb0675e.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d9b627af8bb0675e.svg
                                                                                                              • Size 360B
                                                                                                              • SHA256 47447a31e6021b1fdd64dfea9d30d74510cb78051d8d04d4817bca0b1775b71a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              d9b97322b3dc4aee.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\d9b97322b3dc4aee.png
                                                                                                              • Size 6KB
                                                                                                              • SHA256 779291157f20990ddb9c6cfdd6181550cc7a31ae5ac25292d590eb20d2efa110
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              dbd42b49cf89fb00.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\dbd42b49cf89fb00.svg
                                                                                                              • Size 16KB
                                                                                                              • SHA256 975ba31e49918a0e1ab4f5900a638552affb881e666e95e35089ea18e32d8a41
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              defebccb46e071fb.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\defebccb46e071fb.svg
                                                                                                              • Size 6KB
                                                                                                              • SHA256 fbaa12b93ee17014b7c724abfa62545bf05e1dd805dfa6e5c1f51588142ac8d8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              df04cc6b3471fe0f.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\df04cc6b3471fe0f.svg
                                                                                                              • Size 494B
                                                                                                              • SHA256 5b67a74696b0cf0d76c60192825453971991441b6a5b6ad62d4c5366815e2dff
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              dfcd56774003574f.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\dfcd56774003574f.svg
                                                                                                              • Size 587B
                                                                                                              • SHA256 2d26d211cd091e758241941a40d1eb57711712fcc3eb1d705eef32547d9a282b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              e0753f4e4fd1f172.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e0753f4e4fd1f172.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 644b2a34a99a01eb62f923c483545c8ada2348ce5a0154dfecb8ebddd93dc7fc
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              e117838d3c5eda37.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e117838d3c5eda37.svg
                                                                                                              • Size 271B
                                                                                                              • SHA256 b8adf2f0aeee2f2cc4cda4fecba7ba04db0043814c660d32c8ea92641d446762
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              e337c07cfdb9efce.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e337c07cfdb9efce.svg
                                                                                                              • Size 352B
                                                                                                              • SHA256 405fb48c2c04f011f040a13623c3dd39a1905aab12b7070df47dfcfa70ec422a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              e8a8ba696fae21e8.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e8a8ba696fae21e8.png
                                                                                                              • Size 7KB
                                                                                                              • SHA256 a9b90f8084a5ac0cbb4136dbb53eb6c163051046f06c61ca911cf67e24c9a462
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              e8bb6bfbe58f9668.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e8bb6bfbe58f9668.svg
                                                                                                              • Size 10KB
                                                                                                              • SHA256 f195773404e0283872b84c104951749d80e678eefa8620bf91a72c8a15ce574a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              e95ff90adab8dab9.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\e95ff90adab8dab9.png
                                                                                                              • Size 5KB
                                                                                                              • SHA256 0eab88dde1bb6297c4da1fe29780391aed05f32b2d52bdd5cd02161ec061dec0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              ee302686425de6d1.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ee302686425de6d1.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 d3010106cff7fc076de4f24f77aca90cd29ee94fd3675bb23f1107fe1817e88e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ef9a6d17d898fe64.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ef9a6d17d898fe64.svg
                                                                                                              • Size 660B
                                                                                                              • SHA256 3dd662b1629341ac9efa38feac98107ad37568c0e6bc20fc9cbf357ab034e185
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f0c9814d841afa42.webp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f0c9814d841afa42.webp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 4fe7d9933cfc5daf877acb90887ae5e039209a7dd7e6be78cb67358734bc93cd
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f156fe54a5a79b77.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f156fe54a5a79b77.svg
                                                                                                              • Size 514B
                                                                                                              • SHA256 511c586eb88a9c206735e3e3fba7aa46f07cbcd1b6e99be5eb885d803a05610d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f3bcc22345312f8d.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f3bcc22345312f8d.svg
                                                                                                              • Size 3KB
                                                                                                              • SHA256 6614961bc63bed06c36336bbf9e319036b57fde7bba1120d6a6f3efe16aafe48
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f45cbb00d6bb82cc.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f45cbb00d6bb82cc.svg
                                                                                                              • Size 322B
                                                                                                              • SHA256 d32b690b0525b4fa227dc01328f12cf5d6bf07bd2e8886cb839fde079e247419
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f515140b598dd3f7.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f515140b598dd3f7.svg
                                                                                                              • Size 481B
                                                                                                              • SHA256 133df0cdeb44eecd6381f3f97c7edacba9956d9ae6de1902f7c5a988b9e8f123
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f7b78d9433c9d476.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f7b78d9433c9d476.svg
                                                                                                              • Size 406B
                                                                                                              • SHA256 c3f7cbe95b88ab96679037aecc2a6fc59286b2f047d0b56b5777de5f27d7bbf3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f7fc539ce7a13719.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f7fc539ce7a13719.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 65d27f13b9a522ee5e6f21058684445eef0791866ef29fd0bd34d1f82c5ac538
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f8695cbe3a95268b.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f8695cbe3a95268b.svg
                                                                                                              • Size 870B
                                                                                                              • SHA256 8f9307e7950595d6edd6b89f898ff848a6d95b8f37d39849b6faa31ae45f9dc8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f907caea9dc5c5af.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f907caea9dc5c5af.svg
                                                                                                              • Size 1KB
                                                                                                              • SHA256 6b250c1857cae345f3fb6c64f9a43302c86eb99e2e77941003398db5af0477d3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f95f5a575299231b.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f95f5a575299231b.svg
                                                                                                              • Size 402B
                                                                                                              • SHA256 306ed4c0b1c53e5fa313a3396dafda9ba506e3cc69e29f270b76affee5ae2e94
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f9ea9c071ead0706.webp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\f9ea9c071ead0706.webp
                                                                                                              • Size 4KB
                                                                                                              • SHA256 7b5bbf60227043945dda8a4ca2cf98a34dc65260136da04911593a2ff1b1acc6
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              fc431416b1024934.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\fc431416b1024934.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 31a2447cb28df6dd58aea512fcc054b455b4d1cb7a70a71eac4989aaa1d4e240
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ff8d935c2abdcdac.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\assets\ff8d935c2abdcdac.svg
                                                                                                              • Size 2KB
                                                                                                              • SHA256 2e62797f1b6c866bd2c2a5d27889bf0fb093bd8a25bab5f9dc2690861994b767
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              blacklist.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\blacklist.js
                                                                                                              • Size 76KB
                                                                                                              • SHA256 e0e8a7d3bb4e91a9838bb2e94a949b19c8c0def901d4e61b646c15df9dc61b27
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              favicon_opera_one.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\favicon_opera_one.png
                                                                                                              • Size 2KB
                                                                                                              • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              favicon_opera_one.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\favicon_opera_one.png
                                                                                                              • Size 2KB
                                                                                                              • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              KaTeX_AMS-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_AMS-Regular.woff2
                                                                                                              • Size 27KB
                                                                                                              • SHA256 0cdd387c9590a1a9f9794560022dbb59654a7d86f187aa0c81495ad42d3a7308
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Caligraphic-Bold.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Caligraphic-Bold.woff2
                                                                                                              • Size 6KB
                                                                                                              • SHA256 de7701e42cf1f4cf0b766c03fb27977207eee2f4fd5d76fa82188406da43ea4c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Caligraphic-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Caligraphic-Regular.woff2
                                                                                                              • Size 6KB
                                                                                                              • SHA256 5d53e70ad607c2352162dec9e0923fb54ecdafaccbf604cd8dcf7d00facb989b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Fraktur-Bold.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Fraktur-Bold.woff2
                                                                                                              • Size 11KB
                                                                                                              • SHA256 74444efd593c005e3f4573b44524704c0af0a937fe911cca9e94068d0d140d3f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Fraktur-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Fraktur-Regular.woff2
                                                                                                              • Size 11KB
                                                                                                              • SHA256 51814d270d06ff0255dba0799994fa4d8c84d11f09951d47595f4abb1f3602dc
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Main-Bold.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Main-Bold.woff2
                                                                                                              • Size 24KB
                                                                                                              • SHA256 0f60d1b897938ec918c8ce073092411baf9438f6739465693ff18b0f9d20b021
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Main-BoldItalic.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Main-BoldItalic.woff2
                                                                                                              • Size 16KB
                                                                                                              • SHA256 99cd42a3c072d918f2f44984a807cf7aa16e13545fd0875fc07c6c65f99e715b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Main-Italic.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Main-Italic.woff2
                                                                                                              • Size 16KB
                                                                                                              • SHA256 97479ca6cce906abc961ecac96faa5f9ca2e61b8e7670d475826bcdee9a7c267
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Main-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Main-Regular.woff2
                                                                                                              • Size 25KB
                                                                                                              • SHA256 c2342cd8b869e01752a9321dc17213fc40d4d04c79688c1d43f2cf316abd7866
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Math-BoldItalic.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Math-BoldItalic.woff2
                                                                                                              • Size 16KB
                                                                                                              • SHA256 dc47344dbb6cb5b655c8460d561f4df5f501b90c804ad3c6cec65fe322351ab1
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Math-Italic.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Math-Italic.woff2
                                                                                                              • Size 16KB
                                                                                                              • SHA256 7af58c5ec8f132a2ddde9027c6d7814decce4d3b822a11192a42a20e2e973264
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_SansSerif-Bold.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_SansSerif-Bold.woff2
                                                                                                              • Size 11KB
                                                                                                              • SHA256 e99ae51144bf1232efcc1bfe5add36262c6866b0faab24fa75740e1b98577a62
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_SansSerif-Italic.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_SansSerif-Italic.woff2
                                                                                                              • Size 11KB
                                                                                                              • SHA256 00b26ac825e2095056396e0553b8ac26d3f8ad158c3826e28b4c45b385c4714a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_SansSerif-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_SansSerif-Regular.woff2
                                                                                                              • Size 10KB
                                                                                                              • SHA256 68e8c73ef42afd3ccec58bf0fba302cce448938e7fc020a5e31f8a952eee1342
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Script-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Script-Regular.woff2
                                                                                                              • Size 9KB
                                                                                                              • SHA256 036d4e95149b69ff9bcc0cd55771efeb25ffa3947293e69acd78d5ac328c684b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Size1-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Size1-Regular.woff2
                                                                                                              • Size 5KB
                                                                                                              • SHA256 6b47c40166b6dbe21a5dfca7718413f2147fd2399be1ba605d8ad39cedf25dfe
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Size2-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Size2-Regular.woff2
                                                                                                              • Size 5KB
                                                                                                              • SHA256 d04c54219f9eaec6d4d4fd42dfb28785975a4794d6b2fc71e566b9cd6db842dd
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Size3-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Size3-Regular.woff2
                                                                                                              • Size 3KB
                                                                                                              • SHA256 73d591271b1604960cb10bb90fee021670af7297017e0e98480b332d11f51995
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              KaTeX_Size4-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Size4-Regular.woff2
                                                                                                              • Size 4KB
                                                                                                              • SHA256 a4af7d414440a1c1790825cfb700cf9cf43b0f2c4b04f0ebc523011ad9853ec0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              KaTeX_Typewriter-Regular.woff2

