Analysis
- user interaction
yes - max time kernel
899s - max time network
901s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
17/04/2026, 22:25
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://discord.com/app
Resource
win10v2004-20260130-en
General
- Target http://discord.com/app
- Sample260417-2ce24acy6s
Malware Config
Signatures
- Downloads MZ/PE file 2 IoCs
flow pid Process 380 5960 installer.exe 307 4344 msedge.exe - Checks computer location settings 2 TTPs 51 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation opera.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 64 IoCs
pid Process 5360 OperaSetup.exe 5960 installer.exe 5932 installer.exe 5968 installer.exe 2924 installer.exe 4408 installer.exe 5696 Assistant_130.0.5847.41_Setup.exe_sfx.exe 1120 assistant_installer.exe 4268 assistant_installer.exe 3676 installer.exe 4776 installer.exe 5892 assistant_installer.exe 5884 assistant_installer.exe 3524 assistant_installer.exe 2596 assistant_installer.exe 6068 browser_assistant.exe 940 opera.exe 6000 opera.exe 3280 opera_crashreporter.exe 1884 opera_crashreporter.exe 2664 opera.exe 4748 browser_assistant.exe 632 opera_crashreporter.exe 4392 opera.exe 3100 opera_crashreporter.exe 1028 browser_assistant.exe 4168 opera.exe 904 opera_crashreporter.exe 1476 opera.exe 1580 opera_crashreporter.exe 5772 opera.exe 4432 opera_crashreporter.exe 3644 browser_assistant.exe 3384 opera.exe 2368 opera.exe 4104 opera_crashreporter.exe 5296 opera_crashreporter.exe 5688 opera.exe 5812 opera_crashreporter.exe 5132 opera.exe 5344 opera_crashreporter.exe 3828 opera.exe 4984 opera.exe 6240 opera.exe 6804 opera.exe 6892 opera.exe 6904 opera.exe 6460 opera.exe 6528 opera.exe 6548 opera.exe 6620 opera.exe 7076 opera_crashreporter.exe 6596 opera.exe 6368 opera.exe 6416 opera_crashreporter.exe 7332 opera.exe 7344 opera.exe 7472 opera.exe 7692 opera.exe 7728 opera.exe 7764 opera.exe 7812 opera.exe 7520 opera.exe 7528 opera.exe - Loads dropped DLL 64 IoCs
pid Process 1120 assistant_installer.exe 1120 assistant_installer.exe 4268 assistant_installer.exe 4268 assistant_installer.exe 5892 assistant_installer.exe 5892 assistant_installer.exe 5884 assistant_installer.exe 5884 assistant_installer.exe 3524 assistant_installer.exe 3524 assistant_installer.exe 2596 assistant_installer.exe 2596 assistant_installer.exe 6068 browser_assistant.exe 6068 browser_assistant.exe 940 opera.exe 6000 opera.exe 6000 opera.exe 940 opera.exe 2664 opera.exe 2664 opera.exe 4748 browser_assistant.exe 4748 browser_assistant.exe 4392 opera.exe 4392 opera.exe 1028 browser_assistant.exe 1028 browser_assistant.exe 4168 opera.exe 4168 opera.exe 1476 opera.exe 1476 opera.exe 5772 opera.exe 5772 opera.exe 3644 browser_assistant.exe 3644 browser_assistant.exe 3384 opera.exe 3384 opera.exe 2368 opera.exe 2368 opera.exe 5688 opera.exe 5688 opera.exe 5132 opera.exe 5132 opera.exe 3828 opera.exe 3828 opera.exe 4984 opera.exe 4984 opera.exe 3828 opera.exe 3828 opera.exe 3828 opera.exe 6240 opera.exe 6240 opera.exe 3828 opera.exe 3828 opera.exe 3828 opera.exe 6804 opera.exe 6804 opera.exe 6892 opera.exe 6892 opera.exe 6904 opera.exe 6904 opera.exe 6460 opera.exe 6460 opera.exe 6528 opera.exe 6528 opera.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 3 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Browser Assistant = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\assistant\\browser_assistant.exe" assistant_installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe" opera.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Contacts third-party web service commonly abused for C2 1 TTPs 11 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 32 discord.com 591 discord.com 592 discord.com 851 discord.com 8 discord.com 19 discord.com 43 discord.com 49 discord.com 594 discord.com 7 discord.com 20 discord.com - Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_421117455\_platform_specific\win_x64\widevinecdm.dll.sig opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-fr.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-de-1996.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1511361357\crs.pb opera.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_2030394542\_metadata\verified_contents.json msedge.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-eu.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-bn.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-und-ethi.hyb opera.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1118220164\manifest.json msedge.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-mn-cyrl.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-et.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1511361357\ct_config.pb opera.exe File created C:\Program Files\scoped_dir6368_824306167\Local State opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-nl.hyb opera.exe File created C:\Program Files\scoped_dir6000_627547701\persona.ini opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1302446758\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-pt.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-da.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-af.hyb opera.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1034149101\nav_config.json msedge.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1629810452\extraction.js msedge.exe File created C:\Program Files\scoped_dir6368_1911033689\Sessions\Session_13414210615245106 opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-ka.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-bg.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_133343683\safety_tips.pb opera.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1118220164\protocols.json msedge.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_221222058\office_endpoints_list.json msedge.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1629810452\travel-facilitated-booking-bing.js msedge.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1177259670\deny_domains.list msedge.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1178722893\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-or.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-lv.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-gu.hyb opera.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1028344355\keys.json msedge.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1028344355\manifest.json msedge.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1177259670\deny_full_domains.list msedge.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-ru.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-hr.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-de-1901.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1190879734\crl-set opera.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_221222058\smart_switch_list.json msedge.exe File created C:\Program Files\scoped_dir6000_1450646823\opera-one-dark.jpg opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-te.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-sq.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-el.hyb opera.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_221222058\manifest.json msedge.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-lt.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-de-ch-1901.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-as.hyb opera.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1028344355\_metadata\verified_contents.json msedge.exe File created C:\Program Files\scoped_dir6368_824306167\Sessions\Session_13420938439345353 opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-pa.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-sl.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1190879734\LICENSE opera.exe File created C:\Program Files\scoped_dir6368_1506175031\opera-one.jpg opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-cy.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_133343683\manifest.json opera.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping3796_2030394542\LICENSE msedge.exe File created C:\Program Files\scoped_dir6000_627547701\opera-one.jpg opera.exe File created C:\Program Files\scoped_dir6000_1450646823\persona.ini opera.exe File created C:\Program Files\scoped_dir6368_329914115\History opera.exe File created C:\Program Files\scoped_dir6368_329914115\Favicons opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_486575617\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-hu.hyb opera.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 12 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Assistant_130.0.5847.41_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe - System Time Discovery 1 TTPs 3 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4344 msedge.exe 4984 opera.exe 7332 opera.exe - Checks processor information in registry 2 TTPs 7 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe - Enumerates system info in registry 2 TTPs 64 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS browser_assistant.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" assistant_installer.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry msedge.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134209384433738870" msedge.exe - Modifies registry class 64 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\shell\open\ddeexec\Application\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.html\OpenWithProgids\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32 installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455} installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}" opera.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox" msedge.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe" msedge.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage msedge.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\shell installer.exe Set value (data) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots opera.exe Set value (data) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000 opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Applications\opera.exe installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Applications\opera.exe\shell installer.exe Set value (data) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff opera.exe Set value (int) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14" opera.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.xhtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.xhtml installer.exe Set value (data) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000 opera.exe Set value (int) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1" opera.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-312252282-3884318443-358092420-1000\{D579BCF6-158E-48CF-8AA5-CB559D3050A6} opera.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\shell\open\ddeexec\Application installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.pdf\OpenWithProgids\OperaStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\130.0.5847.41\\notification_helper.exe" installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell opera.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.shtml installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\130.0.5847.41\\notification_helper.exe\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU opera.exe Set value (data) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff opera.exe Set value (data) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02 opera.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1 opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads" opera.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902 msedge.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\DefaultIcon installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\shell\open\ddeexec installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.opdownload installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\URL Protocol installer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-312252282-3884318443-358092420-1000\{E473CB68-004D-4616-92CF-5E8883094C0A} msedge.exe Set value (data) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 opera.exe Set value (int) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.xht\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (data) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff opera.exe Set value (int) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1" opera.exe Set value (int) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.opdownload\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Applications installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell opera.exe Set value (data) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff opera.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ opera.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ opera.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\OperaStable\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ msedge.exe Key created \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings opera.exe Set value (data) \REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff opera.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 04000000010000001000000078f2fcaa601f2fb4ebc937ba532e7549030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e41d0000000100000010000000a86dc6a233eb339610f3ed414927c559140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac899880b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e19962000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe - Suspicious behavior: EnumeratesProcesses 7 IoCs
pid Process 4112 msedge.exe 4112 msedge.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 7328 opera.exe 7328 opera.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 62 IoCs
pid Process 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 6000 opera.exe 6000 opera.exe 6000 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 6000 opera.exe Token: SeCreatePagefilePrivilege 6000 opera.exe Token: SeShutdownPrivilege 6000 opera.exe Token: SeCreatePagefilePrivilege 6000 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 8000 opera_gx_splash.exe Token: SeCreatePagefilePrivilege 8000 opera_gx_splash.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe Token: SeShutdownPrivilege 6368 opera.exe Token: SeCreatePagefilePrivilege 6368 opera.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3676 installer.exe 3796 msedge.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3796 msedge.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe 6368 opera.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 5960 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe 3676 installer.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3796 wrote to memory of 1676 3796 msedge.exe 85 PID 3796 wrote to memory of 4344 3796 msedge.exe 86 PID 3796 wrote to memory of 4396 3796 msedge.exe 87 PID 3796 wrote to memory of 3460 3796 msedge.exe 88 PID 3796 wrote to memory of 4396 3796 msedge.exe 87 PID 3796 wrote to memory of 4396 3796 msedge.exe 87 PID 3796 wrote to memory of 3460 3796 msedge.exe 88 PID 3796 wrote to memory of 3904 3796 msedge.exe 89 PID 3796 wrote to memory of 4032 3796 msedge.exe 90 PID 3796 wrote to memory of 3904 3796 msedge.exe 89 PID 3796 wrote to memory of 3904 3796 msedge.exe 89 PID 3796 wrote to memory of 4032 3796 msedge.exe 90 PID 3796 wrote to memory of 4032 3796 msedge.exe 90 PID 3796 wrote to memory of 3684 3796 msedge.exe 92 PID 3796 wrote to memory of 3684 3796 msedge.exe 92 PID 3796 wrote to memory of 3684 3796 msedge.exe 92 PID 3796 wrote to memory of 1076 3796 msedge.exe 93 PID 3796 wrote to memory of 1076 3796 msedge.exe 93 PID 3796 wrote to memory of 1076 3796 msedge.exe 93 PID 3796 wrote to memory of 4292 3796 msedge.exe 109 PID 3796 wrote to memory of 4292 3796 msedge.exe 109 PID 3796 wrote to memory of 4984 3796 msedge.exe 97 PID 3796 wrote to memory of 4984 3796 msedge.exe 97 PID 3796 wrote to memory of 4984 3796 msedge.exe 97 PID 3796 wrote to memory of 3368 3796 msedge.exe 98 PID 3796 wrote to memory of 3368 3796 msedge.exe 98 PID 3796 wrote to memory of 980 3796 msedge.exe 100 PID 3796 wrote to memory of 4896 3796 msedge.exe 101 PID 3796 wrote to memory of 980 3796 msedge.exe 100 PID 3796 wrote to memory of 4896 3796 msedge.exe 101 PID 3796 wrote to memory of 4256 3796 msedge.exe 102 PID 3796 wrote to memory of 2436 3796 msedge.exe 103 PID 3796 wrote to memory of 2436 3796 msedge.exe 103 PID 3796 wrote to memory of 1848 3796 msedge.exe 105 PID 3796 wrote to memory of 4404 3796 msedge.exe 106 PID 3796 wrote to memory of 4404 3796 msedge.exe 106 PID 3796 wrote to memory of 4348 3796 msedge.exe 107 PID 3796 wrote to memory of 4348 3796 msedge.exe 107 PID 3796 wrote to memory of 4492 3796 msedge.exe 108 PID 3796 wrote to memory of 4492 3796 msedge.exe 108 PID 3796 wrote to memory of 4292 3796 msedge.exe 109 PID 3796 wrote to memory of 4292 3796 msedge.exe 109 PID 3796 wrote to memory of 4560 3796 msedge.exe 110 PID 3796 wrote to memory of 4560 3796 msedge.exe 110 PID 3796 wrote to memory of 5720 3796 msedge.exe 119 PID 3796 wrote to memory of 5728 3796 msedge.exe 120 PID 3796 wrote to memory of 5736 3796 msedge.exe 121 PID 3796 wrote to memory of 6024 3796 msedge.exe 123 PID 3796 wrote to memory of 6024 3796 msedge.exe 123 PID 3796 wrote to memory of 1228 3796 msedge.exe 126 PID 3796 wrote to memory of 1228 3796 msedge.exe 126 PID 3796 wrote to memory of 4688 3796 msedge.exe 127 PID 3796 wrote to memory of 4688 3796 msedge.exe 127 PID 3796 wrote to memory of 3528 3796 msedge.exe 128 PID 3796 wrote to memory of 3528 3796 msedge.exe 128 PID 3796 wrote to memory of 4112 3796 msedge.exe 129 PID 3796 wrote to memory of 5812 3796 msedge.exe 130 PID 3796 wrote to memory of 5812 3796 msedge.exe 130 PID 3796 wrote to memory of 3804 3796 msedge.exe 131 PID 3796 wrote to memory of 3804 3796 msedge.exe 131 PID 3796 wrote to memory of 3804 3796 msedge.exe 131 PID 3796 wrote to memory of 4408 3796 msedge.exe 132 PID 3796 wrote to memory of 4408 3796 msedge.exe 132 PID 3796 wrote to memory of 4260 3796 msedge.exe 133 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://discord.com/app1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3796 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbc9bec188,0x7ffbc9bec194,0x7ffbc9bec1a02⤵PID:1676
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,3894024362847701428,3165762187207885171,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:32⤵
- Downloads MZ/PE file
- System Time Discovery
PID:4344
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,16158657470013558166,7235820056956979890,262144 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:22⤵PID:4396
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,1159347728887763738,16585123369033456427,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:82⤵PID:3460
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,17496825435136966389,3660861173936515704,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:12⤵PID:3904
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,3000801434439719196,1323207733831355581,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:12⤵PID:4032
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,7998884456193570428,17042243455397949765,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:12⤵PID:3684
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,6594499574176285022,951991844316084754,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:22⤵PID:1076
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,13948544130486423928,15879735858967465603,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:82⤵PID:4292
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5240,i,13459069049557730792,226684021481478483,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:12⤵PID:4984
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,17920538797962915011,7987802311696568756,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:82⤵PID:3368
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,12585744474912688947,17676647709084434217,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:82⤵PID:980
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,9612169648981180111,3921782716542838753,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:82⤵PID:4896
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,15369611574234483172,6397605368886389074,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:82⤵
- Modifies registry class
PID:4256
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,16464991989607831930,16376911320316991089,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:82⤵PID:2436
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,1902371446630446133,4981601590292761880,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:82⤵PID:3584
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,1902371446630446133,4981601590292761880,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:82⤵PID:1848
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,12059319704325894391,8657777031088501005,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:82⤵PID:4404
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,9168591902403022787,892195791439225489,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:82⤵PID:4348
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,12474280939565016492,13410590696746493476,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:82⤵PID:4492
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,1801268912593965683,8006335707667864423,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:82⤵PID:4292
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,7722598714597517305,1133837919286517702,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:82⤵PID:4560
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,13148431794844043491,7049685090106700010,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:82⤵PID:5720
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3496,i,2551279989931930312,2721132971012185361,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:82⤵PID:5728
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,10658095252507096549,16926547833224031422,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:82⤵PID:5736
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,1394657601390066216,9851246189713740145,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:82⤵PID:6024
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,16950481813479697911,4385625554712874443,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:82⤵PID:1228
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,10734611390605948157,286488164771306672,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:82⤵PID:4688
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,7017100849612806763,9592167988412225515,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:82⤵PID:3528
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4176,i,6791252946759823283,16463963252433657590,262144 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4112
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,6944975651549985724,14665810660178353029,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:82⤵PID:5812
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=3972,i,16150812387787427289,11230087776049666518,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:12⤵PID:3804
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,334130575018100778,4681779512960597990,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:82⤵PID:4408
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=3768,i,13695718985432389479,6248835685489932141,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:12⤵PID:4260
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,6328576692181636128,6946134125328577937,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:82⤵PID:5136
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,12882490178187374615,17596284106725768903,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:82⤵PID:5140
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,4369406532455057783,10674662288868986984,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:82⤵PID:4500
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,1893985791258388180,8097267832643194442,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:82⤵PID:1472
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=5604,i,10502525226342217391,4942199069170824366,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:12⤵PID:5644
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,2911124044372881682,18033142419338055848,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:82⤵PID:1164
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7228,i,14190661097110552221,6545668919455281465,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:12⤵PID:2580
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=7360,i,852849278009801519,16830407704212511233,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:12⤵PID:5532
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7536,i,4314782502457269764,2484235194116260768,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:82⤵PID:4984
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7632,i,16450648413807787793,13707974686013756492,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:12⤵PID:3728
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7864,i,12342342813997580354,10679161224713920535,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=7596 /prefetch:82⤵PID:2192
-
-
C:\Users\Admin\Downloads\OperaSetup.exe"C:\Users\Admin\Downloads\OperaSetup.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5360 -
C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe --server-tracking-blob=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3⤵
- Downloads MZ/PE file
- Executes dropped EXE
- Enumerates connected drives
- Modifies system certificate store
- Suspicious use of SetWindowsHookEx
PID:5960 -
C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff6db74b6d8,0x7ff6db74b6e4,0x7ff6db74b6f04⤵
- Executes dropped EXE
PID:5932
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\installer.exe" --version4⤵
- Executes dropped EXE
PID:5968
-
-
C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=5960 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_20260417233106" --session-guid=db99740f-8181-4bce-a646-e8ea47cf33ac --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=14090000000000004⤵
- Executes dropped EXE
- Enumerates connected drives
PID:2924 -
C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x288,0x28c,0x29c,0x264,0x2a0,0x7ff6db74b6d8,0x7ff6db74b6e4,0x7ff6db74b6f05⤵
- Executes dropped EXE
PID:4408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe" --backend --initial-pid=5960 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061" --session-guid=db99740f-8181-4bce-a646-e8ea47cf33ac --server-tracking-blob="NjQ5NDdiZTQwYTM5NDgyNDMwYjczMmM4ZGM4YzUzNjU0MDJjM2VkNDAxNGUwNTQxZjZiNzYwZjYwYWU3NTQ5ODp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYVNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhIn0sInF1ZXJ5IjoiL29wZXJhL3N0YWJsZS93aW5kb3dzP3V0bV9zb3VyY2U9JTI4ZGlyZWN0JTI5JnV0bV9tZWRpdW09ZG9jJnV0bV9jYW1wYWlnbj0lMjhkaXJlY3QlMjkmaHR0cF9yZWZlcnJlcj1taXNzaW5nJnV0bV9zaXRlPW9wZXJhX2NvbSZ1dG1fbGFzdHBhZ2U9b3BlcmEuY29tJTJGJmRsX3Rva2VuPTE1MjAzNDE4Iiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzc2NDY1MDYzLjA1MzciLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTM5LjAuMC4wIFNhZmFyaS81MzcuMzYgRWRnLzEzOS4wLjAuMCIsInV0bSI6eyJjYW1wYWlnbiI6IihkaXJlY3QpIiwibGFzdHBhZ2UiOiJvcGVyYS5jb20vIiwibWVkaXVtIjoiZG9jIiwic2l0ZSI6Im9wZXJhX2NvbSIsInNvdXJjZSI6IihkaXJlY3QpIn0sInV1aWQiOiIyYjg1Y2YxMS1jZjkzLTQzODEtOTc5Yi1kOGRiYmQyMDVlYTAifQ== " --desktopshortcut=1 --install-subfolder=130.0.5847.415⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3676 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6c214b6d8,0x7ff6c214b6e4,0x7ff6c214b6f06⤵
- Executes dropped EXE
PID:4776
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=06⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
PID:5892 -
C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0x7e4040,0x7e404c,0x7e40587⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5884
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=07⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3524 -
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x1274040,0x127404c,0x12740588⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2596
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"8⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:6068 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
PID:940 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x218,0x1f0,0x1ec,0x250,0x1c0,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f625010⤵
- Executes dropped EXE
PID:1884
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2664 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f625010⤵
- Executes dropped EXE
PID:632
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x66c830,0x66c83c,0x66c8489⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1028 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4168 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x25c,0x260,0x258,0x264,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f625011⤵
- Executes dropped EXE
PID:904
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5772 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f625011⤵
- Executes dropped EXE
PID:4432
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:2368 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x260,0x250,0x264,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f625011⤵
- Executes dropped EXE
PID:5296
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\de932af914ba00303d4a2778a383ac9c831101e2.crx"6⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Program Files directory
- Checks processor information in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
PID:6000 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x25c,0x238,0x234,0x258,0x260,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f62507⤵
- Executes dropped EXE
PID:3280
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,6980611170067924315,7613963493671754566,262144 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1912 /prefetch:27⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3828
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2140,i,14005199721005361527,10646887017531317140,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2152 /prefetch:37⤵
- Executes dropped EXE
- Loads dropped DLL
- System Time Discovery
PID:4984
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2376,i,9094998851689423622,1884602400617057595,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2368 /prefetch:87⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6240
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3568,i,18367838294113041164,15832130297743739130,2097152 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3864 /prefetch:27⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:6804
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4140,i,17110889731543556005,17290194519979209948,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3488 /prefetch:87⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6892
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3348,i,5328471809933988315,8318756117902846803,2097152 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4240 /prefetch:27⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:6904
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4244,i,12412328221703917647,17592517215202976131,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4628 /prefetch:87⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6460
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3360,i,1264197103170418688,16334300240345938305,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4816 /prefetch:87⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:6528
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4988,i,3235254508771027138,10122728068894087497,2097152 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5040 /prefetch:27⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:6548
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5184,i,15879696701201846027,8596063884324507783,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5200 /prefetch:87⤵
- Executes dropped EXE
PID:6596
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized6⤵
- Checks computer location settings
- Executes dropped EXE
- Adds Run key to start application
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:6368 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffb93346230,0x7ffb93346240,0x7ffb933462507⤵
- Executes dropped EXE
PID:6416
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1936,i,5682179934988146965,18152702999787999748,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2072 /prefetch:37⤵
- Executes dropped EXE
- System Time Discovery
PID:7332
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,3436076483671458629,965903417624095949,262144 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2044 /prefetch:27⤵
- Executes dropped EXE
PID:7344
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2384,i,7460625347081260525,15915265683278759119,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2608 /prefetch:87⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7472
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2700,i,5071151323154492240,12165885502538021892,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2916 /prefetch:87⤵
- Executes dropped EXE
PID:7692
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2724,i,12468644929775748558,13968049672096074646,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2932 /prefetch:87⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7728
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3184,i,15533474212747465397,8917684769816374822,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3196 /prefetch:17⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:7764
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2748,i,7703827220429335957,6163620865696536107,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=2972 /prefetch:87⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7812
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2760,i,256182864099366678,2884171943731154980,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=2992 /prefetch:87⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7520
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2736,i,1995221869587018522,17818268302304705836,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=2952 /prefetch:87⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7528
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2784,i,11524102398188721356,12428356159645489632,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3032 /prefetch:87⤵PID:9208
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2772,i,16778675835266754371,7382883657428571618,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3012 /prefetch:87⤵PID:6976
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C967⤵
- Suspicious use of AdjustPrivilegeToken
PID:8000
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4672,i,8932736595794964853,18299079906838996948,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4676 /prefetch:27⤵
- Checks computer location settings
PID:8172
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4832,i,7151517422912675215,7970025285182083166,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4848 /prefetch:17⤵
- Checks computer location settings
PID:6236
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5148,i,222522013789410261,14451321584694362735,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5160 /prefetch:17⤵
- Checks computer location settings
PID:8256
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5292,i,11111211296280163683,17411068252596766534,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5304 /prefetch:17⤵
- Checks computer location settings
PID:8320
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6340,i,16590943758787649918,15378985784264775999,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6336 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6940
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6716,i,2835609818477126500,2795508950844284249,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6880 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7068
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6816,i,16431259955918462603,2917756383728910173,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6900 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7116
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5740,i,3491678648922620270,455204490509780534,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6368 /prefetch:87⤵PID:9164
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7224,i,999317775355942825,14202216968060462827,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7256 /prefetch:87⤵
- Enumerates system info in registry
PID:9180
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7392,i,8497808713741608103,18413801014117874170,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7408 /prefetch:87⤵
- Enumerates system info in registry
PID:6452
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7416,i,5329540861013116815,9140903257012694253,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7548 /prefetch:87⤵
- Enumerates system info in registry
PID:9192
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7556,i,14127896210799143793,14900801313144680967,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7688 /prefetch:87⤵
- Enumerates system info in registry
PID:9200
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7696,i,424516001985011006,4592774657439357381,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7828 /prefetch:87⤵
- Enumerates system info in registry
PID:7088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7396,i,10884774025859271064,7998175074982526962,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8068 /prefetch:87⤵
- Enumerates system info in registry
PID:6808
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8060,i,1599633363652649409,8260157604107996069,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8044 /prefetch:87⤵PID:7084
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8320,i,17831294971867414580,14484393035448160185,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8332 /prefetch:87⤵
- Enumerates system info in registry
PID:6712
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8440,i,8350989025046054643,11225801882765228193,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8452 /prefetch:87⤵
- Enumerates system info in registry
PID:6832
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8460,i,10481318805404990513,4771298706938790271,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8592 /prefetch:87⤵
- Enumerates system info in registry
PID:6336