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\fonts\KaTeX_Typewriter-Regular.woff2
                                                                                                              • Size 13KB
                                                                                                              • SHA256 71d517d67827787cfabdf186914cc3358eda539e37931941f2b2fd4a21f68c0b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              handleReloadUI.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\handleReloadUI.js
                                                                                                              • Size 4KB
                                                                                                              • SHA256 a05abfe190494444680c0ea6ba237a70bf2f4d8250a401f1182e8ac8e85499a2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              html_preview_sandbox.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\html_preview_sandbox.html
                                                                                                              • Size 3KB
                                                                                                              • SHA256 84ef907a752006e3f061a3bf2afac9eba4522db4ef7a86d27265049e2f2b4c7c
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              neon_tab_update.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\neon_tab_update.js
                                                                                                              • Size 15KB
                                                                                                              • SHA256 5f5027e82ac4350829f128a7c18762755d18cad22d9e40a69cb5b55b26bc3e86
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              operator_animations.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\operator_animations.js
                                                                                                              • Size 8KB
                                                                                                              • SHA256 4aaee8efee42bb2ece5fe095f27528546fdb1bb18e6581063759cb7795feaa7d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              operator_startpage.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\operator_startpage.html
                                                                                                              • Size 1KB
                                                                                                              • SHA256 b1ff2e57b29a38351ff16205c009091011bd3643f5c78cced9c866c8fc98932e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              operator_startpage.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\operator_startpage.js
                                                                                                              • Size 387KB
                                                                                                              • SHA256 e2415a7b3114947f097f3fc8f7ceafd394eb23f4bb5977cc321a6ea1a82a6a64
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              prevent_new_tab_opening.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\prevent_new_tab_opening.js
                                                                                                              • Size 7KB
                                                                                                              • SHA256 d4851b41a3d9dc7e9bad42c392cb6e84c6f8fc49ed0ee50928b26cdd2ece1802
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              prompt.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\prompt.html
                                                                                                              • Size 753B
                                                                                                              • SHA256 04479fb07e73544b75389ad9422125a2dfd3749f7bcd43c10efc5e23804d301d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              prompt.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\prompt.js
                                                                                                              • Size 25KB
                                                                                                              • SHA256 257639bac09d83011781e8757477bf1c87dcd2fc10527b27f7d2926554023e4c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              reader_mode.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\reader_mode.js
                                                                                                              • Size 112KB
                                                                                                              • SHA256 610fe197f8198c13f2e1bd13c456fd31b7b36afe6fdfdfee38b4566e0fc06ef3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              operator-scan.glsl

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\shaders\operator-scan.glsl
                                                                                                              • Size 6KB
                                                                                                              • SHA256 d5d880f6f3cd7180c2e97c5da22b59b11e01682f8af0d8b44e691da40f4b57e2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              spotify_frame_interceptor.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\spotify_frame_interceptor.js
                                                                                                              • Size 5KB
                                                                                                              • SHA256 1ae491b97fec5fdcd82d5d7a82e9e107f8ce995c84bb5837bc3a3cdf038854be
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              voice_capture_worklet.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1380_1398529181\CRX_INSTALL\voice_capture_worklet.js
                                                                                                              • Size 9KB
                                                                                                              • SHA256 755e71034b73b232e0a539ac2b5bf8acd71062f83017cdf23b1d5288f1dddd6c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              logo_128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_110276955\CRX_INSTALL\public\icons\logo_128.png
                                                                                                              • Size 7KB
                                                                                                              • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              logo_16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_110276955\CRX_INSTALL\public\icons\logo_16.png
                                                                                                              • Size 653B
                                                                                                              • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              logo_32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_110276955\CRX_INSTALL\public\icons\logo_32.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              logo_48.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_110276955\CRX_INSTALL\public\icons\logo_48.png
                                                                                                              • Size 2KB
                                                                                                              • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              logo_64.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_110276955\CRX_INSTALL\public\icons\logo_64.png
                                                                                                              • Size 2KB
                                                                                                              • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              logo.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_2080418795\CRX_INSTALL\logo.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 2f32d26eb9d2418b5678bdaf6d22407f426eca89a10afa05a2a3d7115f710bc4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon-128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_415258496\CRX_INSTALL\assets\icon-128.png
                                                                                                              • Size 9KB
                                                                                                              • SHA256 8a909845237ef287d26ee417ab15fa924b0c16351f5b31dea656940bf09111f2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon-16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_415258496\CRX_INSTALL\assets\icon-16.png
                                                                                                              • Size 654B
                                                                                                              • SHA256 8e6ff8ab8b4dedec067b7cb06d5f4dcad566d1174430f5e5156be4c196e6af66
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon-32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_415258496\CRX_INSTALL\assets\icon-32.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 7bafbbc53c7baf9cad8e417945ceff6298b6316dfd89f213f68accd888076aac
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon-512.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_415258496\CRX_INSTALL\assets\icon-512.png
                                                                                                              • Size 46KB
                                                                                                              • SHA256 2f0ef2b9ecaf5773ec985141a2020497348eb77e71fc852e5823313adddd96ed
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon-64.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5644_415258496\CRX_INSTALL\assets\icon-64.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 69d4bdc94e86a99d29d0d78300b246d08f4957b957cd81d400a2cff2ed815477
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              settings.dat

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                              • Size 40B
                                                                                                              • SHA256 d5afc71087818afa83a97d71b37d7ac53999386ae9aa49b6e3d1a1acaba55df1
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              BookmarkMergedSurfaceOrdering2a3474d7-23d1-4d7c-b749-043311c65478.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering2a3474d7-23d1-4d7c-b749-043311c65478.tmp
                                                                                                              • Size 6B
                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              BookmarksExtras3cbc7b77-2747-4556-a447-cf6bafd3c91b.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras3cbc7b77-2747-4556-a447-cf6bafd3c91b.tmp
                                                                                                              • Size 157KB
                                                                                                              • SHA256 b80929d2f2ab206a3fbbaedeb1b2008d5617c6e251eff652ef8e42032fe96636
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Bookmarkscb8be109-ea34-4ef6-a8dc-be56f00241b4.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarkscb8be109-ea34-4ef6-a8dc-be56f00241b4.tmp
                                                                                                              • Size 28KB
                                                                                                              • SHA256 afedd2cb4f476e99fa3b5e9581af8de79092ab88050af3738f2951b42146532d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              temp-index

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                                                                              • Size 336B
                                                                                                              • SHA256 aeaca59b0c00b04f96482dee791e30faffba8c865cd42f1f77df3c3b7d74d9c8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              temp-index

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\wasm\index-dir\temp-index
                                                                                                              • Size 48B
                                                                                                              • SHA256 766539de3a6b83d9e9d5a00668305a9f583d8a2407e5e2362e35ec7fc14b4313
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              index

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\index
                                                                                                              • Size 256KB
                                                                                                              • SHA256 9230f4070c2857ebbb953429b48a9f2bdcd7c7ef28ff43d8c23811793eeeea1b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                              data_0

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
                                                                                                              • Size 8KB
                                                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                              data_2

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_2
                                                                                                              • Size 8KB
                                                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                              data_3

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_3
                                                                                                              • Size 8KB
                                                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                              EncryptedBookmarks2.bak

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\EncryptedBookmarks2.bak
                                                                                                              • Size 3KB
                                                                                                              • SHA256 a31a4fb94797da1529fe31ac3c584f179eacc76a9b961d0f8061913f734e65f3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              EncryptedBookmarks281e6137d-28bb-40d7-ab67-d5a951a6b957.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\EncryptedBookmarks281e6137d-28bb-40d7-ab67-d5a951a6b957.tmp
                                                                                                              • Size 29KB
                                                                                                              • SHA256 a83144f32c7991967713b87244b955d8f6f51d0c7e7bffd870d5019ae1bae650
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              EncryptedBookmarks2cce28839-a45d-4e26-b1ed-c4792ed95cf2.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\EncryptedBookmarks2cce28839-a45d-4e26-b1ed-c4792ed95cf2.tmp
                                                                                                              • Size 29KB
                                                                                                              • SHA256 89bf79d6669d5f422c5405545ec6d09f90a5f8588b698d90b9b77a477743d1e5
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              MANIFEST-000001

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                              • Size 41B
                                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              manifest.json

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir1380_1914380464\CRX_INSTALL\manifest.json
                                                                                                              • Size 3KB
                                                                                                              • SHA256 e99b64403c6c3cf5804d735084798ed4bdb74f9f34e2fc28dc22d72a28e10bfb
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              service_worker.js

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir1380_1914380464\CRX_INSTALL\service_worker.js
                                                                                                              • Size 1.2MB
                                                                                                              • SHA256 2aed56952b9c7266ac31f5e773dc8fd0f1c1203308a81c883916e325894171f4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              main.js

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.9_0\main.js
                                                                                                              • Size 48KB
                                                                                                              • SHA256 c2d961a8340848930aa0b7141ec03b973639d119756904d35fc8efe1a4cb8ec7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              scraping-method-Dq4mm50p.js

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                                                                                              • Size 6KB
                                                                                                              • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              service-worker.ts-fle0M1Xd.js

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                                                                                              • Size 13KB
                                                                                                              • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              service-worker-loader.js

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                                                                              • Size 49B
                                                                                                              • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              jq.wasm

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jialblogdhkabmefghicaknhginkjbgd\5.2.0_0\jq.wasm
                                                                                                              • Size 2.7MB
                                                                                                              • SHA256 d51e6c9b61382bb2c635f242ccd110f1eafa41791c19a59ae5ee9970284ec20f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              sw.js

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jialblogdhkabmefghicaknhginkjbgd\5.2.0_0\sw.js
                                                                                                              • Size 3.2MB
                                                                                                              • SHA256 33e21e30c5245a62961ba599a29398069a7339f429687d2048af83bff8d172a8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon-32.png

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\keffaafdbbkncgpoonkimdinpffobgoa\1.1.12_0\assets\icon-32.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 92a8f864ce76af0bc1dc7fd186589d464b1f696a35d10bd94fcef5d0db608661
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              _commonjsHelpers.js

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\5.1.3.65_0\chunks\_commonjsHelpers.js
                                                                                                              • Size 236B
                                                                                                              • SHA256 9625379badd4849610dfe6c15453cdf0c0071264c90eef177307fac094d2aa6c
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              format-cashback-reward.js

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\5.1.3.65_0\chunks\format-cashback-reward.js
                                                                                                              • Size 55B
                                                                                                              • SHA256 7e164b939a95c61637b5faa0995715b739215f62b7cab8383cd33d91684053b3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              protocol.js

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\5.1.3.65_0\chunks\protocol.js
                                                                                                              • Size 705B
                                                                                                              • SHA256 1817003df2a0f3b54d30203accc200a0358d12bc893cecc9bac7fda3a58a75bd
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              logo.png

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\5.1.3.65_0\logo.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 dd8f8853289900fe85f91f94632d61794b73939dd02bf87be1131704582f0d46
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              sw.js

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\5.1.3.65_0\sw.js
                                                                                                              • Size 419KB
                                                                                                              • SHA256 6d42980eb367a61c70bfa945c392dc95321a4e79799a1e26221909dfe25959c2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              MANIFEST-000001

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\IndexedDB\chrome-extension_ompjkhnkeoicimmaehlcmgmpghobbjoj_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                              • Size 23B
                                                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              Network Persistent State.backup

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State.backup
                                                                                                              • Size 351B
                                                                                                              • SHA256 93c08f7b99f9e60a3d80ada5cb598fc465841bd3f3cdd3aedb40aee55ade10c3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              Preferences2c105d0e-2de3-4a2b-aa27-c4dc87ba756a.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences2c105d0e-2de3-4a2b-aa27-c4dc87ba756a.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 cbc8c4702fe24450062012be14eef22cae0fa236c78c6fdf4ddff4e980778195
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Preferences3c85571e-59d8-4060-8812-c4d9b23b5e64.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences3c85571e-59d8-4060-8812-c4d9b23b5e64.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 9bc7c0730ec935c959ffdb74c3aeec084db67cbd836d7416c64247b23a8ea4c0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Preferences663ed886-f25d-4a74-b909-f838853e18c6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences663ed886-f25d-4a74-b909-f838853e18c6.tmp
                                                                                                              • Size 10KB
                                                                                                              • SHA256 dcb4e72fb5e76ede5bf9c6e937332be6d232e5218bfd638639a17b9e273cb2f1
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Preferences7b5f340c-3090-4f4c-8159-9e790c60fec6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences7b5f340c-3090-4f4c-8159-9e790c60fec6.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 e0b2113c003c4a9023702b4856478baf14839171daa036da5a3e593e02cb7250
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Preferences89437d11-61a5-48fc-b999-458476943095.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences89437d11-61a5-48fc-b999-458476943095.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 2398d46ad636aae0ba730d92b2289a9b453de7a3374f7ec87265d7db0ee9eb6f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Preferences95557c53-2001-4661-9a77-d309bb2e4d9f.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences95557c53-2001-4661-9a77-d309bb2e4d9f.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 a85907d5d848ac3192e851b5b472b54b9fab5e4aa2dfcf58db4b86018cd896ce
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Secure Preferences.backup

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences.backup
                                                                                                              • Size 82KB
                                                                                                              • SHA256 aefac514cc041cec7871aea2872fe78efec33d861dbb6caac52bd1771da3815e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Secure Preferences3071aa6c-369b-4126-9c3a-286ea8cde5c0.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences3071aa6c-369b-4126-9c3a-286ea8cde5c0.tmp
                                                                                                              • Size 114KB
                                                                                                              • SHA256 59081dc32a6d540975141988b85d06d1d1b3b5fbd57d7420661ccb9932794175
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Secure Preferences822ff6c6-6680-4ea9-8524-c3aeef60ada4.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences822ff6c6-6680-4ea9-8524-c3aeef60ada4.tmp
                                                                                                              • Size 115KB
                                                                                                              • SHA256 f41c9a1a6c897d5b2a989a76e1d62f6fce277a631691b210eaacc99b0cbd89e6
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Secure Preferences878b4f9b-a56a-4746-bec5-4edf48e94d81.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences878b4f9b-a56a-4746-bec5-4edf48e94d81.tmp
                                                                                                              • Size 115KB
                                                                                                              • SHA256 7ab423565dffef5af19f7167938acb68fd52b63c2de5cee83f6f882cf995ef91
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              index

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index
                                                                                                              • Size 24B
                                                                                                              • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              temp-index

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                              • Size 600B
                                                                                                              • SHA256 3d401d9006fa8e67e6b4f451227fd4022abe984237fd16e5454c75c4c6ad5c32
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              temp-index

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                              • Size 120B
                                                                                                              • SHA256 4cdc4189713d820c9904462245c47ab2e748b900c455cca8b28efd90a63349a4
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              the-real-index