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8632,i,1512236702305604764,14392363769111189099,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8716 /prefetch:87⤵
- Enumerates system info in registry
PID:6740
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8740,i,18122439310825617456,7961181810031163149,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8760 /prefetch:87⤵
- Enumerates system info in registry
PID:6484
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9004,i,3780441397390943550,5691763323153362877,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9016 /prefetch:87⤵PID:5876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=9192,i,404069721376119005,7188806588416737133,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9052 /prefetch:17⤵
- Checks computer location settings
PID:6060
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9360,i,13636240988738467914,9051644578199669382,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9380 /prefetch:87⤵PID:6448
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9172,i,10880533222526649267,153128423158134073,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9348 /prefetch:87⤵PID:6544
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9532,i,5851058966971796806,6628304016042546523,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9544 /prefetch:87⤵
- Enumerates system info in registry
PID:4144
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9664,i,15636044676513709421,365491803334417392,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9676 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7196
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9860,i,4285249670541945550,5184488339635061769,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9020 /prefetch:87⤵PID:4120
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10188,i,10461486567952987068,12376585146291495330,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9552 /prefetch:87⤵PID:9132
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2816,i,16562180080078696737,8455464739378476880,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=5948 /prefetch:87⤵PID:6632
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10740,i,5039635665615277977,13494295043346921401,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10880 /prefetch:87⤵PID:4216
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10884,i,18426870342923417705,3883756651068854639,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11040 /prefetch:87⤵PID:6768
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe" --fix-taskbar-pins7⤵
- Enumerates system info in registry
PID:8540 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff6c214b6d8,0x7ff6c214b6e4,0x7ff6c214b6f08⤵PID:8428
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3028,i,13718850239602390928,791941900554276531,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11212 /prefetch:87⤵
- Enumerates system info in registry
PID:8036
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3044,i,4897838300367285324,2711479401836451782,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=3000 /prefetch:87⤵PID:8756
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F1617⤵
- Enumerates system info in registry
PID:8928 -
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff7a483c738,0x7ff7a483c744,0x7ff7a483c7508⤵PID:8912
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=11172,i,16806928120397447372,14176864843722967834,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11036 /prefetch:17⤵
- Checks computer location settings
PID:6868
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6576,i,8311500041328640147,2923564374935971229,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=3044 /prefetch:87⤵PID:6216
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6520,i,10806024910529965990,346179138368782464,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=6644 /prefetch:87⤵PID:8104
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=2996,i,5921436016620374574,15932706278898872039,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=3940 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7652
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5720,i,8636169674427638198,12914964157116430404,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3312 /prefetch:87⤵PID:2408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6588,i,5996290666818789457,2051812942896950609,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=3000 /prefetch:87⤵
- Enumerates system info in registry
PID:6936
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10748,i,462381184878767483,13590923570907704323,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=6556 /prefetch:87⤵PID:6960
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3924,i,8010767003946798612,3060395701343593887,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10348 /prefetch:87⤵PID:6208
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10908,i,10227280258070562391,6166620581420479422,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=2676 /prefetch:87⤵PID:7200
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=9700,i,3384237791018324893,6365927813345317389,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=10804 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6336
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10740,i,10054260382054591501,2563669178033050274,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=11016 /prefetch:27⤵
- Checks computer location settings
PID:7704
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8916,i,431255660420842553,9709180202717268384,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8368 /prefetch:17⤵
- Checks computer location settings
PID:8688
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=11100,i,18169467280223193836,9456564534623042018,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=5584 /prefetch:17⤵
- Checks computer location settings
PID:8756
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=2780,i,14891744787993360071,11163130943740190536,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=11116 /prefetch:17⤵
- Checks computer location settings
PID:7456
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=3772,i,1831934071911194817,4150282355344931043,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=5696 /prefetch:17⤵
- Checks computer location settings
PID:4332
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7476,i,1193535511693181209,2786826625919292548,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=7232 /prefetch:17⤵
- Checks computer location settings
- Enumerates system info in registry
PID:8224
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=9224,i,17306731998358194328,5177115101773419251,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=2716 /prefetch:17⤵
- Checks computer location settings
PID:8156
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --enable-quic --message-loop-type-ui --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7540,i,17048284733875807596,9252987749969211732,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8024 /prefetch:87⤵
- Modifies registry class
PID:9024
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=7968,i,324391367903608,12230627338421654262,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3708 /prefetch:17⤵
- Checks computer location settings
- Enumerates system info in registry
PID:9108
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7376,i,8348618308931804128,16318166923634575795,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=7224 /prefetch:87⤵
- Modifies registry class
PID:6992
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=7676,i,1519386756618896714,8692677900865817910,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=3788 /prefetch:17⤵
- Checks computer location settings
PID:8748
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=9552,i,10187338076759490515,5431365801608102341,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=9724 /prefetch:17⤵
- Checks computer location settings
PID:6156
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=5692,i,3723577677626234253,4634457682938356701,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=9604 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:1116
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=3712,i,865449475143043557,17778436253048957836,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=7880 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6440
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=9740,i,3317443409513885513,325429085269002432,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=7428 /prefetch:17⤵
- Checks computer location settings
- Enumerates system info in registry
PID:4804
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=7420,i,17636074516595570913,3018121729492932162,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=7844 /prefetch:17⤵
- Checks computer location settings
PID:7420
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9528,i,16572999480025243583,2126180659196914477,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=3756 /prefetch:87⤵
- Enumerates system info in registry
PID:4472
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=10780,i,9995259337304108948,4971198772722078521,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=9252 /prefetch:17⤵
- Checks computer location settings
PID:1664
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8168,i,5967112348424358217,607717845678388692,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=10796 /prefetch:87⤵PID:5588
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7904,i,7357860798753649540,9952327487079952373,262144 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=6892 /prefetch:87⤵
- Suspicious behavior: EnumeratesProcesses
PID:7328
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=5704,i,6832392350323411378,314188361673663697,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=6884 /prefetch:17⤵
- Checks computer location settings
- Enumerates system info in registry
PID:2876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7972,i,17918042208099435366,13102229810244175454,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=6660 /prefetch:87⤵PID:2188
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=3684,i,16467696048406859064,947828002353637192,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=11116 /prefetch:17⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7880
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7268,i,4969871868781584736,4706906439129715960,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=3760 /prefetch:87⤵
- Enumerates system info in registry
PID:8096
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=11208,i,12027037743662828668,10321700503920498401,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=10884 /prefetch:27⤵
- Checks computer location settings
PID:5016
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9652,i,2883116370219806172,1292762850024591521,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=5580 /prefetch:87⤵PID:6904
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=10804,i,3417761883130368403,1059438331314434938,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=7904 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:4500
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9712,i,13761583603225515583,3493139282339774634,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=11236 /prefetch:87⤵PID:4824
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6640,i,14032240299811793906,12542750156273887456,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=3980 /prefetch:87⤵PID:6528
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=9556,i,14819707447162715991,5187421432673889366,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709069708596055 --mojo-platform-channel-handle=4060 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:1328
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=9728,i,6880085788797629384,12534490672234867104,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709070645637904 --mojo-platform-channel-handle=10948 /prefetch:27⤵
- Checks computer location settings
PID:4156
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=3940,i,6225239058316385710,8929268635240931452,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709071582679753 --mojo-platform-channel-handle=9652 /prefetch:27⤵
- Checks computer location settings
PID:6164
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=7560,i,18425461156038287899,17890776413072660968,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709072519721602 --mojo-platform-channel-handle=5580 /prefetch:17⤵
- Checks computer location settings
PID:5788
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=7828,i,9702706805843769008,5733434504087534285,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709073456763451 --mojo-platform-channel-handle=11116 /prefetch:17⤵
- Checks computer location settings
PID:6324
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3704,i,17736281712858178361,18285700233500521884,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709074393805300 --mojo-platform-channel-handle=10196 /prefetch:87⤵PID:5704
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=6504,i,11846850140340564147,724930774297673109,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709075330847149 --mojo-platform-channel-handle=7904 /prefetch:17⤵
- Checks computer location settings
- Enumerates system info in registry
PID:8768
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3292,i,9954800374462936810,15558431842744841866,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709076267888998 --mojo-platform-channel-handle=6632 /prefetch:87⤵PID:9144
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7828,i,9253808112210078322,215726920758978615,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709077204930847 --mojo-platform-channel-handle=3760 /prefetch:87⤵PID:836
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6632,i,15864522940245161994,4721504474837033287,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709078141972696 --mojo-platform-channel-handle=7944 /prefetch:87⤵
- Enumerates system info in registry
PID:5228
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9572,i,14322523974165475242,11628712869078057855,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709079079014545 --mojo-platform-channel-handle=6356 /prefetch:87⤵
- Enumerates system info in registry
PID:6552
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11164,i,16745321346224830247,15204267174543047147,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709080016056394 --mojo-platform-channel-handle=3000 /prefetch:87⤵PID:7008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=8512,i,5757959139605510544,7423667151547257285,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709080953098243 --mojo-platform-channel-handle=8164 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:8120
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=11116,i,5137871398912389325,11173343846639820124,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709081890140092 --mojo-platform-channel-handle=8620 /prefetch:17⤵
- Checks computer location settings
PID:2476
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=3956,i,8011964140697573898,4234237638831444526,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709082827181941 --mojo-platform-channel-handle=8396 /prefetch:17⤵
- Checks computer location settings
- Enumerates system info in registry
PID:648
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=proxy_resolver.mojom.ProxyResolverFactory --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3780,i,11887720844131625138,15291430374978457839,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709083764223790 --mojo-platform-channel-handle=8680 /prefetch:87⤵PID:6768
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8324,i,11176934975733515258,14192707053461705865,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709084701265639 --mojo-platform-channel-handle=10048 /prefetch:87⤵PID:3988
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11204,i,10062063262830748746,400776337785697390,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709085638307488 --mojo-platform-channel-handle=10060 /prefetch:87⤵
- Enumerates system info in registry
PID:4128
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=11016,i,15112363864537824482,9440975734370476123,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709086575349337 --mojo-platform-channel-handle=10064 /prefetch:17⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7852
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=9924,i,14616755962967510665,14297629507606885859,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709087512391186 --mojo-platform-channel-handle=9976 /prefetch:17⤵
- Checks computer location settings
PID:4792
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=1816,i,8037449376892161994,7532317027898780716,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709088449433035 --mojo-platform-channel-handle=11156 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:8744
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=8360,i,831810528071013427,6430010389391716474,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709089386474884 --mojo-platform-channel-handle=8640 /prefetch:27⤵
- Checks computer location settings
PID:7748
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=7228,i,13052502433247568968,2081743479913663592,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709090323516733 --mojo-platform-channel-handle=7488 /prefetch:27⤵
- Checks computer location settings
PID:5208
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --version7⤵PID:5272
-
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffb93346230,0x7ffb93346240,0x7ffb933462508⤵PID:796
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5696
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe" --version4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1120 -
C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7e4040,0x7e404c,0x7e40585⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4268
-
-
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8160,i,6082320575468017509,10631267595260637197,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=8188 /prefetch:12⤵PID:4540
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8308,i,17781685661460798599,17825813604537997959,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=8324 /prefetch:82⤵PID:5528
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7664,i,12198193553090442758,2311163262065555821,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:82⤵PID:6492
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8380,i,14649144837761847730,5263703687460989856,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=8376 /prefetch:82⤵PID:4868
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:4200
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
PID:4748 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4392 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f62503⤵
- Executes dropped EXE
PID:3100
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1476 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f62503⤵
- Executes dropped EXE
PID:1580
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x66c830,0x66c83c,0x66c8482⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3644 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3384 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f62504⤵
- Executes dropped EXE
PID:4104
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5688 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f62504⤵
- Executes dropped EXE
PID:5812
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5132 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f62504⤵
- Executes dropped EXE
PID:5344
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exeC:\Users\Admin\AppData\Local\Programs\Opera\opera.exe1⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6620 -
C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f62502⤵
- Executes dropped EXE
PID:7076
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC11⤵
- Enumerates system info in registry
PID:8532 -
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x210,0x254,0x27c,0x258,0x280,0x7ff7a483c738,0x7ff7a483c744,0x7ff7a483c7502⤵PID:8488
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version2⤵PID:8328
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:7504
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1028344355\LICENSE
- Size 1KB
- SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
- MD5 ee002cb9e51bb8dfa89640a406a1090a
- SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
- SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
- TLSH T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1028344355\manifest.json
- Size 79B
- SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
- MD5 817fea104100763cd1bf4f15a51bfe94
- SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
- SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
- TLSH T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1034149101\manifest.json
- Size 160B
- SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
- MD5 c3911ceb35539db42e5654bdd60ac956
- SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
- SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
- TLSH T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1118220164\manifest.json
- Size 135B
- SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
- MD5 fbebd68ecaa98928909421f66909c054
- SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
- SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
- TLSH T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1177259670\manifest.json
- Size 177B
- SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
- MD5 2714a51ed8c2a891ad73b7488ab655b9
- SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
- SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
- TLSH T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1629810452\manifest.json
- Size 135B
- SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
- MD5 4055ba4ebd5546fb6306d6a3151a236a
- SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
- SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
- TLSH T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_2030394542\manifest.json
- Size 85B
- SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
- MD5 8ce95626b39ebc2401eee0b34c24fc7c
- SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
- SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
- TLSH T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_221222058\manifest.json
- Size 160B
- SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
- MD5 a24a1941bbb8d90784f5ef76712002f5
- SHA1 5c2b6323c7ed8913b5d0d65a4d21062c96df24eb
- SHA512 fd7dfec3d46b2af0bddb5aaeae79467507e0c29bab814007a39ea61231e76123659f18a453ed3feb25f16652a0c63c33545e2a0d419fafea89f563fca6a07ce2
- TLSH T133C04C23ED18BABA12F587D40971DB43F7F0031B34E169463B39948C5F761B8925175A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_958165396\manifest.json
- Size 43B
- SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
- MD5 af3a9104ca46f35bb5f6123d89c25966
- SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
- SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
- MD5 SHA1 SHA512
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1178722893\manifest.json
- Size 202B
- SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
- MD5 837451b9bf5675593e66a3b58787a0a5
- SHA1 0d8c4631e5308fcc2abe2f1b9ce29921717d2bb1
- SHA512 3a746580453761bd2fd27ff6087193189e51845c8c4282247b0946ab5da91e60c134c1a75e66d271a0455704aa2f861e35f2b54356191704c343f748f47b741d
- TLSH T1ABD012E33D41D4F701985BA86922E10A67B92F0F5C47B41A07925049D4D9EB7347872E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1190879734\manifest.json
- Size 95B
- SHA256 8a13c7bcea9f8d54590aba3d202a653118f823c12a057ce01671581a1a10701e
- MD5 15c1d22344e0b08a31f7edc8449c70ce
- SHA1 8be8552bd777af8e430b6a60bf2bf644ef9f769d
- SHA512 485f92ca0e763c7873edaad2f2eae39a9a884fceec920ff15a6dab3bc03fe27f6deba8a4167c592314cab568f93adbc47d319cf7f5e34e1e415b7f9fd25b58e6
- TLSH T119B012202C00A46715810BB9017293C35F652D1A99352505031274817368636212053C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-as.hyb
- Size 703B
- SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
- MD5 8961fdd3db036dd43002659a4e4a7365
- SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
- SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
- TLSH T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-hi.hyb
- Size 687B
- SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
- MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
- SHA1 d0914fb069469d47a36d339ca70164253fccf022
- SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
- TLSH T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-nb.hyb
- Size 141KB
- SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
- MD5 677edd1a17d50f0bd11783f58725d0e7
- SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
- SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
- SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
- TLSH T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\manifest.json
- Size 82B
- SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
- MD5 2617c38bed67a4190fc499142b6f2867
- SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
- SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
- TLSH T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1302446758\manifest.json
- Size 145B
- SHA256 6cce5ad8d496bc5179fa84af8afc568eeba980d8a75058c6380b64fb42298c28
- MD5 bbc03e9c7c5944e62efc9c660b7bd2b6
- SHA1 83f161e3f49b64553709994b048d9f597cde3dc6
- SHA512 fb80f091468a299b5209acc30edaf2001d081c22c3b30aad422cbe6fea7e5fe36a67a8e000d5dd03a30c60c30391c85fa31f3931e804c351ab0a71e9a978cc0f
- TLSH T156C08C42E9010C6203811AA0011B438A83901C13A8003C04362309242B8DABF21705ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_133343683\manifest.json
- Size 72B
- SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
- MD5 d482d7180f77c5c4a21a7f9a04cb797b
- SHA1 d06ba12c44afa7bfe7d3dc660a5b38ba3e200531
- SHA512 9393f8752a6e1e1f80e30a83c00ba41b8978bbc52e38aea4a03aa8ee4db2dd001b19b79da0ed96822ad5adfcb67bb5d91f9600b7a2f787a98153d9e8c1a3697b
- TLSH T1F8A02230BC008033388C0BB000328383A3B02C022020FE0A0E0B2080228823E20F228C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1511361357\manifest.json
- Size 73B
- SHA256 93cfceb4d7da2118c113d3c3ca3b37d2ddaf8bcf1eb64b65a0f8ac1dc8620880
- MD5 c073d0145fd9075eb048b1060e11f7e1
- SHA1 1b008beacdd11a268ed4d9383715859d4ce44ff8
- SHA512 2496d91b22ec80f53dac52f944aa31df1f1ee1034253e11719615a67e64847a4e7059ae9c6d3152c160eb30a3199980a0e206c12999a8c725360ca27285ee546
- TLSH T1E3A022A0BC08A0333080032C0030C3C383EA3E0B28002C000B233C82238C33B2030B3E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_421117455\manifest.json
- Size 1001B
- SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
- MD5 580786a5ec9eb650dde3e0e75db8588a
- SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
- SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
- TLSH T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_486575617\manifest.json
- Size 94B
- SHA256 95a2b0748baee70740ff2d5da78f98b5a29950562f989591f0b0b5bf13354b85
- MD5 7130a770ae4db8eebc02a87bdee55e4d
- SHA1 c27b743f556ce9e389cc8c33d89e590719d1f506
- SHA512 2efd8fa39992cb928b432c12117a868da26dcb393073a1cae51ea6c93acb28a7be7eb5c37007db0b8eb7e40a2770cf50fbc2728b059adb61694d4c49339bde42
- TLSH T147B01210BC49917318C107541131829347761D01601529038F9F10D036E823D0262608
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
- Size 105KB
- SHA256 bf6c7c1e310b8b7658a6486f9e0ec1988af55c64b0088c5e106c251843317694
- MD5 6bb43aa8140737557979467fe7639310
- SHA1 5d97e47df415ba67e13786711fbced4e9a750018
- SHA512 8fb6570faf81d07a766da4536ff22a42ad13e3b00e64c6a1957397e3e55beaa3c40660967c718a520b4ce2092c1a8ae7388506160f6ae5fbf696f9efa13a4bd8
- SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7K:fwUQC5VwBIiElEd2K57P7K
- TLSH T1F1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
- Size 3KB
- SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
- MD5 1de85fec2dfcc28011a7c2aaab95eb5f
- SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
- SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
- TLSH T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 d084fddc35d62ab10457432373865714cd0577ad9bebe9188135998b9f802bd3
- MD5 ff587c8337b9997eb40f19fb41bffd1a
- SHA1 75e9be1412e32cbe6e960e041e872bbb48ab464e
- SHA512 d50cc729f4f047045aba003643fd356cb1ac85c1d90f9ed992f787f682a862005a91103e9e388ad5cbd4f884c2668a35a0e5a0d011d0684ef2d6bc59a10b1701
- TLSH T15ED08089D5B15C35D1D78CF1154B37067915C577DF42532274633C3C8C435919546283
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 6b65e3f6d57bee85b90392c47f2236ea7ffcfe9cba07ca29930764c7dacc0ea2
- MD5 726476576ad538c648305e214c389ece
- SHA1 03960d925aa07a6736b28a431ddf422fa8bba04d
- SHA512 7b99250e71a507574a7ea1c326ff4f687cffd7e1a0eb1ba5aa847f5b5e0c5d997dbef37ede7c2815a11e03b25f291a4f19173dd0aa9d22472d224e9b1d6349a5
- TLSH T11ED0808995F15C35D5D78CF1154B37067915C577DF42932374633C3C8C435D19546283
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 ecc103220659b15b56c51e9002281cb930975deca8db44af194bf80a64b234af
- MD5 9fed310f4dbdc9a2461971b19f5052c0
- SHA1 115846f0655f86ee9b0df9e6162b98f6759f0431
- SHA512 fa56e883ae91402b4ea0c534c2613509a62d2b9143aa63ac21e6964c2160f26457b4535ce353ca6ca04a2cd6e78c64013c6198649d03713abde28dc1800ee193
- TLSH T19DD02375FDD9D006D33A04B3135353516746C6157F434011F055C40CDC557BEE3C5582
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
- Size 331B
- SHA256 c4b8e8e0b1b8ba0ce3ed54957497a194e9604dcfe42bd9159b774ac683c4d868
- MD5 c67d3d755bc8f12519ba18027055c4d0
- SHA1 e1a433a66e9cdc9502d00996d10060c3e885595e
- SHA512 1dac677c94d561a3e2a5301281d8951ac928005a59617e05918475689cea104627249ab7df3ed80769581b05b319a1652b88f1e706a4d33a70c38553470b8635
- TLSH T173E020895BC5C37FA3407587437C470C47D1360E96DC79C7171485447502B406A95E60
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
- Size 34KB
- SHA256 d27f23c77e9f765ff3b019a8016c04dd8ff4cb4fd2592776283adbe2c3a7f806
- MD5 237b4fec77123003fc35c0992efc1a1d
- SHA1 1c54b71cc9c55929c2d297f963e4fdda1fb35226
- SHA512 3388536be0cc74f5bb77e64723a2908003f382b05614f15165eada4fc25f2d605da6a003d9337b88f9ff16c42e6424a899e52c47954f3df95ed68aaf24b8fa20
- SSDEEP 768:tGKnhTmzHW9mqMmKHGGAzrRubGexo7xh5AmhrF01n:tGKnhaLW9x8GZFuaexo9vrFC
- TLSH T17DF2F14FBC2176ABA6BD6FD005F3015796AA2C86D1A3308DF3EC591C5216920A81FF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
- Size 99KB
- SHA256 281b893e75496de203b9a1950afc4e961317df2028829adcfe570716b3f2fc26
- MD5 066fa25fb8faad3bbb4b495603fa48b5
- SHA1 77a2d254c4fcf4923e6bbe13e57a5e3c0648299b
- SHA512 482031f99e9c31733c73281644292422e3a06c8e360b23d5054e04a0ef0e4bb1cce5bc3a68187f9b56bc3752e68dce1f07f404f11e8d008931726482196b9bbe
- SSDEEP 3072:nXRistX+12oS74RcKkkltibc0+Fe9az0LOH5BgugY8:nX4s8C74RcultibhPE0LO0uJ8
- TLSH T168A31290F5C63AA30D8C36C03DB385772DEA1ED9482C7936D724809B875FA54ADE86B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
- Size 67KB
- SHA256 dbcc398cedeb91d25b5d2ac13748929578cc464e0d7cadd8907a4b32f26f2100
- MD5 62b8a35afbbe8bf4ba6b13f3bf486740
- SHA1 022e8476d9bed94b872ef93a2f0245af913e0faa
- SHA512 f917e7229a723f4142c49feb69b99e3ce27e25d3f22358548ec00b6674e2c2ac7e6ba4879de2fc935873597b9b261d0010066840f77daf2dd78c021f7909f998
- SSDEEP 1536:XhGS06FaarRoxjShigtkq9o4u34YNKNxeVoq3MPuSuMPWs/lNPTLY:XwP6FayoxjShigtlG48F8xeVoU/ShP3M
- TLSH T1BD6302FD9276EACB4C361FE68881DD6831E430B69432E42A3DA19FF873579531CE8044
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
- Size 403KB
- SHA256 4d6e0f5c9257f00e0ce603952459de1a9f87d4537ee4c1160fd9e54359b1ebe3
- MD5 5f9ffdef723292f9bf66f4a461129dec
- SHA1 04d24dc02583cdb3afac45753c6f7f4be8d74ece
- SHA512 5db86069afb163d96987acc01b03597283c85895710bc7d469d83a95c1780bcf23b3bc1f34b654cf4ac69f2a2303fed979c3441a3b6a8299f787584998397bac
- SSDEEP 12288:Cc1b4nlk/PscS4QM4+2EHNDwDC4IkFATU:Cc1b4qffpNHNDV4IkAU
- TLSH T15E94232BED638EE72EDD1AE202DFB4ED0C0436503C2A45846FDDA45DD46D89205AB4EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 6KB
- SHA256 d0c2833e03078b790502559c175061d4d39b07d4ccfd61f16d80ac4b4675bc30
- MD5 a5b2aadd5e02588bd1273c063b034d4d
- SHA1 7afea0e41e78c26cbff61f9d6d9f959fae2378f6
- SHA512 6c00a8cc381e454917c37a2383aa88d18f09fabf92fa61c085dd02f99cb30bd0defa3e943c7d5a6b1a7b7910adb914b4943af9047520814e9573bd7421fee045
- SSDEEP 96:ELMsHK3qN8Je8RmhYQdBm1YvUxqTzIquukxecjfGiG9R4Q:Egf3y8J4hY1iUGzTml7hcT
- TLSH T139E14CE0996DDB94FBD002B63DD3248CB97A135440879F19B1F002FE099EF65E9A08D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 6KB
- SHA256 6ec1689c9b6ad1ea67f30dab4eccf065237f75144c524bb5d534dc53beb65b1d
- MD5 6aa73f0125698514fa12c562874afbd9
- SHA1 d0dd115916728c2d924e6c5c438c07097dd9e8f5
- SHA512 88b29d02533ba2e98cf946ebe45390724396950e95266b8b36d50538e5c4ba860d9ce771170b28dbaf1b58fc11ed47567c005ccab8b56c757e2c128043ffaca5
- SSDEEP 96:LJK3qN8ce8RmUYQd/m1YvUxsIAuukxecjfGiG9z4H:L83y8c4UYbiUCpml7hc6
- TLSH T139E13CE09D6DDA94FBD402BA7DD3249CB97A035440879F19B1F002FE099EF65E8A08D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 10KB
- SHA256 d88964e3710061bdd3026d90604ee3bc69472aab6139b895b099a065682c701f
- MD5 f14b7e6e7fa909b754809228137de33a
- SHA1 499ca44f44c2738b62b5e059f7035c486039ddc4
- SHA512 c52be90ad679000eb415efb8021ed4a04123df8c68c75c6e3fc009d673ba2934d3a8a03285e9162f49bf496e7f6ceb7ae2931966408a443f581ba86729bc7fa8
- SSDEEP 192:PH336u8/QcfdW/EYdPf/4Z0kCcnD8LBf6NAzbdMHsxovoEJgoc9GC3L9IIahx:P3jHdPHkeimzcNWb9Iz
- TLSH T13422A7D1D9ADDA91FBC002F97CC3D898B57D478440938F1AB1F452FE189EBA994609C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58948a.TMP
- Size 3KB
- SHA256 9da46ab9ef603d9266ed510e992421084d544730bd1e8225e118bb6669e16a37
- MD5 671e1257bbb9c9655d61de4439af8c0e
- SHA1 5d27be4f55c5ff987873fb863ed2657faa9a9204
- SHA512 f879566475f2accb46c1b7b4f3c31e28e13207fb43beb4252de1af8e11621df05daeec24c13ad46538c187c5ae170174b2adc87507d34926f62a06e4e2946417
- TLSH T16C713EB0DDBEA8A9E7E000F67EE72495BA7207580047DF15F5F0003F1A81F7568A8517
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
- Size 96B
- SHA256 469cfad8b42bb2dc15214c31ec8e0bffadd5ca3711863db991231d950a22b38b
- MD5 c38545a0854639a28e35b8c9686974e6
- SHA1 ea84ee22bbeed98fdc50525f57653235801ecc97
- SHA512 2fda00032d955f101f6b1ce1e01e45bcc9b29383a33362a8304ddb05f6c2b76d9c83e1fcb64d5037e2a13889113d7b3c68b9d298b6600d9a35feab8d5fe43b39
- TLSH T144B011A0E80CF00BE20A03F0BBC88082323C8E2003A3820200F008EAA8A83A20800222
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
- Size 144B
- SHA256 9f4158a42ca6e7ad49cafe5b8b16a6472e02e8aabd29a792e86345e7b26474cb
- MD5 295cc944904ce28c24e7ca4311f7bd48
- SHA1 b1e990679bb8bdcdcae3fef4036c24d165f345f3
- SHA512 58907ad9c610ff26dd8b29d383af9ce7f3631ee4888afa30e5569398b76df717aac41427cfb39c8c94dab2def9aaf7a2ea3f8cdb28bf4c1f253c4ba773d838ae
- TLSH T1F6C09283DC0DE54AF2264BFC77866560732D8E94A767492618D341FA685C3B4A914123
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
- Size 106KB
- SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
- MD5 25dca813dd764f2197142ef84bc5ce66
- SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
- SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
- SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
- TLSH T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 3KB
- SHA256 58210e2b8c89381d8b6e04590444b0140e2dd246b78bd99a0f8cc14837190c57
- MD5 d372140ecb59d8bca1b93c04d219c959
- SHA1 8c2a8d07f8d08d974e65b2b8a5ab54ed8c1aa0f5
- SHA512 991631b0750b906f7cb733a737bfc60476c6ad94462a3412bd6a6351ac5ce82acb0339ca11bb85e7e6ed2b43ccc34369165a21963b24ceeec5652e791f3997d2
- TLSH T15351ABF3C3E9862DC91156F0AA147E2FCE2D0914532C3D6AC9E4AF5B93E2471F141A4E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 de4322570575280a2d83d54071dfac3983619922e713a96cd011ca64873b7ca9
- MD5 c6457d0f2bd0b9ce1d446ab7d21f0dbb
- SHA1 4e3acb5b382654206cdf242bb6b20245d6d1cf0f
- SHA512 9a493ef0b58314cf1da890aa76673b0aef64e50370c216d425196696b68134a6ea45fda65269c4cf32a317e15707bf55f007dd50e69e18b0854d73baa5a87275
- TLSH T1A151DDF3C3E5862DCA1156F0AB147E1FCE2D0914532C3D5AC9E4AF1B93E2471E141A4E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 6KB
- SHA256 123f5adda02b64355eb3457183f544b356c4ade37b6f4c6750b8be160fbe36d7
- MD5 9c5697bf44e47c6bf1a25f956e79a354
- SHA1 ef66e4bbdd274a7eb59c539bc9d71b96aa321b30
- SHA512 f019fa42d91d096bbb7234beb536d6b5dbb684139dedb1d91c6dc4db6fdc532b41246f509a810191e9ea726bd8eb3fe6e32dbd47d7e82094b57efa84dbcb11f3
- SSDEEP 192:DE3+XHHr0w3EcqaAMdV5VfrmjONirbqfJCkj6Xyx:DE3+XHHr0w3EcqaAMdV5VfrmjOorbqf5
- TLSH T166D19CF3C3E8862DD91156F5AA183E1BCE2D096843183D2AC9D59F4F97E2471F181A8E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 15KB
- SHA256 06c97bf2e3d1c5e0abf11736b5c60097dc823f074346eccd0256989b2effa437
- MD5 9bf38202eb22cc6b248d64f18b62c0f3
- SHA1 82bb8f172c02548e43dadd3adf1e13bc43e503df
- SHA512 2d325a1ddf95dd1b9602ee192a5895152c4cd027aa5fe8dd5e6438ab6babc61a69794b4968d2aeaaa920d5ccbb8fba828649f8d0bce8e8ee5a72bdded65e7b36
- SSDEEP 384:DE3+XHHr0w30AAhC5zGfueQvcCene+ynzefXcqaAMdV5VfrmjOorbqcCkGXTjrtP:TwbW5jD
- TLSH T141727EF7C3E9862DD82255F1AA147F1FCE2D0958831C3D2A89D49F4B97E2471E241B4E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 13KB
- SHA256 4789d64ce28f225a8478ddfcc5fcc5ac6838ab9e4c1e9608b9955bcc262855a2
- MD5 2f5be1fe962185d21d8093d8e5c243ce
- SHA1 aaa9913d487b2f8ab02b8d10b38c94d2b987dd3e
- SHA512 be39c0a314201c560b89a655d563476735e3b93332d5feb892dc4e120fb153af90efa902c13c0d8187144e0ad32658605b1856ff19e83bf3b426272993bdf9dc
- SSDEEP 192:sxZtRvyM//K1Ml8MkJ/flsF+6bGxIdpENHW6+WNzI+/YJ0HuaIg4J:sxZtFMJ/flsF+H6UHbp/vc
- TLSH T1CB52FA126A349A77CCCBD309BA55BF53D6F90572E2900D44AAFC9A0C04E6BDD2207C2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 21KB
- SHA256 5ad6e94951a264aa8c17b02f600e3df01189d859a5ddb6f1fa8e98da0f5faa12
- MD5 4da57382f2feac402249709dd0cbf1da
- SHA1 51adfd139021b298d44885fc6a94836a610cd70e
- SHA512 2d187265e1e7e7616ecd889ba4152c098e342cfa936937ec4ebbcc367eaa4ff427031920f45942f66562d2b612da036da17493d56c7cf4b39c51052e6a615572
- SSDEEP 384:sxZWn/5wqWJ/flsrWviMpbHmFHbJxBpJXG/eQZ/wVuv:sYB3WJ/fqYiMpb0HbJXpOVoa
- TLSH T120A2C79364344D778DEBD32AF516B77BD6B80062DA904E44A6FC9E0C24E6BED3102C57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 14KB
- SHA256 40748d7d1aa5a3db2b03d55a89fa7b1f909bbfea92b725704e3f7cfa9d3bffe4
- MD5 58cbb0bc4098211f3ac89776bd8dc97b
- SHA1 ed4a70bae00d80872e315ab2edeaf54355de6b20
- SHA512 812d87e8d3fd72eef692306814b35fc96817a3ceea1ab8f9316e2f55568d81d2a5401a9fd58fff61f7d8a7a29ad4504bbbb98bd6d679f4e9baab9cb197bb01bd
- SSDEEP 192:sxZtRvyM//K1Ml8UQNkJ/flsPM6bGxIdp+NHW6+WNzYYXYJhW+aIg55J:sxZtFqmJ/flsPMH66HbXXz1
- TLSH T1EA62E8566A345A77CCDBD309BA45BF53D6F50572A2900E44AAFC9B0C10E6BDD2203C2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 18KB
- SHA256 46fce5ff19d3a2bb432746b423c1c3fb0992144c919917b1a2b510e1cf38d238
- MD5 7714fdec02018ff68be72f8137d0afda
- SHA1 d362863b699c72227c043f801d23566ba28ea6bd
- SHA512 0877cb405718d97e24a9de07c82cc8bb78e362c4e540bf6eaf4fb03ddcdaa7c2966f9efce30b29026455da568c8de975927b22a98dc1dba9cbe86128e2cf7264