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                              • Size 72B
                                                                                                              • SHA256 ab6e69efa9afb1bebb6bf400c25b91c6fa46cbd7028a39c17a6fdbb5f44eb7d8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw
                                                                                                              • Size 445B
                                                                                                              • SHA256 e645e68826a3c7b6163b3dbabf634336733edf928dc0246c7c9aed50788016db
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw122ddc2d-ca95-4dad-b617-3eddb6714c4d.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw122ddc2d-ca95-4dad-b617-3eddb6714c4d.tmp
                                                                                                              • Size 1005B
                                                                                                              • SHA256 2372ba9090a55a314b23935443451a3f263f97f3b1b3dd6f4c252f851943ff7f
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw260bde3a-4ee2-467e-996b-23bace56653e.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw260bde3a-4ee2-467e-996b-23bace56653e.tmp
                                                                                                              • Size 669B
                                                                                                              • SHA256 5826b009bcfef5d55a944dc234b674f3ed51b1f9e43dc4aef979da85a5ef7101
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw5e27b14c-a1c3-4045-aa9e-7f2911e44f3f.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw5e27b14c-a1c3-4045-aa9e-7f2911e44f3f.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 37dfa3d87c2c74383361878e160726271d6f1fddfa7a0660ac09d6b5018bde1b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw61c93b1d-17f1-45e9-a9a6-306b3ab6bcaa.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw61c93b1d-17f1-45e9-a9a6-306b3ab6bcaa.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 d830ca6882b551d624c408e7a50bd006e1ec0ca28613f44e29359ae22ad6f911
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw6e036e89-046a-435c-87d8-1438ff5ba5ee.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw6e036e89-046a-435c-87d8-1438ff5ba5ee.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 61a48c2d8923e1c04525cef0b4acdea6a2b0ca01b893dba9d3d58feb5d8312de
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw76b74772-5a99-4823-a68c-6c132d6696c4.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw76b74772-5a99-4823-a68c-6c132d6696c4.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 e8c3d9b69d01937baf9daaed0c15bf7e8476b083a87ed30b7a5c329f8ff9d4ab
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw7b0a5a43-f238-4410-b71c-ddd0147c5c64.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw7b0a5a43-f238-4410-b71c-ddd0147c5c64.tmp
                                                                                                              • Size 541B
                                                                                                              • SHA256 9efb26e7cc8ef289d06aef0fa49851663a18745eb70d7b71731c90046389ab60
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw860204bf-4e5a-4696-a148-7e1c984edbfb.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw860204bf-4e5a-4696-a148-7e1c984edbfb.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 7f28c159961f14476ca1eca5cebdb0bc6a092ccbe6f4aa995226840c6683985c
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw8826f3ca-0ea9-41d3-b79b-453abb298df6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.raw8826f3ca-0ea9-41d3-b79b-453abb298df6.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 3072f7209ea3b63a68658803d018894839aea010ce3a8e3ec36a784643542794
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.rawc5706eab-5253-4cd4-a85b-97a401d0b4a1.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.rawc5706eab-5253-4cd4-a85b-97a401d0b4a1.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 092e7af5af95a4822910f26a495021dbc35684f9b40f773ba1b90437e76b2930
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.rawd7e6494e-bbe2-4835-bcc5-4d542db7d125.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.rawd7e6494e-bbe2-4835-bcc5-4d542db7d125.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 aef3a4ece17301a240b81546f12b46e70ffa1574040f5cdfc56a7e0e43c441ee
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.rawfaac19e1-926a-434a-bcd9-7d738bdb0ac5.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cdf9fd12-623d-4a69-bbeb-717bc33c5643.rawfaac19e1-926a-434a-bcd9-7d738bdb0ac5.tmp
                                                                                                              • Size 829B
                                                                                                              • SHA256 fdd166bac56651b3413245afe7cbe673f849bc7092ee76f1b88b9fab25bcb80f
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw
                                                                                                              • Size 445B
                                                                                                              • SHA256 70ed7d4e750753824c865f6d38642755ea11688f042cdbd70b99076e3b532527
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw02f7c8df-6675-4cc4-99bb-d874b82d70bf.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw02f7c8df-6675-4cc4-99bb-d874b82d70bf.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 b38a6c252f0e82568866c0410770acc28e92c1309ed23de88d618ba1c913bd6b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw03d3e41d-c134-461e-bef9-e220e2fb2be6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw03d3e41d-c134-461e-bef9-e220e2fb2be6.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 7717b1dd9c15ee98f08e467d049713d87e76e5955a2215d7db7c0d8198b993f2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw04be0470-1b88-4981-a9e7-968e72848b0b.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw04be0470-1b88-4981-a9e7-968e72848b0b.tmp
                                                                                                              • Size 11KB
                                                                                                              • SHA256 6ccfb6386c1841c829d8b3b5a62037bf49d94e512df9abf1c96223f97f725489
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw061a48a3-f2cd-40e6-8506-f03dcee55447.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw061a48a3-f2cd-40e6-8506-f03dcee55447.tmp
                                                                                                              • Size 11KB
                                                                                                              • SHA256 207f27598c5793a65f7420ed6b54f37e05ddab1e0ed6e6b5e85a76ffa569ac78
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw098fc697-2dc5-4c1b-b18d-5b1f2228e522.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw098fc697-2dc5-4c1b-b18d-5b1f2228e522.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 c3f4038f836842ea4725fc91d465a42278f6a3c94342136b8c40215ec4e01c61
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0ac50fd1-43c3-4e73-aba2-6ed466ffabf9.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0ac50fd1-43c3-4e73-aba2-6ed466ffabf9.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 779ba6eadfa0d964a814fb1ce1e0ce4aad2d16c0d4c2cd4d12dcce6520432f43
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0b246192-5b45-42fb-b81e-9ace54bc74b2.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0b246192-5b45-42fb-b81e-9ace54bc74b2.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 3639ef842c48e3833dcd4ca722180177a5c6d5eacf7445290c00881a374b0e04
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0b566f8e-18ca-4bfe-b486-9af9a4816e11.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0b566f8e-18ca-4bfe-b486-9af9a4816e11.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 606e2f590f052840ecde04736b1f3c5f1f44484292e8774658ba0c0cec8a7e47
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0ee5aea9-dff1-4c1d-ab16-6b04f0be9eee.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw0ee5aea9-dff1-4c1d-ab16-6b04f0be9eee.tmp
                                                                                                              • Size 16KB
                                                                                                              • SHA256 07db87965322e6b47c0b9e88d29055b9549eb82c1a2ed82a79d448a47d0db9c9
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw101e42ac-95b7-4155-8286-4b3159defcc5.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw101e42ac-95b7-4155-8286-4b3159defcc5.tmp
                                                                                                              • Size 13KB
                                                                                                              • SHA256 97ddc3b6240faa680bfeea28ce9dc9d56ae6fc1aa6521edfc48be70e0d998eca
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw12f9abec-b0ba-43a0-b94a-73aea45a3d9f.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw12f9abec-b0ba-43a0-b94a-73aea45a3d9f.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 5f9ee414ded5ecc77d814afb0fd06e44995d456917feacf49e45d4d28ccc412b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1a818bf9-d21a-421f-b96b-ea2db31caf6e.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1a818bf9-d21a-421f-b96b-ea2db31caf6e.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 a94c222e5c4ad12f35bf2d8b89abf498607474f1ab561e10c183ea8f1423c20b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1adeed63-caf5-42c4-8a73-d052693d3a8a.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1adeed63-caf5-42c4-8a73-d052693d3a8a.tmp
                                                                                                              • Size 12KB
                                                                                                              • SHA256 d2b1807497605c4b4f772b0edfba5dc6eb93580b787f2454b3dab9723726b4ee
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1ca62e94-e317-43b8-ad3d-e1061878add0.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1ca62e94-e317-43b8-ad3d-e1061878add0.tmp
                                                                                                              • Size 16KB
                                                                                                              • SHA256 7771ad324117adea817a18dc493890e59dd2b99d38033ac62bf8c73fd3135db5
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1d0347fe-6b4b-4af8-a111-c6e1508b6f41.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1d0347fe-6b4b-4af8-a111-c6e1508b6f41.tmp
                                                                                                              • Size 797B
                                                                                                              • SHA256 bcdf8780b0ffb481b937dc2b59ddc72b4d7efa1a17708fe4afa536a2f41407d7
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1d0b9b3e-330d-4165-b417-74588a0aebda.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1d0b9b3e-330d-4165-b417-74588a0aebda.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 292c4454a40252eae66d890d110dc5ddfe903ad8f005a67aafd6cdbbb7e38d44
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1e395605-4c14-4769-b853-e772c82aa023.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw1e395605-4c14-4769-b853-e772c82aa023.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 904235152b3b72bddcdec3c68ff2d98c66a7085672d29480df137db638a734e6
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw251fc7a3-3ecb-44a0-8b9d-eb6ce9ab3c5d.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw251fc7a3-3ecb-44a0-8b9d-eb6ce9ab3c5d.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 a28ecf0ade2f18554a3af30dc983693fcc42d884665b1bc99426008ec2854ac1
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw26657acc-5810-4240-a733-49f5cb312296.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw26657acc-5810-4240-a733-49f5cb312296.tmp
                                                                                                              • Size 11KB
                                                                                                              • SHA256 d503610bcb0c820c454141716012f31ac1182c23373c982f4873079e9099f788
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw26e7a08c-dc17-41e7-a016-d85827a3f662.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw26e7a08c-dc17-41e7-a016-d85827a3f662.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 93e1763ed1607439139b764fc3a58824da7f23fbba7af80005922f15a0d1556c
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw2a881982-60b8-445a-aa9d-209f10453284.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw2a881982-60b8-445a-aa9d-209f10453284.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 da7ca2f3ea15d538d3c96977886a946695fbba5f4019aa43778278be0947b440
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3443015b-6a47-441c-a299-90637efc28d1.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3443015b-6a47-441c-a299-90637efc28d1.tmp
                                                                                                              • Size 12KB
                                                                                                              • SHA256 3dc5619dc4f69b2a5ccfdf251c4d38f7262a566a05ad88baff63824cf39e7aa4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw35368f83-fe7a-4a27-b8d0-6eeddd6a2cf5.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw35368f83-fe7a-4a27-b8d0-6eeddd6a2cf5.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 2bb7c80d8c9103699b7260a9c8c683aa7d348acb58bf2cc8bdcdb5b2040bcb8d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3543e0a6-aeb0-4a85-984d-2be7379b7fca.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3543e0a6-aeb0-4a85-984d-2be7379b7fca.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 796ff50bce95057d5ed5d78133a0af22b4599c526c831d17c39839f00d9d64e4
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3680c054-c06f-4b3d-a581-9f2bd7d39856.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3680c054-c06f-4b3d-a581-9f2bd7d39856.tmp
                                                                                                              • Size 16KB
                                                                                                              • SHA256 2866eb204303a1158484a29760ff97825ed4a8881191d8be551d9a3f2f420331
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw36aed27b-c1f0-4e89-a272-70532f4f3f1b.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw36aed27b-c1f0-4e89-a272-70532f4f3f1b.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 470b4ca7c3d19a42942b17683bc8dc1d86360762ef8808c26f1c7f0cbb95dc21
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw385a72ce-51fa-4503-a0f4-cd4f632d30d6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw385a72ce-51fa-4503-a0f4-cd4f632d30d6.tmp
                                                                                                              • Size 9KB
                                                                                                              • SHA256 0da3f7ed1bd681856af574730d1b0f945cd6f027fdff541e60806a198424b74a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3fcf15fa-a17f-4ef8-9129-714c7ae667e1.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3fcf15fa-a17f-4ef8-9129-714c7ae667e1.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 3ef8b9ec19684e44db8c1018ffe9ced109bbc8830b3796122df86f5933bff284
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3fe1e202-1900-4c7c-8e7d-c1e90cf9c22e.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw3fe1e202-1900-4c7c-8e7d-c1e90cf9c22e.tmp
                                                                                                              • Size 14KB