- SSDEEP 192:sxZQQUn/5RvyM//K1Ml8UQN9J/flsPM6sGkkObk5wdp4HluyMHW6+WNVNmFy/49a:sxZWn/5FqXJ/flsPMubHmFHbhXG/pm1
- TLSH T1A782D75365340D779CDBD32AF906B76BD6F90062DA904E48A6FC8E0C14E6BED2213C1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 35KB
- SHA256 c2898240df850a790aaf43f89c0fb9c23d34a50ada0f90249f61a379ce7b7634
- MD5 d2dff5d70ee26b8a7c018a381b824e11
- SHA1 a38b71bb397e69bd23ff12ca773a50631176ff26
- SHA512 b6698ce205bce20595b2b52b4c2df2380841b0e2430d737e4342fe9dd8f2fcbedd40f4b2270f38f61238dc7eefbdc19a0dc63f2cff62d1394e6ff8c31d200dc0
- SSDEEP 768:UZQv2Q67pLuLneqWve+j+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDcnFLllnWhrro7:UZQv2QSEneqWve+j+u1jaWcnFLfWhYx5
- TLSH T117F20B3B6C0CCB7E4F804E9CEC2A7E8E6DE801CB9698895447FA485C03C66EB55175DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\32bd6690-22d7-4d50-901d-6f07e47d7f4c\index-dir\the-real-index
- Size 72B
- SHA256 cfcd90318c2583fddc2344ff0177c155672e66e6a4a22a707f7a506c00547bbc
- MD5 854c21245b835c55891852bbfc6823ad
- SHA1 4fa5173a58b8f8478cc7086de35ddba2f2d77f7a
- SHA512 2edda2f6c12cc1a0c8fde7d8110d5f0389152f5a986690b31aeb3aa97273211b1233db7027dc3bc978663c543b0a61c83a9f69b29f5a7f945f72ff6cdde3cace
- TLSH T152A0022843C94205C013A2F17A9743466318EA159603171792904854CC546555E4104C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\32bd6690-22d7-4d50-901d-6f07e47d7f4c\index-dir\the-real-index
- Size 72B
- SHA256 e6ceccd3ecfeab345b8bc4622f4171f23e6353bd2c04be8f0d8925150a892adf
- MD5 34aab328108bd541f53f619e260aec9f
- SHA1 f570cedea85c0f244c95a3f8d71a29d4211826a8
- SHA512 6cc3fbac486079995a52b0a2e05e6cfe72569b76f6c266c1ad0430c1bc160d011365fc4c28644bae6c4e1df891ea1b7857a0e5fbbde7786b6b0ef6f94c30f6b9
- TLSH T155A0021013800105C01AD9B12D5363451200CD101516220B50914555CE50B405F450ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8685028-8a71-4316-b2b9-e9c8eb46c656\index-dir\the-real-index
- Size 2KB
- SHA256 928ebb3f67a67b15e0785f6db330e924bd2d835e5c0f18b2835b98787c078e1d
- MD5 3c9d1590ebab6d2d4ebde714ac7fc92c
- SHA1 a48709c17f7cc530a2cade6859983565f30b1a9a
- SHA512 2cdcf4e2fece45e08861e7ed9a875fa675a4be093bc92be4eb519051ef56b2a256db56f871a44b60d59ef0931217568769e693fc1e8ac868a9c1d67df00f4e0b
- TLSH T14851E85CCC4C5F55DAB511B60CB7181137B998CDAFD40A07ADEC59B0B4932390E0A527
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8685028-8a71-4316-b2b9-e9c8eb46c656\index-dir\the-real-index
- Size 1KB
- SHA256 8bf9ac13a3d1ee7015fbe482042111002b6c4d9902a40e64a778983981f25705
- MD5 028f4f7058b7f4ea90d5d655c694aece
- SHA1 6a03af0af5f9a8c86127d1cf886b707e6ee788dd
- SHA512 62b75fe6fefb0ed3b4b32fafa2aadc79d6c717d5b0c75882a35eb4f63816c6c136c606296c9f7e72a068bcb7bbb0fe0854cfdcccc9a25805b70aed510f75f743
- TLSH T1E241865D9CCC8D17DE2941B419F92439337888FF1E85570B6DBC6639AC97AA21D9301C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8685028-8a71-4316-b2b9-e9c8eb46c656\index-dir\the-real-index~RFe5b72ac.TMP
- Size 1KB
- SHA256 ebb60435da40083f76159af74bfa7927045dc027fb502d30bb1cdff5cff1ad82
- MD5 8d93ebd50efd493f04f24cbefe03e668
- SHA1 a2df2094782af01ec13a00bfc8b29f6c12e5d8e2
- SHA512 460f6f91b33e491dd9d9c63125e32dffe929a79e91430b2fff74e458ddcd2f8215dbbd227b2add7e4e36bbce6d44920c61b0150df9b92e0b3a5aec39bbb0835e
- TLSH T19E41B79A5C990E03CC6095B155CE7569333CE8960E41AB0F79FC8A33ACE7BB92D93114
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
- Size 371B
- SHA256 d5cd1cc1c6cad6abc1ab11ef8474cc2da4f37786b49b92378fa230dd0ff4f6e9
- MD5 5a7997d2fd7f93f89c14ce78f458ef1b
- SHA1 c357c0dbb03f5514454c40721f573595db6c2dbc
- SHA512 231f23cfcb83c9b6050022b494496029c59c2cc251732d3d6685d60a945fb8f1f146aa7e5ad21aae9bf63213a8444c0ba4de2065152b97798be6466b09be1fd6
- TLSH T1A0E0D8BB2CA31514EC9F93D5283154A50149B856D955EC4E50AAA1DB14E3250344BC36
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\6ede284f-1785-4bb5-886d-41f8e6909676\index-dir\the-real-index
- Size 72B
- SHA256 53ccf94a18a357a3b4784482c44f6478f2398b8210c360d280f9b4345c8aeb4b
- MD5 425b533a78614df1bbd0c000ddf1baf6
- SHA1 d0c582426f734cc3a4e21403b6a43be62d9e0e2e
- SHA512 9fa8e799e6a06e0bba843603bbeb9e460f51d11fac725b0a26284e16fe2359f5122bb0907e252dab3d84742346ca3a69d2b4b0153772d59ac7926b59fa10cc19
- TLSH T128A0023696488106C2141EB124774271366249164101125251F58049AC58A949596810
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\6ede284f-1785-4bb5-886d-41f8e6909676\index-dir\the-real-index~RFe5adb0f.TMP
- Size 48B
- SHA256 ec59500155cc06add3c2982465c50d24df40fa79f49da5cbb717c529d97705ed
- MD5 fd557f0622c01f7b68c5f970595f4980
- SHA1 9b0cf0fccdc32c90f5d7d7e23382b5529fdf00b9
- SHA512 02267ae643694412f0d29476d8b495d52c58d6a382bfdaff8421fe3e2cf306b21f4e66d6fe3d48ce43a675d7892eb72345a6591bd8018d7eae3eb7835a97e142
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\c56d3546-11fd-4d20-adae-ad6ec5628b5d\index-dir\the-real-index
- Size 72B
- SHA256 462adad1493a70bc5f376e08f2b9e8ebd61540bd18847e7d28a37a2411cd1008
- MD5 72322d1f0ca0665ed4b80efd75fa481e
- SHA1 b52bc8cab1d9f875a4f43b745e652f5e7d2bf7d7
- SHA512 749fb47e78b75b1e1e1595f82b60d593c36c45d83268c71172c1855f4dadfc5ba38c1533fd8b3918791f9e4615497bff014724e06d159294bb0871419a15d187
- TLSH T17FA0022ABD5DD423D0150BF13C61028437246DED39A10B5151A90788CD9E2A05DF5858
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\c56d3546-11fd-4d20-adae-ad6ec5628b5d\index-dir\the-real-index~RFe5b0675.TMP
- Size 48B
- SHA256 6773cd7aa63cad1a44250b7d1997bd786e484cf9b5fc28e141cff934b9b71876
- MD5 8378b34877c431f2a0bf0e6568242dbf
- SHA1 a1038577d6c2c3b68c6966d0a30af8dbfe496644
- SHA512 8b57b53f949cadeb08b97fdbf96fadd6dbde0852d0c891e9a1a40fc87cb418a628d8e4a60dd9fd2f506ce77d5275e0be1a838181694d49a69c63e9809c080b47
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
- Size 229B
- SHA256 c2536d9df9ab75a4ac16a5ef22f9846afbe2f5c51cdf3941a52b1e7f1ee90b5b
- MD5 7ee8f16da711486ea79349c02b736b5a
- SHA1 f60ddb575d0ccdca888b3e35147d970dc53b27e9
- SHA512 3a78bff3357687338cde2d8c624564294646795fff650b02057506b59f5c1a5be19725bc76cac4991ec5f23e8886445432a914d73a7dfa6763c976e20e408c29
- TLSH T127D0975FE0410A80FB7B4B42492270AE4A1C388C0CC9698DA022000AA0E1BC67372F97
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
- Size 233B
- SHA256 20cb175ef963898d35834b2c23737b4997e02f3c1cd97ea2bc0bc7a0647e28bb
- MD5 0b7d0c28f93245c38210107fd566fac2
- SHA1 64e8b8c07213ed9998f556b80c10dcb62c0141b8
- SHA512 fc98161377654cee4a3eb447f27d193222c9098e056675fc22afa65b2d98469241e19cd771955f200a63fb9d0927398a4ef2639ea93537f16b39821eaf1d87ad
- TLSH T1C4D0975FE0420580F73B0B424922709F4A682C88088C688CA003201EB0F1B86F372F83
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
- Size 226B
- SHA256 ff66773aae0037617d202113fbf06ab0d8c0eacc2efe387b5adb38c68dfac5b7
- MD5 9b4f7620763e4e9c7d0870eae84ef0bd
- SHA1 912a16f2c8afeabbc958c242a4f9dada444f23fc
- SHA512 3a41ba7801dfd2c7b4bbbe5af4135b2778d80d7ebf0b7af08985a0a22cb972b2e8e687d2e645a53f398f910324e91a4822c0d3bb8fe794e3b7dbbcd7f1089568
- TLSH T19FD0A75FE0454681F7BF4B42592274AF4A543C88598D688CB416002AA4D1BC673A2E93
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe582650.TMP
- Size 138B
- SHA256 0399b015bf87fd6cbbe25fb2e8ccad04b3ec6bf93840087c746528438a9de54b
- MD5 28d2f6aacf35c7340790050e50634092
- SHA1 a9fc13ca5a300156d68cfd4a4f37d2cb4d3d6ac6
- SHA512 1aa53e6aa2228a4252feb2282aa91e224d798b5b4d0fc228a33b303a75f313630a7017a1a94470871e3f94bb37627bd31bf502539ce2342719def1d470345099
- TLSH T19EC04CABA0440591DB1546514622A55D8B452CCC9C8D888D6517745570B5E137212ED6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 72B
- SHA256 94f86ff1794ad6fdde8ab2f118c532ee2d212a250849fb2fa7c57547c7d2c327
- MD5 98a4de164da5155a836cd27122599867
- SHA1 72124808a48638941795786418b1b4482b0d1d16
- SHA512 261ef6ede252ea9e37268c03d1ab22baaaed328e9f600c7493d7c5702b814ef30c0ccd7ed0ba231347bd97366645ca0358386cf98b9bc81659b812f7fc8b8ea3
- TLSH T16FA0022A85E9E0C6C00002B0A0C14684B294DF544A05235945E4006CAC54340417F408
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5bc938.TMP
- Size 48B
- SHA256 2c53374671d7945552c53f7e7d731611db0d02a8a506164b0d9e02e205114c0a
- MD5 ca3dac612915580cb3f01c1d279bdc80
- SHA1 7798f42fc4a53bfc6f35e313925df1360e5860dc
- SHA512 6e0d2bab71aa1680d74263c1bc599e3d1e9d712405168e2f2be1982fae1a77055e5f21432f56208fee57fd37eb46a66c4dfd29e5ad4091476bc1f568ff765535
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 6KB
- SHA256 f98e29d1cb805c78dea5feba368da5f48773ba6ca44d8f7f224890d4222c76fa
- MD5 c2c45c01071e7374270e5fce5fff535d
- SHA1 dd8649522b163bbf3c11aa5cbd5ab6ad4da013db
- SHA512 62ded4f0b720b6e4b91f8bfc200b6c0e591a24d5de0ec3fa61501d1403ceec688383ca272770bf5e33879cde0fca6b70475ec481eedc55416ffd5ab46444281e
- SSDEEP 96:KkE4Kh6CiUQKVunW16KeQZAAKRu2i2EKbK0:SnbyVtPPv
- TLSH T109E15511717B02B03A7E288E9995B81E43C136633159E46B3BB904A64F27E71EDFC8D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
- Size 22KB
- SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
- MD5 f768bcb451a187c18099961c484eef8b
- SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
- SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
- TLSH T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590853.TMP
- Size 3KB
- SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
- MD5 904e6e94a1d46374c8630cfd86cc729f
- SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
- SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
- TLSH T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
- Size 3KB
- SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
- MD5 94406cdd51b55c0f006cfea05745effb
- SHA1 a15dc50ca0fd54d6f54fbc6e0788f6dcfc876cc9
- SHA512 d4e621f57454fea7049cffc9cc3adfb0d8016360912e6a580f6fe16677e7dd7aa2ee0671cb3c5092a9435708a817f497c3b2cc7aba237d32dbdaae82f10591c3
- TLSH T1F681BE27C5B58E2796F060119750E654F53D43AFA600C6AFB5FC825C2F373ECE88A4A8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 29KB
- SHA256 72255cac37cc70be4065e105e134013cb56569a3126e50dae44ae307f7c2ea2b
- MD5 bbefcacf8942adbe05bf137f9b1b6f3a
- SHA1 241da24c70828fe40bb8c826186decb18b42ebd8
- SHA512 061ae57f773fa726b452411a7405e336ab1a9b77917618899cf442642b965b18847b01ed810aa660a8a1f102aa970e875110788bbdf54d7beb3e6cb49d7e8268
- SSDEEP 384:nTiF4jccCs+Bt0S3cJsNV8TUNTUlIRDTyWf2wRgTxfXpfkm3MHpXU/AatId6MlZv:+FmccQCkwgEAKl2mcHpXabW6+eU
- TLSH T186D2A4F194D7993BD9AE4B97A33E6D469EBCC06776881994BBC40E0CCC821BFC306815
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 d2a5a685d1f649adbfd1d46cadc39d697bca8ba3c5c31a7867efd61b60f785cb
- MD5 0877ae30d89cf2598dec8684363cde78
- SHA1 665ed9ba0adf2799d25257aa3ea263db7f4d1409
- SHA512 a0136c5070140af07fc4061ec85021e66c0ceb671cb2561c9a9151b22bcc50a22c9be4f8baa32e82f2348ec8e1c63e8c96bf3c82a608c0e2718d715e2a8110b6
- SSDEEP 192:ZONk6IT0JZQmiUysFOgibFt1mxmuFuGzVU6:ZONk6B3HOgifkmfyVU6
- TLSH T12A020975B86C687B8EB3AE45F08B3B275FA4116FDA953F84D6D41B1C00C768C2703922
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 18KB
- SHA256 480ebbd7245f1d13c3fbb451f66f5bf5e4a13a10b5011bd35f5654dd000a4f2d
- MD5 e79dd922f52bbfae12582a7396c45539
- SHA1 f055e0ae97b1c5f91594a5c3fac80847b22bfcd2
- SHA512 61a13f6fad66baf752e104b71f0f10e1f738d875c393c9395e76053b93bb8e7718edf22facb8fc3af3ca283f6f6b02fd85647eac4b4cb0623b6a3c7785f84a6f
- SSDEEP 384:nwjccCs+Bt0S3vsNRHPWfXadgDfkm3MUpXU/AatId6MlZrCf3U:OccQPkfe4mcUpXabW6+eU
- TLSH T12A826B7168B86D3B9AB39A25F14B3A1B5FF450BB97802F64EDC94B0C14C759C0307D26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 18KB
- SHA256 1e336fdadd7222beb6cdded7628271420a0ad4617fb23689b429eea6098cc890
- MD5 e2f99e649a054d6895d2e8c986f49de0
- SHA1 34c7ca90a2d41387d34d43649d76a51d28fa1445
- SHA512 808c7baba77b4685f05967f87d0ac9705e5915d2d22da89f4875c823905acbf7d7a8b34ea8d60d689c3176b49c133b72cbda60121cf0e3473b0ebf841910dda0
- SSDEEP 384:ncjccCs+Bt0S3vsNRGPWfXadgDfkm3MUpXU/AatId6MlZrCf3U:accQPpfe4mcUpXabW6+eU
- TLSH T178827B7168B96D3B9AB39A26F14B3A1B5FF450BB97842F64EDC84B0C14C769C0307D26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 29KB
- SHA256 c37247ef8f11a03d72371d1206db8bf72c78a777b91a16a74f0813ae3e85cd58
- MD5 9fefdedf624657a6a29fb3d315093cb5
- SHA1 11d58cfd5ac8831a28eee96db334b844196f5c59
- SHA512 4c52446175bf2005fba351c7e2fad3da07559c9a018b9359085a4728df984e7ad182e63e6b04fb9e6f4f634d59454fea49896561f01fa42b64996fc8cdf39966
- SSDEEP 384:nTiF8jccCs+Bt0S3cdsNV8TUNTUlIRDTyWfkwRgTFfXpfkm3McpXU/AatId6MlZv:+F6ccQykwgEaKp2mccpXabW6+eU
- TLSH T122D2A3F194D7993BD9AE4B97A33E6D469EBCC06776881994BBC40E0CCC861BFC306815
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 37KB
- SHA256 04def8264b7af15239eba0791223a343d4e3fea94bed1c546df1a593ca9d0cab
- MD5 91c022cd9e421515356620687e441926
- SHA1 a3008fb337790639678c410abb610b443f856cb3
- SHA512 16fee1103cd5bd8de687a51e1f18a50b05eb368721a3d2fec3d8a67203fbbcbe4daeb615cd599bb525858586d55040d7c43ece657bde79d8bbfb5d1c68423d58
- SSDEEP 768:+FdccQyrwgEkKM2mcXDESrT5m4e0VXabW6+eU:6ccQyen/XtPzVyWHeU
- TLSH T1AE036EF194D39DBBD49D87C7536EAD0669B8C073B6484998B7E4692CEC8B4BFC306810
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 28KB
- SHA256 3b16ea3209cfb4d640e6ef6e1fa54df891b77d25c74c0c925a4d8c795cf044c0
- MD5 03a16a1eaea401891e26b02c592d551d
- SHA1 6f56a058d0d66d8061aab8176c848ab234477474
- SHA512 c0ce98192e7cced15ac4203397d758b429aa1c14606ca119987243971c1f87cc9748a31997654d4535cc2293594290742258660ba803b7a660480b9aa37b35fe
- SSDEEP 384:nTiFJjccCs+Bt0S3czsNj8TUNTUlIlGPWfXjdgTDfQpfkm3MLpXU/AatId6MlZrz:+FJccQAqwgC2eQ2mcLpXabW6+eU
- TLSH T162D293F194E7993AD9AE4787A33E7E465EBCC0A776845994BB840E0CCC861BFC306811
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 4fe20ee3ee6b8146c1df7f562b863ec4e579167477e5fc99b866bcce7a251947
- MD5 1c1825c3925c6bb1cf89c8365a6ed17b
- SHA1 69838f78f1cfd441064ec524171463d7da7d66f7
- SHA512 856f31f02e3d294f797da881c0165ecd37856a5d7614895365979cbcc7ae8caa627d4644f2bd2a9e95f01784b2e87fe528d3ad188b046d7b3262f2d3f515b36d
- SSDEEP 192:wONM6IT0CQmiUynF/gibFt1mxm3Mdh1DrqmU6:wONM6mK/gifkm3MBpU6
- TLSH T18A120A71A87C686B9EA3AD56F08B3B239FB4216BDB852F94DAD41A1C04C759C1307C33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
- Size 392B
- SHA256 0dbb10c2730723d7d345263c5deb035494ebc60fad1c7fd4973b1db530aba2ca
- MD5 21fe68401ec5a77f19aa597442efa55b
- SHA1 0eae068b7ddd01f187add2812e0011a86b0a14d4
- SHA512 f0688c9a5ac8f60fbcf711abe4ef334e41a770578b1fa5fa368b6fca52f4e7e964f5aa4b05890921a556f84f624c9ed7bd68e1ca32ef0548834dcc553b4e408b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
- Size 392B
- SHA256 51a6e81f7bae95fe44bf2885e39819b714758d3938fa24fd0213a6059ac86677
- MD5 fece6b808718ea687c57a5d91da0e13c
- SHA1 11c657253bc562073d477fb0b76f42f5ba4c4f75
- SHA512 b9983fbe773e21cf59334f49613011ad903c7c0cdc52ee2a03c2b7ffc60b8a7d4c93265b25aee852d2be47995920a5533fdfa17044d2d8a56bdee8dcf2a37c09
- TLSH T14CE00143930000E8C039433000571F204AC3803460B203165F3401892C773193E25B80
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5ac499.TMP
- Size 392B
- SHA256 5441604661b3fbbb0901ace13713371d073193e7c701a186ba91827852aaf240
- MD5 0ca602628f6c2806303826a54de5d447
- SHA1 b7a0186a77eb832c878af224144607ec170fec2a
- SHA512 e367b4062fe0871a8becd802bd41d6764e1f23a4370f502237646bcc59e7371e5a16c31d1a04f249851a48932ec3d177fd358a54209c41b3dea64013669da92d
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
- Size 8KB
- SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
- MD5 d3ebc1cb4b692c6e2d29a4625420fe73
- SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
- SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
- SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
- TLSH T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
- Size 2KB
- SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
- MD5 499d9e568b96e759959dc69635470211
- SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
- SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
- TLSH T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
- Size 372B
- SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
- MD5 2a1939fc3b2926cf2b82fae71c5f6bee
- SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
- SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
- TLSH T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
- Size 252B
- SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
- MD5 551baa462724351873ccd655a8b64ea3
- SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
- SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
- TLSH T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
- Size 492B
- SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
- MD5 bf165c172af1f75083dd4c7e8915ad0e
- SHA1 2eb27e18672fd0a1816ab00d00078a570eb62711
- SHA512 a58ad7ee2e18750242b9c5d53224218bef54ecd50e067170da12510559c455979fb0523044d4c23d5d5a523562165e471f95d939376df623bfdea9228ca25256
- TLSH T181F09ED29D7E36C0D6E50F6ED44B64FC40D89506F05CB579484CEAD8913950B254287E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
- Size 612B
- SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
- MD5 a15cd0a1e68c6b9c3945d3192091dc4a
- SHA1 5162188f19a245162594501e5febb31a7626aeb4
- SHA512 a7ec103cf7c6fa801e1850205c4c06cadf96c21b1fd56db058a2980c472b1ff2f25c69a73f943de8dff815d69217995ad880e85ca7b8ced8cfa1c506315f7368
- TLSH T18DF0ACD29D7E35C2D5AA0F2ED44B25EC54D89606F49CB57A484CEAD4913940F248287E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
- Size 852B
- SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
- MD5 96814d4ed361ec8de1547566e582b0de
- SHA1 f9588e0a74d9790991b254bfb0650af55810f778
- SHA512 bebc0e98c4485bde4609e0a92f0a27ac1e621a63e154f220c2b8c3b11bfb2d4cc2443d6274f6046d42e28b28478f719f28917112090b3cb14fb6adab24770b93
- TLSH T12401C2D25D7D36C2D57E0FAED04B75EC54C4C11AF29C71BA0C58E994523890E244283F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
- Size 132B
- SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
- MD5 f5a3b29f9a977e23d6ca4eb728238f9f
- SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
- SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
- TLSH T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
- Size 732B
- SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
- MD5 0ad641099b286eebf58a290b5bde86c0
- SHA1 922d3e17ccc238f1bf276051af3ad5cdffb20397
- SHA512 8661612608382058967a1f2ef25c7fbee41a3c2c748838346c044a48058ba081e84750e4a0de424903813499876fa7f69beba345d8ebc396340d830f1a7c81e0
- TLSH T1220110D29D7E26C2C1AA0F6ED08B26EC40C8D106F19CB07A0C8CF9D4823880E188283F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 281941612aa73f0216a1b83fb51b3edf3a364594a592089474cc36ce74722653
- MD5 412dd8843b574d718a6cbc92b53738aa
- SHA1 b5a22f908124deb5862331e6d8d8dd619129ad5b
- SHA512 4fc140d1747f248517f3638cce3f8c77385f7e7bec95045470302f0ec29e6bdecb12707aacb46462963158488f296c19a177695acc8f1d3f3414bed4bbc50669
- TLSH T125411C58AAEE0158B3B77E5A9BF6A86E447FB9772F06C45D10110E4F0923B40D8A1B37
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000001
- Size 25KB
- SHA256 a1ff7b3cf1549f9152aee9bf7d475ec69f4a5d844c4054fa53a68102c758100f
- MD5 91f7ad7162e8018b0cf239c70735d664
- SHA1 6b49dd2abdeab38b0ad60aec1609a7a368b7be43
- SHA512 a858860bdf4113877a15f48abb1f831c4a73897ebc64326ad6675010b090716f4a79cce8d419292d39680f0b0664621c4853a07f798d14a2bfc12048f4894fb5
- SSDEEP 384:yHMiCkz2YJJ8mfmVjCAqZEXoCRf9oVY8NeVUX/RjLQRmXXh1skqfn6fItqy1Yeih:Nw2q8mfmd0B4j8sC/RjLsmXrcZih
- TLSH T1D2C2E1A45A37490CF0602FB45A1D89FE80E3EB503FF142A1E6B4ED2DC671E30B4D9A24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000002
- Size 27KB
- SHA256 8073ff708bc0b02ec62325fcc119b7cc6ee9df9a47627167da0d48128781891c
- MD5 c0d25ced7cb5dcf4410e6968f7f7848c
- SHA1 588e199ef0f9c1ce54702140ea9c978bdbebc43c
- SHA512 6861efb3cc71247e94325c9ae0d0c7293c87292ddf59962701889e83eccf555713779f59800f681d885a8dd04fb4a67b53457457230f423c9e97f36241b24c52
- SSDEEP 768:LzrKoUrDcA2ity/zh78YR/DJNwuF9bzy92Qgwxz/l:LfKXfcI4rCYlQujbsgG/l
- TLSH T11BC2E1ED24886953CEAD519C3F4DBCD32F71DC2836419D4A96AD771B03BACCC91491E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000004
- Size 53KB
- SHA256 7debc0074010a8f50ab72a7744a7ffc863ac5d1b88516ee607e26c458355d395
- MD5 8d571642e325a2b269a3560522aa04fa
- SHA1 d51b6833ed3c883270f060d40ecc349d88eb009d
- SHA512 59f6ed7a8aa7500dcad7fcd61a6b1a1795872f62c562975d9b43418d258e380077596a0eaa3eed8ae38655339d27ff933e270bbd30a5b587899a8f9e93237389
- SSDEEP 1536:O+U9PgVaDLQBxfLAWQilibditGKcNJQFsCzAuq/:ObYVCLQffdtCNJQ7UuY
- TLSH T10E330234E7F9AE3ED2589366825BE07B60E47D180789088B5C905904DEA53B6D31B3FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000005
- Size 23KB
- SHA256 02afb78e6f2c4ff814c067003c9257dec267f75c36a2270a44d26f2d3e30faa2
- MD5 5afccf8a505269f3d522c6f670f12601
- SHA1 a76e6bbbc6b99a9747fb0d169e7bd57134677eed
- SHA512 8a6363c0582afaade50319efddef9396e1aaaa2fac697ab4514b4f6013c938c0e658387b4175cf9728a283e2793c656e83914fbbdeaf146380c1d5a0accb15e2
- SSDEEP 384:wgi1WyEAZql228SWpv49op8JrtPgsyQDZJAFDqa5NlR5FU0HNcCNzoT6te8gDH09:wgi1bPy9op8tWsyQDZmqalR5FhaCN66h
- TLSH T16BB2E1243DD88F93632DA9B019C1E5AEE06296155C18C5809C1F8E90D2CDB56BDF8D6F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000006
- Size 37KB
- SHA256 8db5e427387b47b66202152a4d011dc43ef2b3391935d4aa09596470a2782520
- MD5 b5e77522e79fdcdc73843f67a6fdde6a
- SHA1 7e2829faababe0a4601eec1d69b6439d3ccabb23
- SHA512 d7588af00d551daa9224bb3d59e82b55b04f6ca7ecf0928fee61d460d6a3f94eed7e58248b72f9d3af81e0d14f1df4fe69ad9ef44db8b740bc082e73f3dfdf31
- SSDEEP 768:8sNiBXL0f6ZX3u751la9gDZDoNRR62EXqGxPo0LlsuBjrFpb:HiBXYf5XtZDvBVLlswrFZ
- TLSH T191030130269F1F9ED0E89D440571D2CC4159F3668647AE70625F89DEA3C9D0B8BDD3C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000007
- Size 186KB
- SHA256 4eb93a1109e9c0ad1d12d0ca06df0d004fac692f68515fc914932a642410fc91
- MD5 8c36941dee2730c642ce301e207af112
- SHA1 1f4ab208898f902064457b9ca63974c90144d321
- SHA512 80f144813de5bc0e65bd080b62e1a8143a0fe5d633652caa781400a48c67f9d83af41a2f12b84df16ebf8bf55e60e5dbad3d4a324889d42deb839ec2e83a26ae
- SSDEEP 3072:ly4wFQWFY7bCjqOZHd8C+L1kWDXJY/gSiWLpcT67XRIV+OOUyJowUMR7ISX:Xwuh7bCjfHd84WDXJYlj73hU8pdrX
- TLSH T1F51412D5B1E1E3AA8A4E806EB249CDD65702B58CA14FF9DF47C04C7780C5B97E81A0D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000008
- Size 28KB
- SHA256 71bb0d19ad3f11bb93779b9a23791a9020c9fc39c04c5bd03ef53d8daae50277
- MD5 6eaba6c08ad3c2b1faba1ea68ba4e637
- SHA1 79228c51d1a40bc86c49ad8aebc415891b0226c2
- SHA512 de89bff019e5e329591719626f4964327ae1c82ce76f330cfaf5040e8c852d422dddb0666e22f91d45adc9955fb61ab6d4fcab86d1c1e7979756c9fa2cd1b382
- SSDEEP 768:00tK5IkguZV0CoP20MlK8HVsedpqutvBDW7:PUGkg2g7sH2Cp1tvNe
- TLSH T14AD2E00CB9BE684EED4C4378E8E0E3D99A840477BE7773A9E08504D59ACFA1F490C657
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000009
- Size 23KB
- SHA256 e50bbfa9012881b4393ab4989a200e78647ee3ae3c0d1ff4bb0f80e6b4bb7bd0
- MD5 43881a474ab80ea6f793db5211d28cf1
- SHA1 36b1c5e033d7a5ca884eba834aeef209702c7362
- SHA512 87fa402d97283dcf26506f0e02ebbacf225e4f830fc8400707e8a813f6b75b9da724d91ed6a156378c810a162cc1d9694a1a4203b6bee087f3a65fb307e02433
- SSDEEP 384:MxGjFubchT1de1/bMXB6hBjrz2u2OdMgqX8NuRjUHOAjIiCMA9CXrHaLh2DyE2Hf:gGBme1dyDMR67fzP2OluRjUsiJR2h2DQ
- TLSH T187B2E154FA325C42E67417E34BA5D7CB5AEC8C3166A26E00BA2F003CBF219F04B64E57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00000b
- Size 20KB
- SHA256 96da563de9ce60c319e00e4c43d550d88aeabf3229a2893ab864031796d3332e
- MD5 df3b3632c1f1bd5551c116abe1e68eda
- SHA1 a5f4421bde8ef20ae03ba17a7df783b035ee9026
- SHA512 48f9348cc38c817648db05e0a6c0be6c83526225a48878b4e45dde45cd51a405d92c1f433aa61c4141fc1155a8d0676ab4b69ec65739c77071a578373cf6ce08
- SSDEEP 384:YucVnhcBVvpSeNW/gB8z2i/usOQMjbR+3Vo4gTAFFRMQrjWKDphGrzJwQ5gY:9cVnubxSes/+id24bF/3RDpczJwW
- TLSH T1EF92D18F9FDE4BC5ABA7D25F4E6A05F209B5C56D170A0B99282B9726E0E34200FD2714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00000c
- Size 24KB
- SHA256 91abcf3059785a3f1fc8190c0b2be76c329ac38f6fbb9010808710537b192359
- MD5 add313694b123daad279bafc68c16f2c
- SHA1 f9e5c528a59211c0e8a8c011153a0144a030d5a0
- SHA512 310010318275e9a37e6921c98cb8c71d4912dce7f72ed58bbaa2f90c473259155087cc28ae3c2b2ac394fc37b0b163987566edb0124576c705825bae4284d01d
- SSDEEP 384:zzplKWy+aX7JZhWEz6CNJ85PX0MMXauJ8qRIfp5HofrQ1wAJI5yRY5bqU1yCcc/6:zz3SX7JZ/+kJkkdbkIzQ1drY5qU1n6
- TLSH T1C0B2E1494FB6BB16D8D403B15C2CFC68E9D588B45BAE8CE60A019F93373934F54E2658
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00000e
- Size 145KB
- SHA256 b8ca3af059f07c43873cf9ab56e5aef36ced193b0b91cb53465470e88d0d3497
- MD5 8b71619940c433b07645175597b9d3b7
- SHA1 4742f9d2f5733e036d68f0532ee01c0544faabf1
- SHA512 dc9cf602899b315f9c86fd47db316562c413e3d10ab77f878d5320b469722942c2866f15fe86e861f7ec2036668e1aa682079f9cfe28898a6fc16ae8e15f164a
- SSDEEP 3072:AcqrA374WLjQCWqNsmurn7jysxjLUr0zK9VdYheq5uxTuNP80+mF:AcqrAkWv5bNsmi7j3HUL9bCpkMZJ
- TLSH T106E312CBC6B22DAE7C49DEC641536F0AC3D7ABD3AA148D0C8E8866141DFD645D70E238
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000017
- Size 401KB
- SHA256 cfc84a8768dd9b8e28be12f55f2d4cd788b3b6a9741deae4464f9f2ebd55ef8c
- MD5 ad31413606d073661050360aabb48de9
- SHA1 d70bd337d5fcebad2bd7fcf509d15635d79252b0
- SHA512 6a57809707e28b43e7931e335dd6d1e5e4b31c34a55a88001c383290a35eedbdab77f7bf22c3a350ea7cf5d554482640840c407ed5f09e4abef47afca8ff28d8
- SSDEEP 12288:iJd3e2qS1tSwyEHiEwSAUggfGGhNDX0P4bY70sbyEtYTonZU:CO2qS1RyE5wSAn85EP4EKT/
- TLSH T1BF9423BC7886BE6CD3A726B029569738B4F3D583ED81920A6CCCB8F662312CC7175D15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000018
- Size 150KB
- SHA256 20f1cb5bb25202091bd2a4a3f0d6ffad8f76d555c0b9b201d283e1b059871541
- MD5 ed7d963cfb8e2881482c0dfe7547d941
- SHA1 9c476d4dff439319b4724f4027d185390e5d4da2
- SHA512 6c957435fd22619afbda88cbd9a2b4ac20b93e15e7c0b569d56577adac1f2202d0e48dc670e04b62a9de9a0dc512ac83329c37cc29c8dda60898f539ce7ecc7b
- SSDEEP 3072:HfTYEbJkbgZKu62q2EEtVCoX/T0gE9E1+kGzzXDJEX7vQAay:/TLJkUB62qboPT0g2E1FGzT+0Q
- TLSH T18CE312CE7744115B6CAA80453BE0F270FA6854ACFCADC3B5D77A0B51B936686CCE05AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000019
- Size 36KB
- SHA256 347ab2d9c4223765cea16c56044cd2328cb6d143e86fd78f7ec374a872c44221
- MD5 ac343ab833977e9138e6d146a79e3bdb
- SHA1 1d3821b5e6995f57e298a2c0165b2e44595b2833
- SHA512 8563430d257a53480cb94ae9bd8461e7747551db5448737074d3c49ce7059316cad44ce136d8318c89f2191c9f7fbdcbab210271d96afcc126aaf5251f365ea9
- SSDEEP 768:b4e+O0V8BCB1Jwz9rhC8tFc1/YHnZgyZrS0/u3jI5PQZbO06/h6UT1:b4xXeo1JwBxcSHiC+0QIVQZSzNJ
- TLSH T181F2F2974ABE0554FE210B8C65A2EC3907A1D332DE2E5634266C3CD4CB5EDB0B51315B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00001a
- Size 64KB
- SHA256 3f2a84f851b08814ab4cf17f40cef31addf233a2f7076f1eeaf036f78f48dbe4
- MD5 a817532dd0653d98ee0839d5a943ebce
- SHA1 cb3227094b06552ac998dbb1ce1f69122317d02a
- SHA512 5951e94823183aa96bfa99a410e7a74cce9b1206821f5068b8b539f47c7334ff0c4f93a5bdd27e3c5358ef94f34f1a6d45c3d6ab0d370a89b3ad72afbf76322d
- SSDEEP 1536:VlUmVDre9U/p1hNEKHIYWXR+GybzfH2WvqBM:VSmVveaRPWd3+x71yBM
- TLSH T10C53024E6A1684B2D4B5BAF80574DAABF44F21CC53F59A8FA6142EF13CDA7413A441E0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00001b
- Size 18KB
- SHA256 410bf477c3e5e468586a6140ddadfddc39d7f562a1644cfbfbeb75fd885588b8
- MD5 0add6cc88dd2d7a8e689d944b0727d1b
- SHA1 c9190e7f88922b7f61894bc649bd07f08bed9669
- SHA512 57566aeef4f4389c7ebf82a92506d7a8a47c722cf9dd046fd4023470eddb14145a22f2167a383f244c481e53bde1ac7fc6104f5c9c82d171158f86289897cf60
- SSDEEP 384:B6HnmvSNw0NxSmDnHlwVc2raaxlZJy1FQuow3rIdE+k9RWt/r4jv/Ttfn:B6X7xSTG1Frbb8E+k9c5yv7dn
- TLSH T15182D1ACE4565CE45610B21A80BDA70A9C823B38BD54087F528DB77384DF3D29FB137A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00001e
- Size 49KB
- SHA256 5f4ddc8dc9ed195b39b13b9d41de56f127e3bd38a81678d7c4a50e9878ca2c26
- MD5 02b64f24fbf56fdd36242e961cf26dd7
- SHA1 13065053e399e6d9002c1bfd32cc95c09cf5a670
- SHA512 3e4b943ff80eb9716afb0e2b1a915ee979d502a345b43175d083ee72ac10186e022fd42b223f6fbb6fae09235714fac4442cdba34fd7e7cd6857fe893439ee68
- SSDEEP 1536:2DAhits1/TWLVD44t29/2raqi1x58FxySZ4AIL5BXPlYb:2chio7WZ4Z9+tW+K7BXPW
- TLSH T18E33F17B25F6D4C7244E0847DFE90505A6643D43E8FCEAB0486A72287F6BCE18F449DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000022
- Size 17KB
- SHA256 2c97185fa36988505079fa0077351061cb7929b4a08e00989f223cfdb4c11375
- MD5 398cd871602474fe6624523859c43c85
- SHA1 d49fa996f7289709ba884de540cbe443c5c6cb38
- SHA512 9bad61d39a64dba71ff0a6ca9038b7a6f285a636db621a11651aeb22300b87a3a4adbb7d22c44a5028cd75016efe200729d1140c0d4d609a04e536ea99d3ff3e
- SSDEEP 384:YxVHoNaw8unVlRnCdlbfiUm+oZkIxZ146NRs3uIHvmDW46BTKTFvb:YovFVlRnizDmRZk2Z1FRs3u8vRWTFvb
- TLSH T18B82E161D1FFA0ECC7FD6C5F26886B640FC2A1D1018B9CE4B8529161E3699E453D63C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000023
- Size 16KB
- SHA256 e9a34772079fec79b369e1fbaccbf35826e40f15d41c18e172a0f6da4ddf43fd
- MD5 766d4b330fdf8e11735426db3632e5f3
- SHA1 5d82be90b308d817ad5b7021a09a724551fed670
- SHA512 661ae9b31515695d8aa000448ca0d8a86847be4d17516df5280ab129d368bc6ed29d1439ebe52388123503ea9bfa340bb128ec96013ef7c9fa2cba557ab19c74
- SSDEEP 384:Dg+RMOzcy/J8pgBKSPCZFuQzHGtWyWX4hypu5tgaq0AF0ce:Dg+Rb//JkSmuQue4hd5CTe
- TLSH T1A272D024FE52901CBD3909F26ABCAB56DE8CC81D5E489D89E01151F8AC866EC7CF9540
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000024
- Size 21KB
- SHA256 1e4a380e5a36c139d26a41e6de3503e21f1acf4688d3af695bdaaea6f51d6839
- MD5 ad76bf460b7a301a4d82ec9a6433e874
- SHA1 9d561874eac2fe724298344117a21875943deeb9
- SHA512 b91a2008120373604c2fded51e9f79db67e63f7bd9d146b9f27dbf4e80fb775bcecff2cce63094a82cb60fd726c5bbce1a6753d13d2d51e3e02e13da2a5d52a6
- SSDEEP 384:Oh4UrmlBtIjrpyLwFt0RtezMRkA7M1bG3Y7ZRUJKe+eIOJpVJUC3JwdDxZi:M8TIjrTt0R9kAPiZO/Xxihi
- TLSH T1CAA2E18144D0EABD3DC537419C936E1819623B8D0ED21F729A8D83F8ED6BAC447FA5B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000025
- Size 27KB
- SHA256 e988846d20362f1874850cb57d8eec4d3e73cf38ac45a4b273bc6bf879031bc5
- MD5 9134a305cc48fd57f8acf107f33c1b32
- SHA1 b26290799c2a1a8acc95f8d01fa2cbe7120eed6e
- SHA512 d9f232c69ba5efdb92aab860a6c33522dbcf3d93faceb34692baf37db0f859a2e24161ffcec4feb5e29566c2eb910fcc910af36c912e586e07bb766e8795f3f8
- SSDEEP 768:HLZhniaosBaTpcH6wmNGyRcmsfOUJUQ3nYjoTZ:HssQTpc0VRCfOUJ9YG
- TLSH T125D2F1D181AB80F7C9C54B294ED5933C04F2C55E061C425283A9ABDD9DA393A3EFB07A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000026
- Size 113KB
- SHA256 d28d00cb5424bf2bd020ab4adcbe46799e02bdebb9f78932026ee8b3fe8ce291
- MD5 309b2f012f8663b80db2011ae78b452a
- SHA1 ceb9f62ced53aeff51df8459629dfeafd0ccbd1c
- SHA512 74c4fa3b6a8b64f74ef961bf8cfcad4d0004178085472de847ff9b9ebe824c1ae2d5ca0d12c523cac75af272a16f25367243033801ffcaee03f1414f83799b34
- SSDEEP 3072:W7OVhV4z5osul3tQOHMo08cJ2VlJb0gZ+:TVhvx3/tcJuvgN
- TLSH T1C5B3128F2808B0618A9B37E41D4EACD79AD422472F6D10D835EC57371BFB5DAB15C24B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000027
- Size 63KB
- SHA256 756757b38c74731a48856df6c660768cf7df30044c215c52fd037f92c349c9ee
- MD5 81d5a61bab1479c1c117a46b7ca60a8c
- SHA1 84d50e952a5a33ae6ce9346906bcb51f815a048a
- SHA512 a3e77d58a8acc07f485be21b85f48d6f08d14ba9712287e1cb7811a62f3ea2aa8832cbe43b2903e16cd92f47931458911d165267df44dd6b6f611050354c171e
- SSDEEP 1536:OyLDAMxil8uHNCUIaQcqokDaGVHY2iAPRwRV:OywyieutCb8q/asJSV
- TLSH T124530243F0C9C423B169DA8A2CB1CE3055E6E4FDC961AAE73254F535A47E5C4C3CA1E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000028
- Size 22KB
- SHA256 5d1775a61122bfc8d35b103aa1ae409e10345011ba808e7166510e48bb18e5ed
- MD5 1afd97937b2abe310ff39cc092a9e8d9
- SHA1 15ed513d10c8fb23b1afcd63a41064e0335050f2
- SHA512 ce3877456b7e2dd47e4bf20792640e0e07eb8cec151434684577ef397ba42cc9d999824df8f5ff700874bce0ffd26d895ae9581b33778981e428347fb513199a
- SSDEEP 384:jfIawX87Eujvfs62q5QHEN8gNlKeF/clxJUWW1jHVBnc0hMivFvz:MaTeZgQkmgO8en5IHVBc0WiFb
- TLSH T1AEA2E1446360A4A74068BCFEFD826212F16E2C43CF5E62115826726F94E37F293D32BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000029
- Size 146KB
- SHA256 88ba52c80d812adbe50f5d7fe0acddfcc8d92a6bb1d44d206968baa7926be1ae
- MD5 28d53cdf98b8b349a67641d3cf5822a7
- SHA1 932ab1257068bf49718b66da2f55bf5204c91928
- SHA512 13f8bfd52a22603f22e2a6674686bae24567f45d7cb94ec3dda6a3f25ebe3b9a5b01eb8f7c97a88397406cd3d38cb05d74c15badc97ca2722baff9f0127ffed4
- SSDEEP 3072:+ji6sz32exMA834IZQOCY7snVUyr/44XSoU2oCXUyDn6LHHWXiNGh:Ki6K32exMAVOYOyjPQrloGHWXish
- TLSH T126E312F6832EDF81676194E8258CEA52ED0B70580966287B3ED0D323EDFA153DDD2D60
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002a
- Size 41KB
- SHA256 e5f8495919fa782c7fd03e4b456855b5fc588d6c4dece49d3c36c9644833f213
- MD5 a7bb9c340db880b9e93a1b7a8d097d63
- SHA1 a86cd9dc7f5d8e67c654e090bec6b7e1cc76b0e7
- SHA512 df98bbabb95bc39f805cdf1a65601a5f33e8f07366cd93846bc825cf114fa630ce474500ecb4207ff230e4b740525daf0943b4ef1987f4d28f220037c28f8ba1
- SSDEEP 768:R62hoKK+2OWMCQzho6L0rhA1za4cC6ub+qVjoW/cDa1TtUjTCBz+7IZL:w4GFNHQzhoRhAU4cC6uTVjoW/Xl6fCgY
- TLSH T1DD130190EFAC701DD1F6E702B15E2E8ABBCD5394F99067C901A5E56FF70E327011A982
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002b
- Size 18KB
- SHA256 81c941bc3ec99ae55dd58c0590c9a1100a926c98135021de68db523b7f5eed8c
- MD5 cd965e3156e2e80fc7447a43ffa4527d
- SHA1 6f7cf1a5aa3c147aabdbbf85b6857ff116590722
- SHA512 306aa93ac858288f9bc7cb87897e35497945ac5159716cbd89eb9ffd1237796e6a8940673bf4a78e5787c147a637b60b7e28522485ad228b062567756da39f69
- SSDEEP 384:7TTm8wsY0kRQ3O+1263o2tlf9DbSt51F6Rozdenr2ubR0Zh0n7EOK1n5VZykInc:nTmrv5R9B63RDbA18TquqZqn73E5VZy4
- TLSH T12C92E1DA146C74AF6972E7E89C11D2AEE6830B5EAEB047F7874212C3737355121A2B06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002c
- Size 74KB
- SHA256 4171cb53934891bf3cce15f70e70665a93c16f64a681e8fed2bc817893943a58
- MD5 ec4b8157246a426ac14f4af24a24ac2c
- SHA1 cd208e6c7393dde2b150636de007ab7294590764
- SHA512 8e75b1e3dc6d92cff5fae7ba7adaf2335124d69058ffa6cbf3ec93f36c686e45904214b763456633cd6c5e6e0535073edbe75e7f6e160987f2fbd51a46e9bb6f
- SSDEEP 1536:syB1dwVYpK+KfHgFOUXqxVa+TMb6jrMU/7XglaspMe0xh:sY3zZKfm7aBRj4U/7igN
- TLSH T150731259E20353BCEACE0D6281209666750F417DBCFE37583CCCF5A53198AF682CD99A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002e
- Size 20KB
- SHA256 84e4d1bb0e67068f047e94d84e96116889017c2748b70449b2a44b916e9a3f72
- MD5 3cff31fba5f7b050a6dd3dafc5034e78
- SHA1 703b7d02c4f4e9f84ba08ba435b61aae14388a0c
- SHA512 58772257cd4dc861c91989ad4f61d29e3a575d1bc88890ddd45bc76898426ccec48a31881ce231d5a7f19bd377a7d0dde644509145f6f42ab2dae7857f30471d
- SSDEEP 384:cZI3up1vblQ44As9Hgf+vaUvTJZ8YI1yUwux+ndDSFPGlDEcSPEVp70uMx:Iv1v4As9Af+vnL8VyUw5uFcDHYyPMx
- TLSH T13092F22008E7155BF3AC10371E90CF1E191CB2626F0D5E3761DA63715BEDC7152F2A59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002f
- Size 21KB
- SHA256 bc70d1eb3a110360ba7e097121323431d8f4042a7ad72c8d82077c59f152b8e8
- MD5 31d3801c1141e9a94aa1d495729dfb16
- SHA1 e199e228e0abb303106aa6fe5f579bab54bad847
- SHA512 c4b619baedc0f849e0f4415d9b9bbd62689d9798487b6d779504613f89cb8c5041c394ee665526e20e0d52dfe7f24b838740f5a6946cd751ddbc9f5136cd4e30
- SSDEEP 384:0Vz4owiMlpd0etcmrYPUVY89vYNJ8uNNhJYWWYnqJ1pjswXsdEJF5yE2:k1MlAeOxMi8yJ8uNN7YFYnMr8OR2
- TLSH T116A2E1A1524F003CF0215370D6C680AE5959539AFE426C2C0BFCA697781B1A4F2EE7EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000030
- Size 45KB
- SHA256 fbc770cadf0dd2a4f7837314f5ef409c184245da5c543fbe00cacaeb738f7ec4
- MD5 10b808cea8d6d8349de2e814bf7c1c6d
- SHA1 2d7eaa18c5429e7bbbe3c51260501ff4e3ceb318
- SHA512 8d503ea2f4e5e4f1ac062b1126641695b809c3b40c15f0cb21bddddce676a2531434ff750c17178d018e2fd372d42bd4bf72726639499d0a801d5703468e0eef
- SSDEEP 768:K+1fS/DN0eyGJYWlmjSo/xF9AZndk+XLhuYmu3SzL1tvO2B4BKHTj9EhfpEYzhRi:K+oJBzOjP/Wdk+XFuHuahNBhHT8WEkdV
- TLSH T1782301936031B7D31627A05E642D8D21D6AEA8A0B2D6383580B5D03EF55773C9BF1EEC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000031
- Size 246KB
- SHA256 d62354dea57103fa9d3fbcbfa7d34a4effe9ece023dd0540716b6da710957c12
- MD5 eebb0cea9525dea5a38c1f936cce4872
- SHA1 c609da0cb6a84c05c115c64e96cde439c8648771
- SHA512 6bc95d1bc2354b457d68b753432b793044e5f7bf3d14354e797bc4b888e2806aae638490b51c331a68ab7a7a7c0b3ace0e487fb57c4f9402161fb4803eb0bdfd
- SSDEEP 6144:ealJg0AHsUOqhFiOuMSbNHIVAFH9PDuPiMk+CxCgW:zjgsUOqhQOabNWAl9UCxCgW
- TLSH T17C34231BF33DF266B6686FC792ADB3609496E7236433180B4D81C939140C8DD75AE26F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000032
- Size 34KB
- SHA256 c4a0bdc95ddc9356b6b59a1063494e3f502c1e7d0301324d4c5db3248b568809
- MD5 cffd86b2361e3ea7566ed2965021f074
- SHA1 5c3e17b2ceb57a3583bcba72ef550c07164dc9f1
- SHA512 d26d1c12bf8abc4e100db002bb2b72fb7136a6c355d2aa0bd66b5b5a0e2a503083f7fe63a9f929fcf22d32ea3a76d4c10686048a8318b475708c93a83b82a701
- SSDEEP 768:Iyh/KXo/CZKCaAmeqP49ZlUtvBadqOctZ2JP:IQVbaI49cL3zyP
- TLSH T1BAF2F1AE885AC098FBC650FF7E6E8D0E65F50CDB0654252A341079F05BA879C34578D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000033
- Size 48KB
- SHA256 196122da8fe6c3597023a0aa407c33ff4eb2af1f204a3c93ec0730f1b503d99e
- MD5 8e8707e5a4ed8e6ae8e545b1e6b9d24a
- SHA1 d1cc5387c6c9088837c0ec855a3d190755bba68c
- SHA512 e9c43911929bb582c86709af4dc8f0273b428f479223ba4519fde27e70ce6f730480ee513de9b3693cdaa5ae6e640b49175395884a8b484e6ab7ac22befc7169
- SSDEEP 1536:vvcc0LufoCcOd3ngzv+LlhkrhYMGYJpTYAoHTV3:HccCufoCvd3flerWaTtaT1
- TLSH T19E230194E3132E09027A25F18ECBE7F40670EA596ECDD4D477FE52648EE1E0E361896C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000034
- Size 297KB
- SHA256 8b7a79c105853dc14ce31d56fabecedb8c19c75f8e66bc078a2bb2431111e077
- MD5 d4b4960d0fd22b855187fac263c32151
- SHA1 6aa8e4f10cc93822ee60a0513baf3bb47162a2a0
- SHA512 11c4dc811acbb3d12f085398567ccf23591a6c2f453e4fbbe465ee972d2a8f3c605857f7d5e9d18ca0d686b1fff2fb86a9f54daa4be922d170eb705fcaad32e7
- SSDEEP 6144:MoOM9SkDhFFzTuUM7Iw62Ym6fR7Qipacj0kg4h:Mu0ihFFuUMV9YffRtpacj5g4h
- TLSH T1475423DFFA3DF9401EDB340D7CB3021669859A8B2A0DD031B52B4AE9A065243647BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000035
- Size 19KB
- SHA256 0aaff4f0b7e0d66401c38bff48bd1d6ebafe9dd4f4691e50c60e2ba28e17ce4d
- MD5 7c0eaab7c9b416a17e060f1c1672f870
- SHA1 3ad8139172b4d9154be110dcefe307003249a69e
- SHA512 e13cf1f77d2c6c997aee1de553a3d0de804bf7acbb6fca8d372d09a346911d52b4e6190ebfec288709465086d6c6b3a6ec648ee3eec1633167863bff98377e8b
- SSDEEP 384:MQhEPVp5xG4J9wp9Q2iYjckdUl0qQgKYWEKw4Aw3LI4NN:MYERxG4fwp9QfYckd61QgVWEVw3tN
- TLSH T1D092E17549C14EFE1C8FD68B48E72ABC63A4EDD064759003527065AF0FE8B39186DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000036
- Size 147KB
- SHA256 67893bff878c30fabc6c6544d2d426227db57a4eb70e911027248bc67d5f7f95
- MD5 fb9344148f79c6f006920a6e4f1c347d
- SHA1 a66d83791facb4e04ba2a204d9f751c291d72bf8
- SHA512 36fe8f94c601978f9869542047122cbcb4d21b4dd361197ea679cb18ae07f6517fcf9662b2f5de7ddea2b09a154d1228e54c899f8756f3734d986c224feb70fc
- SSDEEP 3072:hremrynNmFfBSHFHw+RbTH5Q19di+nn7tnyACQ:1ebNmFfBSHpw+RfKdpnZn8Q
- TLSH T1FFE31247694F4801DD5A8F51070E27AA8FB970612EA8F7D0DFD93425DF91863B016E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000037
- Size 28KB
- SHA256 18cc5812756761f3b510afa464c13f9a9f3eced11fba98561623607cfd565a45
- MD5 20831292691912ccb8c6ae2b07b126c2
- SHA1 c2e82b33aa68c7bba9de7d9bf77265b1be7ea89b
- SHA512 2cc079b8700a5fd3b707c5fab8440af06633bb2263ab28bb2bcd05e98135931bf9c046398c1bda52a1b7c821660f97535ccff815292c84fff041e01b21f93952
- SSDEEP 768:U8cwtYKmR1dXwjpdAPQgSwnRdwKnbVk6/FtNdJ2Z:jRtYK61dXc/AP6opnbptjs
- TLSH T16DD2F131858A2FD9019DB331D2705EB58EB210F51E9D54A41CC9DEB426F4A04AEFFA8A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000038
- Size 30KB
- SHA256 dd9e8c900fba8390cc6e46cd3c0bf90c6184f49a742900feb0da572ce8b37ac8
- MD5 9a44ca0a912685e0632713331727169d
- SHA1 8e25384b3d238d2181102b88fd09f8e2bc6d4f9d