                                                                                                              • SHA256 87d524ed9139edaafb9f6b811c4859cc9a8d7390b34379e22ba8e2cd7a9f412e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4089d4c8-f695-4d5d-8222-61ebb626ac9c.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4089d4c8-f695-4d5d-8222-61ebb626ac9c.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 166ec0c858fa972eb73cb9daf17bc12638cfd7931c35be93463062782a9126e6
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw497c36f8-1313-471c-85ba-08b91e7a03b0.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw497c36f8-1313-471c-85ba-08b91e7a03b0.tmp
                                                                                                              • Size 12KB
                                                                                                              • SHA256 bc9f6fe728033a11db4e7257d7cb2ceffbb7dde56112e7e575b550482cb4deec
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4c028f9d-b91b-42e4-848a-a24ae7604bcb.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4c028f9d-b91b-42e4-848a-a24ae7604bcb.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 c7fc4dec3679e631ab168350a2c192b9fd5ec64bbd11acd433eb864bac8f3438
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4cc48a8d-8df1-4dd6-8008-31477539386b.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4cc48a8d-8df1-4dd6-8008-31477539386b.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 2a0dff37898ac4f855a0cc7e32c1fc87eadc2074f4b1c3a58604b490ee1aa671
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4fde6ea8-7e92-4fce-aaf5-597f7da84004.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw4fde6ea8-7e92-4fce-aaf5-597f7da84004.tmp
                                                                                                              • Size 16KB
                                                                                                              • SHA256 c407777652613704a6e06a0531a1cabbc7e17f0ed278e2f8ccedd7a59a37ee41
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw50f7b375-efd2-4c47-8f7b-b6d5b944a395.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw50f7b375-efd2-4c47-8f7b-b6d5b944a395.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 dcb9044bfb8584918fe704427ca425a4da5930cd70e92241c9e2d9e99fb54112
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw53ad7847-bbc9-4a84-8ed5-e3a491bb48aa.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw53ad7847-bbc9-4a84-8ed5-e3a491bb48aa.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 a1ff17d55c4dacc0ba4cea5798e44e8203a851f7465f44e6f19f33311169daec
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw5406b9cb-092b-4f9c-aa88-5e950ac6c800.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw5406b9cb-092b-4f9c-aa88-5e950ac6c800.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 8a7932d1b751bd15a5ed2d75a81c6a9cac738bb8598b1e40b8d5a2bc38729e60
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw5562c6eb-b26b-44ff-8c5b-33222592ecf1.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw5562c6eb-b26b-44ff-8c5b-33222592ecf1.tmp
                                                                                                              • Size 541B
                                                                                                              • SHA256 a60f1bb1c592cf2ed1e1bc59d59b9bc9366e376e3015277c0e72a95636bbaebb
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw574912a4-8b47-42a6-9360-2f4cb390f85f.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw574912a4-8b47-42a6-9360-2f4cb390f85f.tmp
                                                                                                              • Size 4KB
                                                                                                              • SHA256 fdf3f95d3401b43847e138c330c485c7a3a04b7f164e170fd9e8307a7c195b2b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw58a27c84-5428-471e-a69d-708d88f4074c.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw58a27c84-5428-471e-a69d-708d88f4074c.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 6f64184677d53b2ad0b136a98930870bb3d93d21353178fc13dbe9e0281f2bf0
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw598b99ff-3d3e-43e8-a310-4eb1a2989cb1.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw598b99ff-3d3e-43e8-a310-4eb1a2989cb1.tmp
                                                                                                              • Size 13KB
                                                                                                              • SHA256 ad467757ae8f4fda9c8286ec757f63bb74f0ecc2c49dc774e6fea4b11517160b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw5e906375-df9f-4380-9722-e886c0c590c8.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw5e906375-df9f-4380-9722-e886c0c590c8.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 8f7ae73b52968a795e40ba8a219dd7f700b865d31471390ca55c4dff127d2222
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw677f1fe3-0a1e-44db-bd19-4d1b751eb80c.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw677f1fe3-0a1e-44db-bd19-4d1b751eb80c.tmp
                                                                                                              • Size 11KB
                                                                                                              • SHA256 2803e53e43ae32a9580fe0341d0151419b98dfb03e6d3b0e05b46b8f7159c526
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw6dce8b75-f803-4901-b9ff-fb5d0b8cd3b6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw6dce8b75-f803-4901-b9ff-fb5d0b8cd3b6.tmp
                                                                                                              • Size 16KB
                                                                                                              • SHA256 014023ebebc23c2655d634b9ca9d3bcfa4f623fac5d28e524726b9c57a33e5d1
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw6f3ee0ea-3f32-4ed9-a467-87732280d4a8.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw6f3ee0ea-3f32-4ed9-a467-87732280d4a8.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 d1c8865c226de0ac20ee233c126a16ddda88770b8c1b33c6c6c617318e4f768c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw6f5cd19f-16ce-438c-a36b-ecdf33c68cd3.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw6f5cd19f-16ce-438c-a36b-ecdf33c68cd3.tmp
                                                                                                              • Size 10KB
                                                                                                              • SHA256 161c063f3367d31d3854aeaa113a5e52a6f47522a1f90ecd382e35fa982dd4e3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw703b037a-7cdd-42a1-bc14-b86b32d98a76.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw703b037a-7cdd-42a1-bc14-b86b32d98a76.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 ede750cc8fc9c8bc23d49fa68ef150046d103b61c8128a04e5cff27e99477964
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw74ce59b3-5372-4ad3-b0b8-fc4f40351c0b.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw74ce59b3-5372-4ad3-b0b8-fc4f40351c0b.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 c5b0dec66b92b166825cb064f1ea433ee6b8e050ad7940dc66623465b27c5d57
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw772538e3-e21f-402c-89e5-7f6bc4d47430.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw772538e3-e21f-402c-89e5-7f6bc4d47430.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 386b02c89d2b23eec79b71eda10fb94e66d477208ad7fb8e39483951cfaf8982
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw77390ab6-0e1c-414c-a21f-9812d43b9539.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw77390ab6-0e1c-414c-a21f-9812d43b9539.tmp
                                                                                                              • Size 10KB
                                                                                                              • SHA256 6a6a954009a0628e850e46468602a0e145e9d96bde5e9345006d400a354403da
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw7b207d6a-c1d2-429f-8865-d341d7d3e4a2.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw7b207d6a-c1d2-429f-8865-d341d7d3e4a2.tmp
                                                                                                              • Size 11KB
                                                                                                              • SHA256 7dfc61acc65061eb43fdde4ff00e92faf5383339ea5a2906d83eaedb09db879a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8012507b-a0a4-463a-b104-933df97210b6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8012507b-a0a4-463a-b104-933df97210b6.tmp
                                                                                                              • Size 16KB
                                                                                                              • SHA256 899f9a52b7acd4456ba9ae26faec9f47f144bea977a622abe007f370898d1c29
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw817bd059-9ce5-4489-b07c-f82cc09cc2d0.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw817bd059-9ce5-4489-b07c-f82cc09cc2d0.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 847c5eacbe28372677dbb9519f033266ca0400e1fc73d2f7ab45c42a4c62c89d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw82266daa-7d48-47f5-b5aa-b8e13fa3e9f1.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw82266daa-7d48-47f5-b5aa-b8e13fa3e9f1.tmp
                                                                                                              • Size 13KB
                                                                                                              • SHA256 d180a90820364d91f21b1bf7c73fd6b519ffccae4fa05da5271bbd40c348dfa3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8540a032-b800-4af3-a90f-e90d050c9eaf.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8540a032-b800-4af3-a90f-e90d050c9eaf.tmp
                                                                                                              • Size 13KB
                                                                                                              • SHA256 4540842db83d58e02d4c6e7660c450b7fffb19dd3c4e152be33fe5c705a38524
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw86554f5e-9647-44b9-a35f-13bb2f055034.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw86554f5e-9647-44b9-a35f-13bb2f055034.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 1f39a532c8fd4f35d9723b48423f1b162d3db7838ff42f1a8c18f6bd5538772c
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw86ee9547-336c-4da4-b2de-8c95fc8da697.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw86ee9547-336c-4da4-b2de-8c95fc8da697.tmp
                                                                                                              • Size 13KB
                                                                                                              • SHA256 406b55517afac128c689306015f705e422ba0cd9b61d2ff8826055cf3ee683f1
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw878d4a85-51bd-4961-951c-ec9577c26be6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw878d4a85-51bd-4961-951c-ec9577c26be6.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 c873d80882cc4ef4e67e29741e3fbb08ffc85cad988e1f7dfc5687b4982a7e51
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw889c54e3-169a-48b6-8c75-6c0fd2b5459d.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw889c54e3-169a-48b6-8c75-6c0fd2b5459d.tmp
                                                                                                              • Size 10KB
                                                                                                              • SHA256 3f3a40b76ea5fff97a8aa29851b717c50578d042943961111a482cfa88f56b24
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8aae5de9-0ea3-41a2-bf54-76056c19203d.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8aae5de9-0ea3-41a2-bf54-76056c19203d.tmp
                                                                                                              • Size 989B
                                                                                                              • SHA256 b3e27eaec4e9980ab55e94813bd437993d48bd49dff557a9112c4a18d1546531
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8ad92eda-2c8e-4b1b-a283-2b58781e30f1.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8ad92eda-2c8e-4b1b-a283-2b58781e30f1.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 b6694419a92e6ca8952fa5d415f105527390613ac903b0306b05496bf73d3123
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8c83901e-8f68-44b3-8929-653cacebc661.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8c83901e-8f68-44b3-8929-653cacebc661.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 086958ed92ba3cb5863cb76056ed2da1700a684a84610e8f98839a790df711b7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8d427811-6293-4da6-8837-347cfe66fc09.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8d427811-6293-4da6-8837-347cfe66fc09.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 69a1cd6a6bc9b1a63dc94a2607173b733f7589ce27d1c729da39fdcee5de77b7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8e51f29c-3d0a-4b49-9d08-407cbda11bc2.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw8e51f29c-3d0a-4b49-9d08-407cbda11bc2.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 000f4b7c0f7e0f8229a99446a8c72ac6b7dc3ab68473c4f1e321343d710a3fcf
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw921b4e37-292b-481a-93ad-438c6a2fadd5.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw921b4e37-292b-481a-93ad-438c6a2fadd5.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 59fe6c4a3e022dc627da17a13672ce3715d7459469e7da015cf3b6afca50f33f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9317f7c7-a0de-4a1a-89c2-74fddfad70cb.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9317f7c7-a0de-4a1a-89c2-74fddfad70cb.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 92eb3e36e17cdbab9317dd3399dc6fa778eb5680d2da5210706d83587353f572
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw955a9c11-dbf1-4d7c-b140-7271c4967559.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw955a9c11-dbf1-4d7c-b140-7271c4967559.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 a33d9cf60573f744ca32d772731d0fe47e4d1a8719694897f22c57da9e74ea24
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw98cdbf82-4ac8-4d95-a110-ab72b25c499b.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw98cdbf82-4ac8-4d95-a110-ab72b25c499b.tmp
                                                                                                              • Size 12KB
                                                                                                              • SHA256 f80981733deb97252c74c61b61d9c8c8377f174ac088c351b51da543b1523968
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9bb28739-6f52-48e3-a505-8cef72e37d49.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9bb28739-6f52-48e3-a505-8cef72e37d49.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 ba94f526f4156a84564359bdb83bf5276cc7038a1fcb995ac0f60c85c110dcb0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9bd0b4a1-e843-49aa-baa7-df8e152fe41f.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9bd0b4a1-e843-49aa-baa7-df8e152fe41f.tmp
                                                                                                              • Size 11KB
                                                                                                              • SHA256 a02b5f6379e3416f6ffae8ecc571e1ee9ebc7b82fc257352c14995a3ac1e4a9d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9e567c79-6741-499f-9a66-57772d1f1b85.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9e567c79-6741-499f-9a66-57772d1f1b85.tmp
                                                                                                              • Size 16KB
                                                                                                              • SHA256 0b0d1db4bd481b06f6a9c433407d0f1adeb1602a484a953e5798b9d8ec98c201
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9eef6662-ef1b-4e4a-baa3-5d218749a27e.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raw9eef6662-ef1b-4e4a-baa3-5d218749a27e.tmp