- SHA512 e99d5c4560eab0825f4c4bdc2d78e9daff946092be19f84a838f18825a6891c75732c325c0e75befd6466b8178c8eda210a1e626a65fadf973c61a2869166023
- SSDEEP 768:bnE53xOyClN4ki6+6/F+q2HS8Ookp4QeQ++p+yNzWZtfco2R4bSom:DK3gykNE6H/Ypzyec+qzgMe+om
- TLSH T106D2F28109FD80494C2E58BDFB3781198F26B2B04F5B269B44CAD12050DBFE11EB67E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000039
- Size 251KB
- SHA256 c3da177f3aec1d5753c6edb4b54db56ceb9a575b52642281a9d299004305cd05
- MD5 c8832484ce36e5e1c6a420c1cbd785f9
- SHA1 5680ab2eb25894db36a2b8f1499f7dc55fe35b24
- SHA512 3aa0e71bae82f7fbbc2c503c46549718c70269d638e4acb19dcb09433943f181bca114ec88b4d00f832699f66c8e68b8101cd5730d668814b199d7ea0207ec2d
- SSDEEP 6144:5ulvP45TJ1LBLU7q+TEGMTYhoYM6U1VwVEZ5iBMnD8AL3x3l2:5cvw5TLhH0LMYhjFUBsAbx3Q
- TLSH T11C442324AC827D8F398BB86D72123B9B5A146500DE3E993644A80CCDF16DF4F5A4F643
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00003d
- Size 171KB
- SHA256 d982490741549218dda32038626a4ba754208659efc98b0c9ede16ff11b3cad2
- MD5 cd3b2612acd06c39535d9a3267f12edc
- SHA1 4671d194a8f0c67217cc2ab5f635bf3a32933cdf
- SHA512 5b30365331b443fb1c76a8711c96462ecb6d2057550dd60916ea1d0e5e600f787e625349617a607eacdb1761d04ddc356f883e5e997795a2c525368e7a84650d
- SSDEEP 3072:nBayigSFjhP37VcYecV1XxrUpiew1KCoYpB+pBS6x82+HxgXXui58X5m62t1Qdjf:UrPp/ecVYpijQ/Y7+DS6Hjr5080F
- TLSH T1E8042316DC00CB8B7D5492F3FE1067942D994A85A97B1DA7EC17778230325483A72BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000051
- Size 42KB
- SHA256 b78fb569265b01789e7edd88cfe02ecb2c3fee5e1999678255f9b78a3b2cc4e8
- MD5 281bba49537cf936d1a0df10fb719f63
- SHA1 4085ad185c5902afd273e3e92296a4de3dc19edd
- SHA512 af988371db77831f76edf95a50b9ddf1e957f0230404c8307914f11211e01cc95c61e0768d55aa4347f24e856d226f7e07ac21c09880e49dbd6346d1760b8bff
- SSDEEP 768:fQelRMAMlg6keZjHGyL9BFjYBuukYbpX4Qb0NJ4rLU7KoYVZ:fQeTWlg6kON8cubbpIb+ggf
- TLSH T18913F16222FD3543C412E42B5BF6B23BD3C516CB231285A3A77B9BCB25B5400A8DF953
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000052
- Size 44KB
- SHA256 5d225b25d66b30563a00f395476ed701130d3f749620a63531cea09fc537164e
- MD5 d295c40af6fca08f8e0eb5425351f431
- SHA1 1d246a1e54b3a1f2428883d8c911af73eddffca6
- SHA512 9c9f23cb775244eb10f83f964b36224ad2cd5152cfa5ab82928f68ed1cb49be4156f887cc40a857b72efd0833014e4366bf136689a717dd58828a1b195ed486e
- SSDEEP 768:7T3lyZzszaXGZG8vNh620Ph+EdGcNo3ITx62hw4oZkha6UK5+Ubp7tSSC5Zn/pf8:7TVyZwzQZ8vNd0Ph9/Nuo6GPUK5+UbJz
- TLSH T10123F1F73985EEF5934B05387F0EBB43068351F69A219C22670498B9C5CFCF629512E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000053
- Size 38KB
- SHA256 13da02ce62b1a388a7c8d6f3bd286fe774ee2b91ac63d281523e80b2a8a063bc
- MD5 ff5eccde83f118cea0224ebbb9dc3179
- SHA1 0ad305614c46bdb6b7bb3445c2430e12aecee879
- SHA512 03dc88f429dd72d9433605c7c0f5659ad8d72f222da0bb6bf03b46f4a509b17ec2181af5db180c2f6d11c02f39a871c651be82e28fb5859037e1bbf6a7a20f6b
- SSDEEP 768:w35mZVsqT7RAo+6tbgLdolT9YSswcTWa+O/dm8ae41u37qt+:1xTO3kb0dolT998WhO/Hae4jt+
- TLSH T11B030292A14018CA6EAE219576CCC7A7F4745D89DA081DD619CD01F0FCB326BBB51A3F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000054
- Size 136KB
- SHA256 234feb9a8a2c759d00a4959506a3b9cb94c772186a2d117aed973347c7ef1891
- MD5 db985aaa3c64f10506d96d876e350d47
- SHA1 aad4a93575e59643fed7617e2feb893dd763d801
- SHA512 300d0d35ebb9e27d66489ffb3e5502a4dcd3af032fb0f672d4f004e3846fb795772b6938c99dafed6fad0c25da8412d6f6a7b0221eb2540e84527703db5b7073
- SSDEEP 3072:Q69dyqPSD49z56qcFxDiYZHYj3pU5qJvdzqC3dZIwv82phTFsZ:yUSD49d6TDiYZ8pU4Jvlnd42vmZ
- TLSH T123D312F1F12052909F25CC4EA67E9B4288738B1A2513687FF5B29E01357F9872ED13AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000055
- Size 175KB
- SHA256 a981989aee5d4479ffadf550d9ecff24a4ac829483e3e55c07da3491f84b12ba
- MD5 7cf1be7696bf689b97230262eade8ad8
- SHA1 8eb128f9e3cf364c2fd380eefaa6397f245a1c82
- SHA512 7d7c7dc08001079d93ef447122dee49abd2b7a84d1619a055ff3e7ec0009261ab6add018560bfd82ed22b29c1915bfd059f02cd83fed2e15e9af05a5d0654e06
- SSDEEP 3072:IkairG/VFWmVX/55KB+fV6ZNTJuvdeDsYaZQ9aFftKn/zfRoJC1NTuGo5m5Ss9fY:5aD/VEIXs+fVSNTJ8deoYabFftK/VosY
- TLSH T11C0423D52CC5EC31E28420F35C6BFE33F5F99B76A811C1C6B8AA83A2615C4670797789
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000056
- Size 133KB
- SHA256 426ae06cd942849ab48b84c287c760f3701b603ebcc5c9aaa4a89923ef5f058e
- MD5 f9bf0f65660d23c6f359d22720fc55ae
- SHA1 9fa19ab7ea56165e2138c443816c278d5752dd08
- SHA512 436019a96e47848533684a34e3c360f516c29b2aa2473d0a05d50c0fd3ad19eac39df2de12b6ec1c6760493efb5abf58e6a54d32080226fa1765983435634d88
- SSDEEP 3072:kX89D4n2tV29WN9z2uXw/hqzr7IbI1O1KfB9Bk8WnRSqv2WDc+FC5:kn2tS/IzXIbIo1KZWUqv2W8
- TLSH T1D7D312BDFB327D7CC23244C064CF7242619CB39A9B53CD30DADDBBA8E549E25294A152
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000063
- Size 224KB
- SHA256 7d44d0592754bd205a724cdadd7a5cbb067493d79d9149312a46b906abafe058
- MD5 c349524948aa824e9ac25142649f7fbe
- SHA1 6e983ed89caa062ba303995467205eef00f1642c
- SHA512 d48ef60c8c72854c5282dc8bd0089f3fbb890e642fcefc27c231b42fdf18b7129880f2b8073698a1fd47aec2a872dafdd30edd5bd6196d9b7ef19d02faf3b4a9
- SSDEEP 6144:xF50UCV5TKg+HiOEXJVtiaYb3Qgeneg+etOwlTyiDnL:P50rr+HfEX/CAgejTHyiDL
- TLSH T1162422A9B94974EF7CF77B8280F457D56E1AB91705CDCD102E0599ADB3C1320B821EA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000064
- Size 28KB
- SHA256 5f04f8784d86bacc47153ff77ec43774f1af412df18b7136062f384e4947b83b
- MD5 cb70f982938aee5fc07a1854ccb6ccb6
- SHA1 53766b8a3bcc50a2a65ccf1f960b9adb8c26d191
- SHA512 4d2d279c5a50fcddd6474f6994c95415637fbb4fee1668c344798107f9c560af202794265ab249ba3dfc7157d7cc64c310fb3609b46758808ebe98e2fb9c8049
- SSDEEP 768:2N0mVc3R/p3NxKZTubNklAndovsYghdy+N11mAzUtey:i0mVc3vdxVbNklASvs1hdj1UaQ/
- TLSH T1B4D2F1C4E8979D705B05AC5E498F7E7648308A7E3CB2792503A12FCCEC485E56EF5C2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000065
- Size 19KB
- SHA256 1e7f6ea1298758403297e8f9049b072db59dceb3518186164ffc16550c5c5ac3
- MD5 ae7d16bb2eea76b9b9977db0fad66658
- SHA1 4c058e3962a59788b413f7d6be3ec59a2c4078fb
- SHA512 177f7ab63e2f8e185b4d4efd0bd9d15963fe316701219a6127f1d68a72bfc130eb1e46bfc1f213a06299328864778ecd9ca0718eb3c2acc45abb22c74e2ea6b8
- SSDEEP 384:iVKZ12ezx4EcS387JSgQx8Atws41d4IWo5Vs7sDG+zGc/pl/fEG:iVid4K3kJjDA61WoMQzGcTfh
- TLSH T10A92E14898970D69F41D67B2BD2F750AE1089E5ED675F7F1EA0793C21833428B72B2C4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000066
- Size 156KB
- SHA256 313818d6b177a70fbe715a5142d6221ac1a1851eff5a9f6df505670ddcd73074
- MD5 3b0d96ed8113994f3d139088726cfecd
- SHA1 1311abcea5f1922c31ea021c4b681b94aee18b23
- SHA512 3d78c250029069e1850b1e302a6d8a5154f6e7bc5cd58f449b8824ccf418e80dba2d5569a9cff72f51ccc9de140dc91148f93ec4717f4a880e2ba94898fbdb24
- SSDEEP 3072:B+pcBZNL29qTsnrCIO1lC6d6z9sZPbUGz3fOHN:BfWqg+IBU6oPbUGDfOt
- TLSH T19BF302B2751DD6D2E502DABAF20F840CBF9F5125879143A7DF68B21CCFD502A50A742A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000069
- Size 284KB
- SHA256 f6c1359b0aef2370f9762bdee12987c756db5e36456214d314470aac6e393ce4
- MD5 a2e3ff660353a8b232021406981f144e
- SHA1 2e9490f9b945f5382a81faaf2ad38028bc2dedad
- SHA512 6970587fb2e0b742abc543ae1ed6aa75bd3c18181df246fbb6f12c011616bba682e1d9451f23e5c45b2b54da7cc9eb5ebde8362bb2da7dc7fe691d0ad40517bb
- SSDEEP 6144:lcJxC0T6xVVffRPF/hbrHKHt6f+3g+Li2ooOjTUqW+EIxia4:8x2xVVffj/t+HIWg+bOYqXEE4
- TLSH T112541273EA755C4EF8B3523A301A626E6425C27907CE39506C71EC4CA98B07AACDC5DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000070
- Size 26KB
- SHA256 c4b204f939b9d4be54404267319e23d7678b8e9ce4098a2e19787ba000436653
- MD5 c9cec94e8cc2321651e3899d2f721bcf
- SHA1 2e39e15f5ada6d213efdb726a12f402da2044dc6
- SHA512 765dc164662619dbf267ba83d90b4f465fb12bab79f3c21813d4ab1db263a0108326ebacc8831963c5789b014b5edfdf0376de7ddb75a963f8046835406c68cf
- SSDEEP 768:VNkYOz/nO7WzPd40yywQF9AkMDI1TeHxn:FkO7Gd40yyZF9AMT8F
- TLSH T17CC2F16545EE30ED4547AE48F83BB8B4D1739B0DD5C3482F905180BAD7B2E9E1130B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000071
- Size 46KB
- SHA256 4fc919f2a3464ae1daec53e95b76c35ba16ecb52e1a513776a7385b180580224
- MD5 5e4cc9839b1670e18bdbcac9490c95ad
- SHA1 db0d626aa3c60859e253dda527ae7c15fd22cfa9
- SHA512 d3e3ae24af3aa9c4fe19dc24c10ef7b6f4ffdc8c94a57e1953158fd0cce15e0fb2fa904420047120d699a6ac019dc716c237275185b2f49af3896b8d3292161c
- SSDEEP 768:INlHzAugjs5SLGzFA3kR5UEKjlyZ7r9T86NnbI5bp5O+SpQTz2guTLknnEOHUYXI:elH1L8R0RZYloTdbr+CggY6XlZ
- TLSH T145230245D5C5F7B6324AE985EFC76C8422AE4C443F93A98F1AA0D43F35105C85D833AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000072
- Size 91KB
- SHA256 c1ad8c54df1712059c85c57821c0a0d92efd3fbe1c4c3ab422414a1e84c2b4a9
- MD5 e4ae94e4cea9609cc102e31bb7da628a
- SHA1 4edcef43f5702544340d9342250985d34250406b
- SHA512 96447a7f8d70876f014959fadc202e35851b48045cb127b018e367211478ff29088d3032b246ad9df64c066138ee7276076bf769f4ae66ae2d6237d520340144
- SSDEEP 1536:hyoPz10jwE4SX5S0iBH49VkkpuVTvS5F8wgqBE43luoPJCdzxC:goriwDSXojHYVjQQmwg613luAJMzxC
- TLSH T16C93025DD26D62B2AD441DB93BFC37C2639EEDC56706D6A10AE1CA4C26F386F0270342
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000073
- Size 29KB
- SHA256 2d4dbe33c521a3d97ebf280ff8ac72ee8841f38b11cfab239d3070da5e13f277
- MD5 d8b58d52b5cf4949a542118bb086f9fd
- SHA1 b2debeb641ae5675b6dedee02f6ceac5f1722e12
- SHA512 26ade9fac5b863fcf652384ca436eae73c8953906a9fbdc9c1cad51355493350240aac42d02bcf5ac2f21cfd3fe5a4f927737c813b86b91d1578cefc35b44c36
- SSDEEP 384:NbsFYgQqvkKEE/zR3mvJ1lfAZ/PG6Lv+K6Pd5CNaUsMACo5OEQGx66Qzm8RI1/fc:NbCXEE/zBSyPGFJ5AaUPorX8RIhfBsX
- TLSH T16FD2F2695AC3536EC0B238E3318A99772F83988799617B0F661CF93676793EC02C9015
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000078
- Size 206KB
- SHA256 e50e2ac6bfee69102b4cb90a5bf1c78a7770d698e0247b6e6c00a404522f154d
- MD5 8d91888dc0110a38100de665ae1ea295
- SHA1 8f5aea58675e52573372a817661916759ba22141
- SHA512 4467118b7e94e2ca396286b5b16f3e8a65649b53f75b94d5765b49ee5ba3736d04cc603ad6dfeb94bd4a363e8bb8b647a97e407260e7517093b4dfe3f5ff8910
- SSDEEP 6144:FQTYfxGX6auw2+buQSoU8E6olJtefKdALxvuIt:FwoGSw2lQUhlJU6XIt
- TLSH T11F24230251F6652BFB398462889B50B754CD88577B28B92CBA700E7DF24F2C193C59EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000079
- Size 318KB
- SHA256 290f2bef88a236080a96972ac0c88ff613699e0de15b1b29fa87d42325658b81
- MD5 3fb371a375e3ca7de812a167b77abad6
- SHA1 165cabc714c6f72910040d1b971b322dbcb0eb6d
- SHA512 16c7534c34a50a178426e0ccf121b688920a2351644dc68931f727ea85968edda23a43d274cf7cd97d3b03f3d40481331b001de7d3af31caa5886fe6b6471e7c
- SSDEEP 6144:++hDKDjL2wzVDiN873k+6HrK3eYetOJg3cv8Vy9Q4BysZRF6xA:+MDRMDiN87eIeYeIJg3Y/Q4ByeRFJ
- TLSH T101642342E212DB3236ACD58E180648ED4FF8745545B87D043FD2D228ADAD98FF68B74E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00007c
- Size 38KB
- SHA256 09ad10f49154b5c68bae7d046fab75d22fc2f079434289b5212c6334b77db826
- MD5 d5b5da0c5cd872dae761a4a0575e84f4
- SHA1 ec508ef181486a613482b54f042a3dea9d9c2291
- SHA512 4e614e1b1d9620c6542f9df85c9fd9c1629aece037a46f59716aa48236e299aff1137cb473f6b7a35823215ac510d524f7d72e24ad4220b820455f37653f7821
- SSDEEP 768:a9v2vSLniq/LGlgfA9pdtZO6g7W5HuXdAA3TiLiySobrW:a91LniA/fA9pVO6g7X+A3tsrW
- TLSH T1C603F1B28D49D03F9282526062533BB1F4E0E5C506D4FEA3344AFD3A6BC242087567C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
- Size 160KB
- SHA256 636952b6d568980b6c7cb411ef5955e65f17654a2beb87074f2e6fcffa8e9049
- MD5 0af248da9de0bc44961ab6450bcde9c5
- SHA1 16be1c8c968026a649404750a1eedf678bb2ff19
- SHA512 2a8b435e59470aae64369257e557af115447caefa2a00c43fa283a765bdc74c5fac3a76408dea25b328c74e228e8d9753d1b26cc14c3aaa8a5a8ceaeb9369222
- SSDEEP 3072:QHYlX3IPn36sdIc7Ke+bP4BlJ7srk7UeVqkfc/slClwqOf6H2TOEXWF:QEnQn36NAKzjcJ7sg7XVqgLlMwcH2TPa
- TLSH T182F323F2337D47B6FE9F4FBA644D24B6722408A8105ED4E83D07BF58540A101DA7BAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
- Size 1KB
- SHA256 ef15ca68d2b82d1a5a3b5a1e1986cbedb30dbebd4e9a17c54bd887fd213d08a6
- MD5 b960390f33e16a11210fe6f377fcec6c
- SHA1 cb626a8060de6636e3b551efd8ce289730f7a716
- SHA512 ae727f8888607b40ccc539e658589d89285be4d0962db6f1e4b45e2fc214d320f3df0d2594b57a1292f600755e5b4cb74c476436fa875aed9b4c33f161b29fcf
- TLSH T1BB41CA6054992032AF7183AFE6773B8D29171053F01C58DC76EF161EA4E3D864BA7A0B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
- Size 2.6MB
- SHA256 fca38f7f0fd9bf7f02bbbfe0e416b37191c2cddf2eb1c6710bc5f57bb6eb2490
- MD5 7126c126fc3a18cee6fc24be11180bed
- SHA1 849225f9d096b6fe8f60afde2437723769bf9389
- SHA512 20dba32da943f322d0c20e5e58c66c3ebccf9615def76bd949dbff98f20a477750a0f0446bd6611c89ce41589f4964242fbc4f448728d6f26a21cb2ea7a6f603
- SSDEEP 49152:ykbhdRcN7cp9Y2jjTOnjjOMAVb/H575c6Z631cULL7:V7yXBnjAxOxaQ
- TLSH T184D57C53F2D910D8C019D179879A9632FA62BC450B31B6DF0690B7562FFAEE06B3D324
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\Opera Browser.lnk
- Size 1KB
- SHA256 0b8a2027f140b34d028d87d41d492d067dac3a9f7a2f1fd6491faf4c57b6d4b6
- MD5 507541736a6c658aa2bc86bfd7b84ecb
- SHA1 cf508c07df71b2b16f3532e9e49132299a74df75
- SHA512 9bf728683b322964978cd8f2842588af1e7d9793bf37804b4549169ce6239269acf1aaf823272f8f977645b6493b9669b3362414fba8060712b1b2cca34910d2
- TLSH T16E210205EBCA1B33E176CA7644B72B195765FA11EF565E4C205043480CB5906E95CF1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\additional_file0.tmp
- Size 2.8MB
- SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
- MD5 3b028b1188ac321e66add16f8ebadbec
- SHA1 086bcb2b1c0d300be15c1390841aadadcec4eac7
- SHA512 17c390e0df8e29ff9ad43e581db298ada2d8378fbb890dc5f4b17df8fbe21134f99ab203ea4752a419215d289c128a1d8bc14721bde80042e5bb4c3901dffb72
- SSDEEP 49152:+kinoIZOrzV7AlDfo7eT/uAtH00raHx774jx4aGhcr0glyGIGE1HVyVNW272DS/Z:+kiocQzV89Tmeradk2ha0gdIT11yVQ2w
- TLSH T167D5233275A48C34D62312321CE0FAEDA5BE72701E6347DB73A42B1F9EB01979A1D562
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe
- Size 2.4MB
- SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
- MD5 b0408fa2a406f483e42c3ac102d35e9b
- SHA1 fbaca900ad54abc65ec2cb34d63727c87132d16b
- SHA512 2e8b9af626fff68ecd0204d6a3151b4518749143ec78a2f8f99f959399d1c8ea59987f99c38c9e48fe38b518fd8c91381356daf3f17944fa3432337b882e5401
- SSDEEP 49152:wJv8lBbu91xwyiZSwRDzWEibQojjHLQDpizF:wR8lBbu91xwyiZSwRWEKQWjHLOpc
- TLSH T10AC5AE12A86094B5D8563132321DEB3E9A30BE1657354DDBDB90BCC1BBB86E2353734B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\dbgcore.dll
- Size 222KB
- SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
- MD5 b26ebc5cde9b1726ee9f9534dd6107d0
- SHA1 de00af3ec4de63a158bcd50c6e95b046669d3353
- SHA512 2e01c65b58369c1f5f4081cf377c3fedd87ae5fca63cfbc44dd7859a1e10a849d1bbdbb592349d793166f577dbd954cd8660f625dcbc9adc4d936d6a44f062bf
- SSDEEP 6144:FASh0NdOEQzFh0ekr6nzwBaQGdppLIg2dFl96Fl:4MHZn1n+P96Fl
- TLSH T14C247C2269401533DCEF12F062AF363A96AEDD90239490C359A05BDDD6D4BC12E3D6EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
- MD5 021b11c0fc1a09e49a2046ef07d1747a
- SHA1 4b955c1e7150db4f07528929fc529fde9738a2b3
- SHA512 6ca94fdf2b92928859152aa23f31df46944eeeac7988f6bb5d647341843d8d2aa91c2c810d17c8b58a03c99e4ca7d7e1ae6b6c2d9ea5029616d870b89794d6c8
- SSDEEP 49152:xEDlXSohR86M5NKBlv/2yOFVnzM9F0KM7:uFhR86MHyl0fb
- TLSH T128856B20E784813CE4EA1177E67C7A7D85ADE524073440CBAAC45BA978297D32F387DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\installer_prefs_include.json
- Size 417B
- SHA256 2ffde029b3a7bbc03c7c7b37add781586fcd2eee2c9ab5e43db140d9bcddda9f
- MD5 5f42d4392fa8f804a88f40a051c42344
- SHA1 34169d3c8d1c0504a78e127e0853a7af67464648
- SHA512 051eec6aab62488b4dbc47a7db60527127d56a8c353f38049967c0de1bf55d5aac546571007a0edeff1b7ff84211b42876745510e1cfa640c84aa8a877fdb026
- TLSH T11CE02B45D4BA66018A7087E7717F33CC42022606E41D9CECF3CA3661D525D52D6DBE4B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\installer_prefs_include.json
- Size 1KB
- SHA256 37b40e47e6306d79e9971da284a290dc37fa8ada75ea1458bec29f63a8aceba7
- MD5 38d7a3af5938c5a6f3b1b9ab31c678b8
- SHA1 f0f40e51a9d94fdf1250df12006c0e414c018c04
- SHA512 376415079ba6c565b84ea61ce1539791994af5ee5fa143a1c6609f750cdffb3298ad54fc696f48143f6d107b5513486a8cbbfa2507a3895181157f5c88c8319e
- TLSH T195218790989975015B71C3EFE57B2BCD5A032603D01C5CDDB2DB291AE8E6D504BE261B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\installer_prefs_include.json.backup
- Size 402B
- SHA256 76d1695f0a3658e912658aeab61afe792c27e29ea9a66f67e61b53995e5d8d56
- MD5 0a7427ac42aec2c52fbb41a7173f8d6f
- SHA1 d06303bc5b2437d933de412c0e2c8fb303dbb63c
- SHA512 c6682c6df3bc9fd746e6bab7ea6fb74abbcc0239b99d093ab14430fde2c6f839f95c94a97790e1a737a617873e9ea2e385ac18cda241d17fef1b358ecca27828
- TLSH T1B5E02B41D4BA6501497087E3717F33CC42022606E41D9CECF3892261D425D52D6D7E4B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\28ed0ba3-c83e-4888-9992-61b6907a04c8.tmp
- Size 10KB
- SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
- MD5 78e47dda17341bed7be45dccfd89ac87
- SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
- SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
- SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
- TLSH T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\4f052a70-1dbb-4297-a9f4-50cf9aa5199b.tmp
- Size 14KB
- SHA256 d6a7b4d351a6a936a754f7468b3d2ec511690c58e971f4c88b9550eb91acb3df
- MD5 d8d377d583501850d559df9580d58faa
- SHA1 b5a9f7fbd33a5a134bcd3b6cc2c8c5dcaa7d2bfb
- SHA512 856681799b6eb8b01e9769c4793d888ff11a91763c8698ce980de5547327f53e775d60140b64a1f9c6fd1ca68ed7854c3088079746453bfdb7c1bae55aaeace4
- SSDEEP 384:0WzYFVfZEeBlKfmcgjU9dXRF5RnSgrKQrzP:0WEFVBEemggThFTnbKQrb
- TLSH T13962CF6EC22EA71AF99E5D3DDB7A9802387DCF4C2C17639B4B71E25005CE6469B2D008
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe
- Size 8.2MB
- SHA256 9993e30ca2d3a42c5959bca3b8fbad99f28e6a87dc186841e2f03ebf6acd471d
- MD5 e4093defc1b1c39c8e33af4167798941
- SHA1 439f7d8edb6bf52c1aee5a97b949494bca55db10
- SHA512 717adca61e0f85a9bc84976e45393eeff82f91be62a5085bd854e3435054b83387cee67e1981702ba22720ab5d150e263564362ea4a4dcac5312785bf666686c
- SSDEEP 98304:1kzQRQuiE/L7XEkYPQpRtwYhB++kHpwYYNY8AFh:2zQKb2790pHXFh
- TLSH T1FA868D43F3E601E8D06EDA748B3A562299757C464B34A3DF0A943A261E75FD49F3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\96e316d4-7489-466d-a98b-68fadbf38e0c.tmp
- Size 2.6MB
- SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
- MD5 cc79434c290887ea9f9eb97967e3ecf6
- SHA1 a3c9fa2a279a6a30c7c44240331c500e37b3e004
- SHA512 49bfd073fdbdab7ac6adc62a3f2a5115fce06548d124ed355f40e8234329028499d840785bc7b2e55a2f3ce2fb9d77bf6b2c3efd70508f6303ed0ad861c27fd0
- SSDEEP 49152:uwEkdF+R+C0LfbAeXf4Lylz4wXH5wtC9HP3W1FPhMZSXUq4yP4wITCvhbgK96H3m:ugTYYLUDLylz465OCB34Jmgb4c4wIO0Y
- TLSH T134C53341B62C4A21C023E737C2904F763FD9D5309F166BCB8263E4F665E89822F656DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\c12c36a4-e753-455e-be4d-d64c99f7e174.tmp
- Size 4.5MB
- SHA256 8edd61cc40f2d679766da78c61593ee986ffc9aa77455d947e9dcd928410f4bf
- MD5 877ff990ef3c5b13b595870ffc30aca9
- SHA1 3d41bc1be482fa31a8305a109431ff4371aece0e
- SHA512 f5ae1e042cced905d48d73ad4df446fe0d034a11c478c8f6a27c7e69fe44a456cac2602da8983903d1f6595d515cffb67bcc3a6d2bc743d16bb1e145af074b9f
- SSDEEP 98304:+nT3ZSV0kCejcspC7g/0maP1U/EC7NRgWg1JDvyEzd:ITJSrCewspC7g/Jb37y7Z
- TLSH T1B82633A8304B4558DC3E4DB309AB63ADF4D29E4601BB04D35C5D697CAEA0F6FA62307D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\d0261476-fe01-4308-9815-edecb89de608.tmp
- Size 1B
- SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
- MD5 5058f1af8388633f609cadb75a75dc9d
- SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
- SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3796_1904957397\CRX_INSTALL\content_new.js
- Size 10KB
- SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
- MD5 3de1e7d989c232fc1b58f4e32de15d64
- SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
- SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
- SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