                                                                                                              • Size 12KB
                                                                                                              • SHA256 527da46f66952b89984db41d7daa2bded3a4b6ca5e8743cc34a07c780e5a8726
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa354acb4-b7b0-4ceb-b139-212c4c9718be.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa354acb4-b7b0-4ceb-b139-212c4c9718be.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 d332be157c4b0b62c370f99ae424622a318672d3629c40a5f88e305344c616e8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa5214b87-3d7d-40bb-897a-eab5a9bbd007.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa5214b87-3d7d-40bb-897a-eab5a9bbd007.tmp
                                                                                                              • Size 685B
                                                                                                              • SHA256 8ed6d6ded23e237a0a8561131cc66d031819809ff5901e4168311be2654cb108
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa5f8be78-68ff-41e1-a6f6-38d9f45869ac.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa5f8be78-68ff-41e1-a6f6-38d9f45869ac.tmp
                                                                                                              • Size 14KB
                                                                                                              • SHA256 630d107de3b900a6ed8d216c9be80d1987474024258a21867fccedb2997cc2e3
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa840793a-423b-42e1-9518-03859bd839a8.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawa840793a-423b-42e1-9518-03859bd839a8.tmp
                                                                                                              • Size 14KB
                                                                                                              • SHA256 c44628e38629a00c96d01a7061a7f8349a5a3612b085380761dcc75d476c59e9
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawaf36305a-d1bc-445c-911b-25614102ebd7.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawaf36305a-d1bc-445c-911b-25614102ebd7.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 c3682bc918585f0a44de5f9e82ea2d724da7c5b6293d5118bdb4671437ec6e76
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb145c7ef-2abc-422f-91c2-65169eafd5a4.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb145c7ef-2abc-422f-91c2-65169eafd5a4.tmp
                                                                                                              • Size 10KB
                                                                                                              • SHA256 aa27fa6bfbeac21d52867af32e44aec85ef02b8dd578fcf65a93affa172eb983
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb26f517b-0d13-48b3-aac8-8e09ed366ad2.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb26f517b-0d13-48b3-aac8-8e09ed366ad2.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 ecf7dcb795059ce24cc9920ca04d5c960b41eb6bb5af84c4d890acef39b3f6f5
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb26f8d46-a734-46c0-aa1b-2d92a8d48840.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb26f8d46-a734-46c0-aa1b-2d92a8d48840.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 032b41c1bdc3387090205054fdfe5688d6cd00083d7826f1c8808af94067ed9a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb65e89ef-cb05-4bf0-a8b3-37b57de820b6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb65e89ef-cb05-4bf0-a8b3-37b57de820b6.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 a653edb4c6bb1c8b9e0cf75bdb4c500df9d018e4434d04ba5b2827e6dcda76b4
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb67a2eee-2983-4ebd-bed3-c10bdd2fa66b.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb67a2eee-2983-4ebd-bed3-c10bdd2fa66b.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 686fd47929711a211736d963c9ce72f41a126a73a333931c226d053612b73908
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb8e8565e-b7a6-489c-a1ec-b563f45cf186.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawb8e8565e-b7a6-489c-a1ec-b563f45cf186.tmp
                                                                                                              • Size 9KB
                                                                                                              • SHA256 d3b19da793ee995b688a334b4c8ebff6bc0be53feb06fa070bc9ca7caf58406c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawbbbc9268-883c-418d-babe-485ac319122d.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawbbbc9268-883c-418d-babe-485ac319122d.tmp
                                                                                                              • Size 11KB
                                                                                                              • SHA256 583ed6df4052a8d89bc238dd322d3fbe4bc5a72b4c0d2a91e2db9e9c3221c13d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawbbe94dc4-3130-400f-87b0-9b8fc207c4b7.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawbbe94dc4-3130-400f-87b0-9b8fc207c4b7.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 1dfd139df49c42a2bf2f352a3b80e45223d772f848d96233f09c8094fbf4285a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawbd5214c2-f133-4332-85c1-93fd15142900.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawbd5214c2-f133-4332-85c1-93fd15142900.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 ab0183dd4a32d70c89cdc7762b23d21d4c9156f0152a623556901109c8bf88fb
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawc5228ef5-bc2b-4be0-860c-882f83781ce1.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawc5228ef5-bc2b-4be0-860c-882f83781ce1.tmp
                                                                                                              • Size 14KB
                                                                                                              • SHA256 7d0512c328c92b8e5abd307565f2605bac85be4b95433be2446bcfa19535145d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawc6e9ded2-3f8f-47a4-b2c8-98db1338574c.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawc6e9ded2-3f8f-47a4-b2c8-98db1338574c.tmp
                                                                                                              • Size 16KB
                                                                                                              • SHA256 38765fa463a8a09ede785abf98b9ea467f0d5b050dc0ca8644d5e6000240620f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawca7f1366-6b37-40b2-a075-1b065898b026.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawca7f1366-6b37-40b2-a075-1b065898b026.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 c04058fe6a3110c24124b459a9a40610332b169f55335e92c17f755fe9b95001
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawca870c2c-4e62-4178-80c9-2036f52a5851.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawca870c2c-4e62-4178-80c9-2036f52a5851.tmp
                                                                                                              • Size 11KB
                                                                                                              • SHA256 045882313157da8e8ecc86ef9ef6d3bb3886a30fe2133302e52630dd0fcea622
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawd16ef5f0-e4db-419b-afdb-ea0e78550a04.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawd16ef5f0-e4db-419b-afdb-ea0e78550a04.tmp
                                                                                                              • Size 10KB
                                                                                                              • SHA256 f9ff49c3f31aa4aa9cc899878da7e094ea0dad37f3e5ad88fd9daa4753967da8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawd498afda-9768-474e-9a02-37e213399edf.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawd498afda-9768-474e-9a02-37e213399edf.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 c4a03f9091438830d43bfe7eb98cecf1e36ac4994490f14a81c33d22e8cd35df
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawd4f7f4fb-ecb2-4aaf-8d07-bda8512ae575.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawd4f7f4fb-ecb2-4aaf-8d07-bda8512ae575.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 e3defa8cea753f3cd3d2f148544142075b672898cbdb22f7ef386375d324bf5a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawde79e58d-b4bc-4416-99f6-7ad0bd5eb7bb.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawde79e58d-b4bc-4416-99f6-7ad0bd5eb7bb.tmp
                                                                                                              • Size 10KB
                                                                                                              • SHA256 ded49e82c8cd83c0d16e59fa2871865e546bd32ce83094fbc55802c1eb94bc28
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawe2a3fabb-99b5-489f-a38a-4cbcb22703a9.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawe2a3fabb-99b5-489f-a38a-4cbcb22703a9.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 a256d76ee605bc375726e0012254345c04aa3895071d5495943177a59577fd4e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawe8e0adf7-ab0a-472c-ae0a-580c1adbc209.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawe8e0adf7-ab0a-472c-ae0a-580c1adbc209.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 511ba0d2d5010bf198c7b4a87ef339cdbdfa5be52620c2c64e20ea21dc48ab3e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawe9c95f4f-63b0-490f-b1c1-eff40f061fc7.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawe9c95f4f-63b0-490f-b1c1-eff40f061fc7.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 8fc38980230ca0910b0f397e7e9f799338a79bd9de85e14c90aff698cdd9d4f8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawecf851a7-6114-45e1-8adb-e0fffe05b630.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawecf851a7-6114-45e1-8adb-e0fffe05b630.tmp
                                                                                                              • Size 14KB
                                                                                                              • SHA256 7125617a9f838b6358d10dc580d0ee2f6b74d0f7ce4376bd26bfdd3bdad250f7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawee75d1b9-778c-413c-afc4-7b877820dea4.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawee75d1b9-778c-413c-afc4-7b877820dea4.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 8c6a157885cc314b00d32d8649076a5109f6459e9adcbd62f7cad3ce8b8212c0
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawee7df4ee-3ada-4ecd-a270-169a97da3ff4.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawee7df4ee-3ada-4ecd-a270-169a97da3ff4.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 6ab029142e029f580c755c36e2aaf3aaa0564791fc87311e14ede33fe9659c02
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawee98f95c-dba6-4894-bc35-432bf311cde7.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawee98f95c-dba6-4894-bc35-432bf311cde7.tmp
                                                                                                              • Size 17KB
                                                                                                              • SHA256 66049373cdf37cf63d3fe293386d6f5675e01976867bfa4e8822c689c1e9fe81
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raweee1ca28-30dd-477b-afd5-f173099944c5.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.raweee1ca28-30dd-477b-afd5-f173099944c5.tmp
                                                                                                              • Size 18KB
                                                                                                              • SHA256 070def8aeccd4568ba5d82acca53357debf862bb040e76df5551e6cb6bcd0757
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf0393113-c9e7-4c03-bb98-de9738354fdf.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf0393113-c9e7-4c03-bb98-de9738354fdf.tmp
                                                                                                              • Size 4KB
                                                                                                              • SHA256 313ca07604905ac6f1222bf1c2a533f65797e08a5dd39f95d1a0b1e9a7b0befe
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf1703139-1fcf-47c4-b1a1-62a155a9b7c7.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf1703139-1fcf-47c4-b1a1-62a155a9b7c7.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 8a61679e3ff5241ddaeeb50bcf2f6d0cd2c9db8800aa05c8df38014be34eb040
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf32ff6b9-a21a-4733-9ef5-de3f36a5c936.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf32ff6b9-a21a-4733-9ef5-de3f36a5c936.tmp
                                                                                                              • Size 12KB
                                                                                                              • SHA256 7d492bc12c2a437f0c319a44a24da12b39f90ce9fd9024494c49bcabdcdccfa8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf3fdf3e3-00ee-43ec-856f-cee504385094.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf3fdf3e3-00ee-43ec-856f-cee504385094.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 2b346ff93fadc76df82c12a4ab9fbe99452b71f29e1efd4bd9cd1793ce2778b0
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf56f692d-7e4d-4f55-a44b-5c3cdf74c125.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf56f692d-7e4d-4f55-a44b-5c3cdf74c125.tmp
                                                                                                              • Size 13KB
                                                                                                              • SHA256 e2b5dfb1c4f32b7a008cce967789582af353f8177758f97da22448b77f63635c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf5cb7b22-ebd7-452e-acf7-4735b72f34ae.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf5cb7b22-ebd7-452e-acf7-4735b72f34ae.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 7dbaa36a645311ccc0eb343249d367c66d52fd0263b3b10d5d744c808c736ade
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf7e18ca4-a42b-4f04-a26b-a1de416fe7aa.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawf7e18ca4-a42b-4f04-a26b-a1de416fe7aa.tmp
                                                                                                              • Size 10KB
                                                                                                              • SHA256 c8ed1c320978359a2e5155bb6ac155a95a57ef6c1888b3f8d33dc239a810a59e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawfb60bd3e-ccec-4a76-b103-cd3fe7efd058.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawfb60bd3e-ccec-4a76-b103-cd3fe7efd058.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 c4eb11cc0b0f540bd1a6a9eb700ad98b4d5e93bd5e8492a355d59d69cd234035
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawfb858b70-0354-4f16-ab43-1a530fbdca12.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawfb858b70-0354-4f16-ab43-1a530fbdca12.tmp
                                                                                                              • Size 14KB
                                                                                                              • SHA256 4c360a2f2851cb4165879677af9e2589c04322fdc4db5b23a2529f8493d34132
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawfd51922c-e67d-4fc7-b870-fb84f4a8962e.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f37396ea-f694-43cb-899b-c1d3fcfd5e27.rawfd51922c-e67d-4fc7-b870-fb84f4a8962e.tmp
                                                                                                              • Size 11KB
                                                                                                              • SHA256 153895b5c5e81612c0c7a40fd314f57df9667e84246e6e33f7c12828585d3b99
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              CURRENT

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                                                              • Size 16B
                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              rhs.dat

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\rhs.dat
                                                                                                              • Size 113KB
                                                                                                              • SHA256 ebdf6b3ccc257a03b26079648f728456fcb122bc296598f44442298843ec4771
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              ssdfp1380.0.960036475

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1380.0.960036475
                                                                                                              • Size 203B
                                                                                                              • SHA256 6540e9cb565af6a3663093aba7948b47c31ed2f83545d7dd51853ec5c1b55597
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp1380.0.9600364750df182d0-bea3-4dd4-9e52-d241bc735563.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1380.0.9600364750df182d0-bea3-4dd4-9e52-d241bc735563.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 e97c0796be31bf5f06e1954be76d5ecfd42d93291f6f839731963fe87975a5e5
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp1380.0.960036475a2951df1-2670-4af2-b8e9-60fddfcfa2f4.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1380.0.960036475a2951df1-2670-4af2-b8e9-60fddfcfa2f4.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 5233f10de82432872571f609cdbe2a06df5dde9749e512dbae72768ddf98985f
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp1380.0.960036475edaf966c-d727-4943-94e5-9da93492017c.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1380.0.960036475edaf966c-d727-4943-94e5-9da93492017c.tmp
                                                                                                              • Size 265B
                                                                                                              • SHA256 2d6408d50adfb31dfa4e30ae5d6610bd9ec0e9c4c06398c1e46de992752398d2
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.207180028

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028
                                                                                                              • Size 413B
                                                                                                              • SHA256 81057588aa8e87398b5aeb6e2b40790a7ea255323cfe96ee9579c4d5969781c9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.207180028075e2ac7-67df-4412-aa02-2b7effb4c1a9.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028075e2ac7-67df-4412-aa02-2b7effb4c1a9.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 e80861cd3a99c221948494cd952d1cc6f44ef198f26d7f865d508f066fe84eda
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.2071800280a7ce628-09eb-42d9-a615-b0ee788eab35.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800280a7ce628-09eb-42d9-a615-b0ee788eab35.tmp
                                                                                                              • Size 873B
                                                                                                              • SHA256 73b19ee35ee38c9c8080c9f2658291646108800841e72a4c89a036e6dfbf67b3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.20718002825a645d8-24bb-444e-9aca-b1415a5d3241.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002825a645d8-24bb-444e-9aca-b1415a5d3241.tmp
                                                                                                              • Size 782B
                                                                                                              • SHA256 6d66dd1c6aa9ee41266cbdc3e848544688421f2ad8edbf17d0fce6c4fb07a6ce
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.2071800282f8f5a32-57fd-4705-ad45-b0250bc4cba9.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800282f8f5a32-57fd-4705-ad45-b0250bc4cba9.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 6d18079dca95d72151df61d0dba29fae96171d439ba151a596b4129f5fb20107
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.207180028312680b4-eb5f-4265-a09e-0d86d2906611.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028312680b4-eb5f-4265-a09e-0d86d2906611.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 7e9bb780a1f02d5aac83b1912dc2958f0748ab3ebf8e2b09d927da2af46ac2f2
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.20718002836949e5f-3878-4bd2-8805-cb60664dde62.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002836949e5f-3878-4bd2-8805-cb60664dde62.tmp
                                                                                                              • Size 511B
                                                                                                              • SHA256 191e6f9185efe5f33f5e04acb34d71b56009d0fd2b60a0df544669d5c716b9f8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.2071800285d2fb1f4-7207-4a46-86ac-c31714035e98.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800285d2fb1f4-7207-4a46-86ac-c31714035e98.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 5cbd1e4d2d8efa25854fc234819255c0a58b3edb5d0c0fff9ad94b1102d6adf4
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.20718002868ddc544-a83e-4250-b2ec-60ab66911fd3.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002868ddc544-a83e-4250-b2ec-60ab66911fd3.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 7e4c0095c2ae843d6ef4d6ed8a634b82cc0de709802fb90f6750b4ae87699009
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.2071800286b247a6e-48c5-4a49-b94d-a8aebde2f03a.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800286b247a6e-48c5-4a49-b94d-a8aebde2f03a.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 2bce225f82d550238d91aaff10b38dac4d857fa44f25f423b705c7e2cdd78238
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.20718002874e25e88-234a-46cc-b8e6-1315caad4449.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002874e25e88-234a-46cc-b8e6-1315caad4449.tmp
                                                                                                              • Size 965B
                                                                                                              • SHA256 3ae49bf11b85a0473f47e564bc594afd6e61f2094be0af63b9ee548917e83ce7
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.20718002878c3bd31-4c48-4829-8621-7298d84131f2.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002878c3bd31-4c48-4829-8621-7298d84131f2.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 0cc36d1c90928537cdad833c966c169901b701237f26e7a942c4520cde64a461
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.20718002882942c9e-9afa-4907-aee8-0178435a9391.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002882942c9e-9afa-4907-aee8-0178435a9391.tmp
                                                                                                              • Size 688B
                                                                                                              • SHA256 d2fa5af31c84a7c2549da5e28ed6a33360ccb7ec38f26d30426da7d8d9a15f3a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.20718002882c9edcd-25a6-4629-b671-3b5db08ac95b.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.20718002882c9edcd-25a6-4629-b671-3b5db08ac95b.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 8043d6ae0769c439101aca89a229153c0bc91ff4dcd8e107e71cef0e71b1b38e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.2071800288829fb16-9ab7-406c-92f2-a0a0ded6509a.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800288829fb16-9ab7-406c-92f2-a0a0ded6509a.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 57d0070bc14e8ee709e5817f7ee8b3daf08cdedf1472393f11805e1c889227be
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.2071800288ba0e2b8-10a7-4dc2-b5ff-f49be46d22ff.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800288ba0e2b8-10a7-4dc2-b5ff-f49be46d22ff.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 b152efb243ca13f9f66a3203c9f7a2356c839b30e9bd828dcd6da931afc6e7f6
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.2071800289d2132a6-0174-49e3-ab4a-9318877cf630.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.2071800289d2132a6-0174-49e3-ab4a-9318877cf630.tmp
                                                                                                              • Size 1KB
                                                                                                              • SHA256 bf00de0805067c55f065cf968218099646a1aacc69958e28ab1e61cdf1ea0f66
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.207180028aa06ee23-8083-4178-94f7-3af310d6aef6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028aa06ee23-8083-4178-94f7-3af310d6aef6.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 b53b96a99522dd2c816db86d996b02beb4aa9a089aec2b2d5825ad7aba34bf34
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.207180028b571009e-9352-4453-b39c-40a3a8a0ef09.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028b571009e-9352-4453-b39c-40a3a8a0ef09.tmp
                                                                                                              • Size 2KB
                                                                                                              • SHA256 d2128aa950563743e0316115c8d13a0f7363360f4787c6670b36a9fbdce2f5e2
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.207180028c08d2f20-ab41-4836-964e-c7f3cb3cdd06.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028c08d2f20-ab41-4836-964e-c7f3cb3cdd06.tmp
                                                                                                              • Size 601B
                                                                                                              • SHA256 5488a5327b309aafcf956886099243143158506ad483bb11647abc160c178b51
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.207180028d569ece1-cadd-4d15-933d-3840ac50bac6.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028d569ece1-cadd-4d15-933d-3840ac50bac6.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 8e13dfb0564b9e72cc4706f92b0687058f9bb998f7f2be5e6c3158ad71c1476a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.0.207180028e376f37c-e5bd-477f-99a0-3d97baa1b6f3.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028e376f37c-e5bd-477f-99a0-3d97baa1b6f3.tmp
                                                                                                              • Size 4KB
                                                                                                              • SHA256 de62d3cc92d52254cb807b5edddbeed850ff8fcd8048f0d2dad5bac23a90c5d5
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              ssdfp5644.0.207180028ed7dae87-be0f-4579-9142-78e0dcf953bf.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.0.207180028ed7dae87-be0f-4579-9142-78e0dcf953bf.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 7130d2ec535c216da8a6f07e9fbb4cdbd7c0e4d7689897be7540aac6f93636fc
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.1.285561746

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.1.285561746
                                                                                                              • Size 171B
                                                                                                              • SHA256 a6fc61dbb0f684a8d78787925f20496068d3d2ad26b011cbe55c744ce50065fb
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.1.28556174610182f03-d745-484e-a586-21ae4bd15f65.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.1.28556174610182f03-d745-484e-a586-21ae4bd15f65.tmp
                                                                                                              • Size 200B
                                                                                                              • SHA256 f35d855e4f27088471d78bbe8de1e4f4b29037efeaa14ebb18424761df3a2fb9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.1.28556174613702a6c-0bba-419e-a1be-487ce772e461.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.1.28556174613702a6c-0bba-419e-a1be-487ce772e461.tmp
                                                                                                              • Size 430B
                                                                                                              • SHA256 b0b6477085b7a2e8d441a28c7b68e711205629f1f748b15726bda357d04b2cca
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ssdfp5644.1.285561746b1e6db5c-17f0-4140-b0fc-cdbd9a2b686d.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5644.1.285561746b1e6db5c-17f0-4140-b0fc-cdbd9a2b686d.tmp
                                                                                                              • Size 224B
                                                                                                              • SHA256 096bc6eedb0e87ed4bff8dbc7c3c40e7065067b4c25078476057a0c9658c0969
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              suggestions_cache.json06066a96-3c30-4a15-9ce7-27e12e9b281e.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json06066a96-3c30-4a15-9ce7-27e12e9b281e.tmp
                                                                                                              • Size 662KB
                                                                                                              • SHA256 e2293ddf14a2301784ab39edb1920947906ca693114deaa79074c383f695dd78
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              suggestions_cache.jsone7bd7b41-ac9d-478c-985f-0ab571c8b8de.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsone7bd7b41-ac9d-478c-985f-0ab571c8b8de.tmp
                                                                                                              • Size 653KB
                                                                                                              • SHA256 8b0fd03348fe4cf90010d417ea01ed5d0f72970c67c76484c870f3a2c25bdf44
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Local State171d856d-ef94-4355-acd6-dfce8d167b2b.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State171d856d-ef94-4355-acd6-dfce8d167b2b.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 fbb344a56023068cb8789caa1cb5864046712375bd112fce8760fcba81d11e07
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              Local State39ea4b94-36c9-489b-981b-8b4510a4faff.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State39ea4b94-36c9-489b-981b-8b4510a4faff.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 a6076cb575be81f360dd9b64e166bf797540aa44190e97d77f7c5968adab9523
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              Local State5b655907-a260-43e6-a488-b3cf5e71ed20.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State5b655907-a260-43e6-a488-b3cf5e71ed20.tmp
                                                                                                              • Size 3KB
                                                                                                              • SHA256 5197b8e77fafe5db9e59b2ad865ffe3ad8e1d4f12d3e8ccc04c6900d2a8528f4
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              Local State67c04ae5-2e3f-479c-a19b-4f6a3c725379.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State67c04ae5-2e3f-479c-a19b-4f6a3c725379.tmp
                                                                                                              • Size 4KB
                                                                                                              • SHA256 19ebd2fd975adae2b4ca53da292d013a3ce134561c8b647bb90fb87add4e04f7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Local Statefb8478c0-ef6d-4f9b-9a24-c843b093e54c.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Statefb8478c0-ef6d-4f9b-9a24-c843b093e54c.tmp
                                                                                                              • Size 6KB
                                                                                                              • SHA256 6004c24812739f58d37192c247d51ce8a92668f0d7f8cdcc8e33db902078ba39
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              VariationsSafeSeedV2ce82a23a-5780-4871-af64-581a9e2e23eb.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSafeSeedV2ce82a23a-5780-4871-af64-581a9e2e23eb.tmp
                                                                                                              • Size 19B
                                                                                                              • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              VariationsSeedV2cc2a79a3-596c-4b4c-a488-93c082d75266.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2cc2a79a3-596c-4b4c-a488-93c082d75266.tmp
                                                                                                              • Size 11B
                                                                                                              • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              clipboard_injection_guard_rules.json

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\clipboard_injection_guard_rules.json
                                                                                                              • Size 7KB
                                                                                                              • SHA256 cadfc443f92476613d67eaf9ed1b81dbb2919820e03e1c8be4e28722a24ec67a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              303d6ec0-57dc-45f1-8dee-7466a6053a6b.tmp

                                                                                                              • Path C:\Users\Admin\Downloads\303d6ec0-57dc-45f1-8dee-7466a6053a6b.tmp
                                                                                                              • Size 15KB
                                                                                                              • SHA256 7658e5f9472ad21e37740e621d0f0a72efb44fea43382303536c3050cbff8308
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              OperaSetup.exe.crdownload

                                                                                                              • Path C:\Users\Admin\Downloads\OperaSetup.exe.crdownload
                                                                                                              • Size 3.3MB
                                                                                                              • SHA256 9eba55cdc3acc9f774f48b0b5e81808fd9c23b0220054ff34a94b0a65040eea0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              OperaSetup.exe:Zone.Identifier

                                                                                                              • Path C:\Users\Admin\Downloads\OperaSetup.exe:Zone.Identifier
                                                                                                              • Size 591B
                                                                                                              • SHA256 d9fbfebb19d45d1903586a88cd558373a9c74a0d24b37fd6d27d93a42f094ad7
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              persona.ini

                                                                                                              • Path C:\Windows\SystemTemp\scoped_dir5644_1000751014\persona.ini
                                                                                                              • Size 203B
                                                                                                              • SHA256 8ab3f6191e24c4ba127f127a377ddd1b822ee2a23c71cda7ef200ffea21cd032
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              wave-light.jpg

                                                                                                              • Path C:\Windows\SystemTemp\scoped_dir5644_1000751014\wave-light.jpg
                                                                                                              • Size 186KB
                                                                                                              • SHA256 27cd55b501cff3492e374b7101b8b674f03c63264ba2c3c2c1aef22b6793714c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              persona.ini

                                                                                                              • Path C:\Windows\SystemTemp\scoped_dir5644_1017014182\persona.ini
                                                                                                              • Size 207B
                                                                                                              • SHA256 4f596d6d8a91d263803f7e50c657775e2c7232b6da702642fb10997817ef31a6
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              wave-dark.jpg

                                                                                                              • Path C:\Windows\SystemTemp\scoped_dir5644_1017014182\wave-dark.jpg
                                                                                                              • Size 117KB
                                                                                                              • SHA256 e7e1ac6562391b443e486f5da83f999bf0caa1e4da7e10748054f011d0006e34
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              memory/1380-4052-0x00000235BB470000-0x00000235BB90C000-memory.dmp

                                                                                                              memory/4860-1012-0x0000018C03D70000-0x0000018C0420C000-memory.dmp

                                                                                                              memory/5184-1015-0x000002806FD40000-0x00000280701DC000-memory.dmp

                                                                                                              memory/5324-1233-0x00000285E64B0000-0x00000285E694C000-memory.dmp

                                                                                                              memory/5548-1351-0x000001EF43DA0000-0x000001EF4423C000-memory.dmp

                                                                                                              memory/5564-4051-0x00000253A8E50000-0x00000253A92EC000-memory.dmp

                                                                                                              memory/5600-3990-0x00000163A30E0000-0x00000163A357C000-memory.dmp

                                                                                                              memory/5668-1335-0x00007FFA26C10000-0x00007FFA26C11000-memory.dmp

                                                                                                              memory/5668-1336-0x00007FFA26B80000-0x00007FFA26B81000-memory.dmp

                                                                                                              memory/6200-1762-0x000001EAEA460000-0x000001EAEA8FC000-memory.dmp

                                                                                                              memory/6764-1574-0x000001D66A800000-0x000001D66AC9C000-memory.dmp

                                                                                                              memory/6884-4050-0x000002107A270000-0x000002107A70C000-memory.dmp

                                                                                                              memory/7944-6431-0x00000283255E0000-0x0000028325864000-memory.dmp