- TLSH T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3796_2110643175\90d6402e-2d89-4a6a-9002-e68efacbe7ff.tmp
- Size 147KB
- SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
- MD5 9c670f04d98ab7404f16423f6ee6cdfa
- SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
- SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
- SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
- TLSH T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6000_2060609036\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6000_2060609036\CRX_INSTALL\service_worker.js
- Size 55KB
- SHA256 33b0859347e02c9142fd7823b297714b88e474c8278f4778efdfb01f1e6b8034
- MD5 e5dec6754e1e9f785c91a40e48716383
- SHA1 230fd4d90eb25bf571de593c24c5dad1df01d807
- SHA512 104b40d0d32d6575192ed0842dcf43abac333ed6f1fa1f11e38c1e35471a5e717b24caa71f462afc59b62c4bca2013e994bce5741ffccffec19a69506569c745
- SSDEEP 768:jvTeDsCZi1xXNCZ3MU8feNL8LiUqY7tLU8E/vCZ4PVzebAvsKB:jTCoVE3MZpzqY7eL/eyyusE
- TLSH T11D433CCC75D7B5655353A5A6802F3042F62D3D41209E48A1BB36C8E6B81C84EE73BBF6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6000_2060609036\de932af914ba00303d4a2778a383ac9c831101e2.crx
- Size 5.5MB
- SHA256 6a6d3e9600898b2b4ec003c5cdeecea3a3e45cf49e080baac63520530e9b1a24
- MD5 a14c216f7226dcabae23bc6aed91906b
- SHA1 77985c256c4749c6111d72b6aa59c7a0cb4f2fa7
- SHA512 8e00c6bfdc880c403adb3b43ee984c5e2749e71ee7d3fbdc2d1792789a1c0f3e63f26b1dcc87beaa113fbec3aaf1e8b015b81efa281fd8184b0846bae343ffd4
- SSDEEP 98304:XdzyuKW9nA15OHUgvXoirX7cK5SDk8pif7K9EYYWl71l96RWiWxq70pwbzty6Q2B:XdzRKW9fRYiDgR4Mif75Wl7X96RWiWhA
- TLSH T1D5463330A96EA395EC0ACFB02017D6DA1E19DA075157BBBF207B9089E9C3FD447D5A30
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6368_595939707\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
- MD5 0566b67d5fa120d6da250a92577c8873
- SHA1 0baf54c5f6a7b8cff4c82d22be9113c43a099c87
- SHA512 9dcb904ef68419b2462d88133e87d6f4258d8f53f05ed12868718740d6e9467ab2d8769a79727c3dbd01c6807aa5e4863f1874465a7dc95088bd724f9d897fb5
- TLSH T1CE516D6D716E2332D0EFCE2E04C6860EF8680E9C50489454BAD506EF8905B9C9DB33C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6368_750810032\CRX_INSTALL\_locales\en_AU\messages.json
- Size 194B
- SHA256 7751b796c508c30db59a33479e99582bf16ed3b8975e90d1f8e678803aedf704
- MD5 27607b528ebf85dd4a439b1de246d648
- SHA1 307bc0a04ea79486e69022cdb734f4d74f55b333
- SHA512 664718c686ddb88cbc1207564cd2bc8e37bf21130a9f8e8fa555b582b19cf089df77e5fccafd5673b98de103829e20fd5133a889a140dbd5c0c67eb9a3d636a4
- TLSH T138C0220090696B670B9E118134B8B1C0F1F0879860A0AC63A8CD002C026DA82888F391
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\AmountExtractionHeuristicRegexes\4\heuristic_regexes.binarypb
- Size 633B
- SHA256 a10f65d7e0d56702d6f08850c8bee9bd51af17f4be051900ff2b88c9217e425f
- MD5 f1f50fc7b156489a7f5ea400bdf4e360
- SHA1 b7a57e1afc583451e4e21e27e25cb2e306e6bed0
- SHA512 85fa5bd86a3e478b50a642fce45e6da4137898bcdb320e5469c8bc419402ea5eaa952a41b171a478ac9ecd38f58510576ce35d1847ed89bca8bf10c5d483fc17
- TLSH T10CF0ACE23A11B4089B2C1FEF6B8474665FAE8C87014DD455E1CB905BF4966BC6F17404
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\CertificateRevocation\10470\crl-set
- Size 1.0MB
- SHA256 627981aae32aa4fca0851b07ae3a91a551a2ee8085c21fb25e10bd9563cc351b
- MD5 2b4ef9f47cf542e2e01669eb205c81b5
- SHA1 04136769b42d8120197b7c45da494bab76074022
- SHA512 bd2bd7b973a623f25af78e6b00af49b1a736fd9e3c8eba7ca93459067f10af0e864bb8807ba3691304c55afc89467092d908e9204fff16e6e74b0c3efa5d6d9d
- SSDEEP 24576:b1eR+JkXKzDDB28VxIBI0N7yNnD55sK57U0/7lYN:UMJPDwcxd+7yNd5sSt/hYN
- TLSH T15825334FAD4A7728A4EB119A3863A14A3F470DD6F31C6C9B09C7432748D60D2BBD587E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 6007b1bea8b98210452fb8e08ccc4ea883b1cccb1e52a7b6f93b8f86f1c9fc70
- MD5 5c1ba93c5a9e288a422d36fd3f6dfa02
- SHA1 f38e43d18214ed3e72765c620639da8f1d43f655
- SHA512 704035eeb8a85c33e4207a42f2b5cf629f6be71e0c0754d7978be824d852050effd2356390f876aa5e01eff128cebe5c4dfd7876704327a40a03936eca3ba8b6
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\45cb7a91-f2a2-41cf-bd62-dc47d9fd47c9.tmp
- Size 10KB
- SHA256 5bbe0a8a535059ddbf84e2d71feba16a1ee135bd216e08a54b0d8859e2865249
- MD5 f9944bcc8c6b3974a80831eef6a564b3
- SHA1 29e970daa10d11d6431115170b200f73357aab21
- SHA512 2cdcc1658116ccfb541019817a9fe7c0515744ad1a5d1e34629fe3477346d78c4beec894ea719f2bb9c3feaae7cf9b897cf68ec233879e9959fcc0d3348ad8eb
- SSDEEP 192:cnv/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOmxAcECxyIsn2KgW43:YmX+FKGLWA
- TLSH T1062242879A250DBB0DD25766F654B7ABF6F50010A253AD94B7F8E92C14CB2CC3023DA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\8539d610-d62c-4823-9c78-e00738b6d191.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\8d4ceb3b-aa5a-4c46-ba61-53251caa016f.tmp
- Size 601KB
- SHA256 4357e7252eb7a2984f987284f942b7b63e54318dc18d2391687c42ffb4d898fc
- MD5 62402e00359942c29f873d4ca7383644
- SHA1 a16967ee8ea94d5b475760bfe4d54118dfca8125
- SHA512 6ff8b2de4f214ea90be4a8f54d4adb5637acb5f2aec87e911dcd48987eb862100324e36a3d0526af168bca7c37a2f326fa2446b5c9d12d50952f066266154def
- SSDEEP 12288:TcyioFgVS7CQlBLGil4S51cuM36Td+blVSiYiWKmcm03TgD7uDmhEZmPfQUJd/60:vXx64
- TLSH T150D497AB868C2CBB5F8136D960CBBA5940C2701FAE8D7E59E780CC4CD2A55673B7C117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
- Size 30KB
- SHA256 2ced988c5a6154d120589abf5d21906209b081114607709f8ccd854bdeac5810
- MD5 2ebd1601fb5d80b116ab0dd3c7714ffc
- SHA1 2f2a1e06974511bf73ea55d1ba521a4a0cb87691
- SHA512 740b11311c678a2eda1891137413c0b0889332129013ca381ab6a50f31177b1db9f9f3815dfdcd3444bc2ab322bb39d2a65d348dd656c2278c642eb572cea2c9
- SSDEEP 384:kzy+x+mHAaOY3Z+ex+mWmJ1HChaDv8eHSYR8:jBba3hx+7mJj4h
- TLSH T133E2C667C5021CBB807503E674FAA61BF786232F5A848E47367CE84DDF719233166B0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
- Size 245KB
- SHA256 443aa01299570311e06c5b11797eefd9c24634bd6eba7514b8150f2e28bff82a
- MD5 4d54744b3922de31a783759e8e8ef3ff
- SHA1 6c4a8c4d55ed4300719d7ccab12c75de5feb4b36
- SHA512 cefc081655bbe8200790cafd9521521d97c146c918b356a786bf953e04a0560363e42fa16dda089eb0f3edde2586b757d6b700655999255cc291e1d9d252d438
- SSDEEP 6144:3pPub5CbD8AEVGRNoeWKgMIdX8ZUFgOdpXZG8RI8/e1FAmG:5EM8l6oPKgMBZUF3V8UhoFAmG
- TLSH T1D434239488624850D68F65FFB42F28ACA5D297BF50ECD76E4B400FF521B7910CD27C9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 6KB
- SHA256 9c102bc0b38c25bac5d5f4140fd939c331b64905b17d20872c1ecd0fffecaee4
- MD5 9dbe53ceb5b52508102079c0c9ad2b36
- SHA1 71a3b28786b3257c098aaa37f03a321f5f74f6b1
- SHA512 99c0ad53610f6a2b3628a7da40ba4229c3f5c10763f85e212ef97e3daa6d0c64b2a4ff73ad0b6fa63d9dcd88fb52a7a5d8f1436ddc2736980cd485b364429973
- SSDEEP 96:+JU5i/Iiy8yU6DmwKso7vCWma9peKbMhkO3PAdwqV5vMGC2t80U9ecoc1t9bnK:+XIrU6rToz9pRbC5qaM85zp/K
- TLSH T18AD10B76007CD135FF6022F2F0C019F9B679D248E0267F5A1AE985FC185FB7A40DA1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 aa354e9199532c1c54730003700cd3bec15ba6519c0dd5b545e5c72423cdb66c
- MD5 bf1963f1f4a0749d94992cf94a76f006
- SHA1 d8b2bc194773476a8b1dc29ee519c005171689d9
- SHA512 0580cef297ba57275592d9dbfbc07d716e613f4d621dd3d0ada9903925e6bc5be7414b3ce7558d377c999e9d7cfc952243284c49b96dd09edd6f33086e080c6c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 264B
- SHA256 c7ba452b990331068d234200fd4284326f9d415bc13914ebcb50fe3bc33032e8
- MD5 483d97c2aa6b40881962049faa97f89e
- SHA1 49173e897671613a0b9895a3a75f24846d0a6d4f
- SHA512 1f0471dd201e8f79121d092380c850a6afe51cdb078670d4e7be00bd114e2a01afd88758dea1c4859a70d15adfa90a51f5216249326dc5ec941b0c906c817ca4
- TLSH T14ED012E840ECE00ACF66023872A29D591AE42822000D0B47A8D7A2FB1E9F6F96630244
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 1b0755a60fa189d8669f0534418714ebd4ea3aacfe62f9cdf9e64772f7e8cc21
- MD5 72a1d194b3f712d7ffd419da36703e53
- SHA1 2cd9e9517beb8d3ae23c14b0cd3424ba20e64421
- SHA512 f4f2a00d083b02d96ed88bb668fcf1558df9fbf786d3b2ff5e6c3f7cb5689b618b8969873c6f02451bf59d313692155dcfbaa612621c867b232fa827aa19b70d
- TLSH T15F51A94B419CC211FFB059B774D129B2F37A9289403B1F1B1EED59FC149FBAE101A25A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 768B
- SHA256 f99ce71a9ad6614bd1f1166150f3f362a80893cc8673ea68b9e8edc0bff6e8af
- MD5 153b72265e0f45aada3cdd0dd7311646
- SHA1 c16c70dcea42de29164a730b931a0ce9684b253a
- SHA512 c5d61c1e8ac0e1a5f6e59037b03352f33adb5f8cb833e722c9d8bdc3224ce8d0cd51ed18137c05e10f0f13bfa75167389cf95454823a86239b15b8ca75fff429
- TLSH T10A01441E82ECE200DF1802B478D26A0425F3A815404E27032EDFE0F53B2FBF10506B46
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 7KB
- SHA256 f3c0c6748af97acf16b8bfdcb997af403a3ed3775e84aa697950743b8b12a68d
- MD5 6b3e28dcd095236ccdca6370805410af
- SHA1 03d32d2b42fec4d80fbe92c073ccfaf209ef5c79
- SHA512 04c9b01d9cea8a3be0d1bee11e709f4e4fac22d436bb3b8cf69346a46013c647e362e380778312b8dfb51aa165dfedd8876a522b1a145604bc80a10627647cae
- SSDEEP 96:BJhhKQsq/eiy8yU6DmZGJsoCvCWma9peXbMhkO3PAag4BqFTN5vMGC2t70UplVeX:B9erU6PGou9pgbCdq5CM75XeXCC
- TLSH T1F0F12F36417CE035FF6426F2F0C119B9B679E248D0267F0A1AED84FC155FB6A40CA1A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 6KB
- SHA256 3f0b1dbaa32786b39a62100912896d124f394daefa88f4f2440c9e0634572f44
- MD5 addf5e68266510df8ba9d197584dface
- SHA1 669dc8d4181dc4db745a634ad2a0665ee0fd56d2
- SHA512 e1092ccc6c4c7189cde5a621aa7e98106d9549f926f65ce3cf2a5d2bb8c5752acbc7c73dbc1da154963b45ea015e3a27b1573ce8f4a38ba7eb70fec8b47e6d0c
- SSDEEP 96:7JU5i/Iiy8yU6DmwKso7vCWma9peKbMhkO3PAdwqV5vMGC2t80U9eEoc1t9bnI:7XIrU6rToz9pRbC5qaM85Hp/I
- TLSH T13ED11C76007CD135FF6022F2F0C019B97679D248E0267F4A0AE984FC185FB7A40CA1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 7KB
- SHA256 d61de3006417e078dbbc08e8995e02db86aa2938a4cb57979e2fe23005f122ce
- MD5 f24e6f75099f94a6586432aef80f4e28
- SHA1 41ed39bdf10769b2b8c1cda6cddd04df7e13df24
- SHA512 21668247d20f54bd88bbe693e9cb1adbb57b750c2a3507f4bacdec1e3e1513eb759ad145fcd5a18889101ce923d7c0377647d8213040fbb49295b59f9f5b4c0f
- SSDEEP 96:YJhhKQsq/eiy8yU6DnlZGJsoCvCWma9peXbMhkO3PAag4BqFbN5vMGC2t70UplVQ:Y9erU6uGou9pgbCdqxCM75XeXCO
- TLSH T15EF12E36417CE035FF6426F2F0C019B9B679E258D0267F0A1AE984FC254FB6A40CA1A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\wasm\index-dir\the-real-index
- Size 96B
- SHA256 9f5928d4a6a4d6aca6e19d38094f4f178a34bdef490402c71af92a7b46fe3c43
- MD5 e15151fc787ef559afc294284f5a055e
- SHA1 7f480aa1d03a6576461c7f66eb4ca8a02307880a
- SHA512 7ff045b4839afa618fe6ae20df37a2f96a168b32379feaa17ee780eaa0c819a902f179bd97aa3ddcd9cb8d43db1545625c588c6e4ac145979c57a74b9bd05192
- TLSH T1ACB012101A5DD173D70C83B175C0145670F408100783046100C004B8500D744C411906
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6000_1295522476\CRX_INSTALL\webpage_content_reporter.js
- Size 113KB
- SHA256 2f60af001760683ef280d0e8fe5cb7d91317a3c2751de436b7547c9798f6ccfc
- MD5 24af21d2d9a63a18dcc9f1b2eb5c2559
- SHA1 34a3f5a58a01dee276bd67755ea4b7c45a37e9af
- SHA512 ca8e11123cf860984ccfa8de403ebf1e7d3b08bf332768093ae035d3811671a0fa256947cc4ac4f0aeede6a1cd45f353e826539cc0e51b750f37420262ec9479
- SSDEEP 1536:bT7n8Q4Zmw3wAz6GF24lGMFKCUmYgiUvyzeV2Yv2y5y7plvnxc0P4MVHiBoeq02j:bn8qi9lqkJtYganx34MYWVSQJaTrY
- TLSH T1C7B3E9C97392B4AA528320E106FF0547E3365C595C0A5038F664E4DE7C74AAA62BFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\5f2d12d49f175c263326.woff2
- Size 127KB
- SHA256 01a3054a93060a53b95ca456ad1d1a8e8b50e5bbf97d0fb53c4b54c76352a2fe
- MD5 585e41e3f7a105a567965df065f8bd48
- SHA1 722e180610bdefdcabfec8145bdc2b5e888c9ede
- SHA512 4ccbf828c7a91150269d10179bab2814e51929979609dbc18397d86821ab2c9ae42633847499d35ecba52a42561dc2df06be4504c638285ad8da50ce8368b584
- SSDEEP 3072:yVTj12hmE9IlyrRHsZOmCTZCMGzZmkVc4hEkmBrsYmlZQvX5MNO:OTj12LjHscAMGzZVu4ekmBrHA6vqO
- TLSH T170D312EF3A87DA0242A27F2739265605500473FEB66C234C54B9BEDA1B3412DDF851BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\_locales\en\messages.json
- Size 9KB
- SHA256 ef92dac172ecf2a99d6cb8fe37ac749db57a665d751957ed3fa951e260059d99
- MD5 8bbe3d42c1ed93ea3b4c2131803d6ae4
- SHA1 ac315fbbf67ef3361660f12d77d41bba28dd6c7f
- SHA512 1311ef9a6684b04ed26e8e52cfe7f13656292b4a615c3836bfb9d4a1b382ac83344a149af4260079c1b8eb6f587d53b666e40ca8e6cf22dc9d8db7ef0c3eb456
- SSDEEP 96:wGUnybhvKO6GWQD0oAmH5f2ZfF3ybMLCeXhx55jLUVyuZ2eJqHa:rVbVKVhDI5fSf0MmeHJu5w6
- TLSH T1C4225119D2A42D6F43B3566778A93701F28492FA1600A88F7A7C914C8FBBD6B51C3F1D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\_locales\en_AU\messages.json
- Size 210B
- SHA256 6323d8f9a349f093f742e8b4df973a1de0a4ece965a6be043d41e23a11b54b66
- MD5 982d75bfdf8a5cca6162394faa6fca32
- SHA1 50ae7d605c7734c15a0be409b22b722a9e3eb3ef
- SHA512 d643db8f42490509744bfa574d38317ff1c7084663421a49d56ade789b637839a060e16c130462bc5a8685b719eb8ea6e654e701da93e3ae6cfa1006a368f90f
- TLSH T1F4D02200840AAB6B0BB9178134B473C0F5E0537C65A0D8937C0C512C0F7EA8384CBF99
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\background.bundle.js
- Size 9KB
- SHA256 70ce09a76aebfb28fe5815e684fd6e608919d0291e39006250cc3677afaf0edd
- MD5 7ec38d6728ec37c8127a5dec2b2ce13d
- SHA1 cb79d7e8855367a3a78c4cb0c3234b0334384343
- SHA512 888901419bd3f863ced16ef1a1f977d4f99129d7625d6832abea235bdf60839df1801546851d55ba7c0058883bc190acbb0888b085e136bd0c80708e00ee32dd
- SSDEEP 192:Vht00/ghQqLjn0ao5xzdKIL0eOnRktXUcmT6dVeXYON7:Vonpjn0ao5xz5ORktXqT6dcoON7
- TLSH T14822643E5010433DBEF77B85B91E9025AA35452DF82EC1827EDF8B1A354DEDA4227E06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\d64c39378d51a2e7a352.woff2
- Size 112KB
- SHA256 4637351453a2b3587df38afb90f566ec7233a27afbb395bfbd1f0c0fd7744eda
- MD5 6ac3fef926f6ab1b985481590aa0b4e8
- SHA1 46cd5a799dde377204f90c7b826a7063ddd494a9
- SHA512 cdc81ff8c2e3160b3cb027693b74438869b0925afc4d7c4ec86950ce501ad33140a5e683f5a399dde17ea09c7cac01aa3c0c689e613e93763b5e70b03a9b7dd4
- SSDEEP 3072:x/t0i47RrOR9jxQM6/dCYUpoKCnyvTbr4HkBH:x/t017RKP1Qj/zUt0yLbrPH
- TLSH T17FB312357A6F1C877AA7B63FAEC152D3C1D742C084795625258D2B1CE27F7908D87231
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\icon128.png
- Size 2KB
- SHA256 db3c660133b6d5c2e93f2f6862c32926fabdcaad11898577e1d51c19f9003631
- MD5 dafb3a9e7b2702f75957ca6473299c20
- SHA1 7a5d2107453389f9b29deccc9a31f6b6ba4ae595
- SHA512 912eaa5c28aa0f33b9cddf83bd2ccc8ea1c6037fc58fe2a262d588ce670d6920dcb82d8d40726c8f590d80066b184fef67b6f21c9d9acc436b8ba885f4c1ae39
- TLSH T193514CA933730E68E417D5F9831F2007A9BB73B31B5C2F4D0A6ED6878451855A28A1F3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\popup.bundle.js
- Size 282KB
- SHA256 9ce33bdeef7849916daa5d294519fa313f31612416fff83ae00c5c8ed70ad892
- MD5 e766c54dbdc9fe44efdadeaf1dfbba87
- SHA1 afbf2292bf06170d875cd186e0ec800779d8a090
- SHA512 f826e58293f1fdd0654a85645ba62cd85818e0ec77f3a70154e7f01fb36d32bdd7f1f533e734ce3487c132f4aea08e6b7a762ad4f7ced65f6220c870ea211742
- SSDEEP 3072:xhUCU1sbJ2bGQgnsfPFl8DMsPwu4M3Cldib9vMPwEvcDF4ypb0J9VPCX:8CZ2bunsHYnPv4kCyYVPCX
- TLSH T135545CEC3560F1A96AF742BB147F5807733D281E380D8950A215FD98B4F989DA13BF98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\popup.html
- Size 259B
- SHA256 863258d0413f0f1171cc506bdd28d0928cc9c1394e057046fa9fedf8ca0e01b0
- MD5 e0566eec3acd9775e65e99219171b405
- SHA1 a0eef7ac0d31bac39d459f8b4e28a63564536a9e
- SHA512 b90660558f7d2af19f758c898b4e98a821967e9727f5968e742c4138ac37b785d06b878e1039017c534f410ed8df11a77b44290cbce3cea96b55bcab2a078d9d
- TLSH T1E4D02BD1C865841C42A04B792C91A21C0889DD10EB828D0137C950B81CC4B09CC02148
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\blhcicojjhpbkbjkcfmbpjjjndljmfon\0.1.70_0\background.js
- Size 129B
- SHA256 60aea522f14510f7eb2f882fef11d9f13f01717df67ef4b85abd598b94c43f64
- MD5 369510ca38c6e811a0a3c106fa6f8cec
- SHA1 3fcdd5ffc8ef38485ab037148462a96a54a96ebf
- SHA512 5a8825439725abe5404872f7a5bdf982f707174a2b3f95b93f12c08e664790ed0cd01f119daedcbdda902074b1bfa79c1118d809288226a3587f076d3a3870b0
- TLSH T167B02B4C0722317D905219F72031E1922A01403104601003C644A2E45B7974C00AD712
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\blhcicojjhpbkbjkcfmbpjjjndljmfon\0.1.70_0\index.js
- Size 328KB
- SHA256 66d59d2f42a94a56770521a499a544fcab1bb7a92a884961f85bf056c9c6b5fc
- MD5 47c6ae5e9f106d77ffa55addbb4f009f
- SHA1 23e7c341eade8c9cb8155eec96276bd7c2a7ddd5
- SHA512 01fe4beaeccd8bcc03618b078d5647814afc86b052bc181cdc53a8dfa75550681cae19182dab137a7b82dc2c0663e33ae02d9674ebbaf20b4448ab409d2eee82
- SSDEEP 6144:zcX2hrelLXJ3fRfEOZ2ZT2ixks2NnHtcGI6Xdi481j8jVO81j8jV7waTtS9jbjIX:zcXAelLgOy47V6/Jr
- TLSH T1B5645CCD3592B1745AF312B610AF2507B33D691A240C8850F615FAD978F885EE27BFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\cos-bridge.js
- Size 173B
- SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
- MD5 143783193921e1837732e486606ff9a0
- SHA1 a8ca45aaa634df3957187cf5622eed0df97e15ff
- SHA512 cf4d60b699edb0d417a6f15a38cde0209977e1a5871a798040bdfa525f03ff67fba8f51cae3b112eb5777494fd7e601ef04190541ef4f0b4ef145af286daf37d
- TLSH T1F3C08C1C5A80BDFD6012739A66FEB4511BA7326AC0143221BB15CCB41B08D6B34BA789
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\cos-content.js
- Size 502B
- SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
- MD5 aff453c164b18b5a3c88306549db09dc
- SHA1 10c162188db62c721df63930a6a656791b4dd4e5
- SHA512 bfbf53868f4382db6873d4d297938b633d029fb4c4e05a3ad7fce75d45c7dc6091a9296f3e42dfa507c614507207c2482af5aabb8d7f0840c8c5df2fa05bc499
- TLSH T146F09E57655227F4C87044AED7D7351613713AC2706842582155CC646CEC10A2378BDA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\main.js
- Size 46KB
- SHA256 251d7ccab9ed6ea88bf36dff429cb6e1ce196465451fa877c63b97712cb20aca
- MD5 d443192e28af61f9602cdeecbf03a305
- SHA1 50f0140152e5ed1e7ebddac6816361ec5c4784c8
- SHA512 9437ded3bbd92724691b83ad1182d0329ce34aaa5dc18568811f2fd9cd76ff9505147dd2ebaba49f44fe6bdd9de213069a3f8e51a890b42fcab42f12c6f59e17
- SSDEEP 768:kpAtn38+HSEWA5W847Zrr8VES3vf2dJRy68hkxkh6GRohqkVQZm5pEKr4iOqsVne:0c38ZEbWXVGp3vf2hmhkeh6/hqkKHm4G
- TLSH T1092319956258687E0AC6D2ED925D1313912450F8691D84ACB33CEFDE2A0FDC6127CFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.28.0.3_0\favicon_opera_one.png
- Size 2KB
- SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
- MD5 723cf51fae375f557b2f891a2ea603ef
- SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
- SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
- TLSH T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.28.0.3_0\manifest.json
- Size 3KB
- SHA256 5525ca28f0d8c0920fd72135b6f83a14a095f163e472b6ff0693fa027de67181
- MD5 bd1d054553b3f30f00fb70ec63cca3f4
- SHA1 78cea0aa02b02ee70981eb517a2f6d8f932ca9e0
- SHA512 8fd77d48524007a5fae7e970eed62aba0c12941b84e840772e4ed74cee417eec85f0941b822c25f6a09ff11eb91fbc446894ee4a1ef6ef36c893f3f4a6c7fdd8
- TLSH T173615276E4DE597706B457689CB54306F210936A8B8D4C4F7BFC9088CFF9E60205A51C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
- Size 86KB
- SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
- MD5 c8b19bb6ffa9ba9d07b010ee2483d6fe
- SHA1 db1af85512d439f749c1fd64fa8f7dfbbe5f682e
- SHA512 841d08ad1dfd23a85b3749dcec341c665457e0648509821ac140fe0ed753e8b0ea4a24e7b6ea5f06958f4ddb0b65f7e58250b783eea11c321fb975fbea63db46
- SSDEEP 1536:PYHgfauhQ7F7yEPlL65+aSWr0WUvpyiSBwhmSvGj1S+f8+:PYAiuhQOokiSBwhmSvGZS+f8+
- TLSH T1969308CDB6C7F26293E390AAC03F101FF23A6D19740D4454B626DDD1782658EA236F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 2ab8cc6f56fb252cebe597a68724d4a60e604f87014a71f27afa865fab6309de
- MD5 e917d75349089798ca6f6283c8250fe3
- SHA1 636cbbf9fc5e10b751250e6aa1be86db0d825c22
- SHA512 0fd2a25e8e04b9ab3fe87a342d07e89460cfa5bd41eddaab12478407e42581e4572250127e1984e45a41c2880d614e791bf15f958455790249ce53455df1f494
- TLSH T197515CDA900D8624994B387E2C8717006CA1EED04B1D121E9AEC1F992F2DDD6AB5E4C9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
- Size 1KB
- SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
- MD5 56868fb04ec3f6436a450b0be0c49947
- SHA1 3114eed847366239e1b72b45af410bfba81bde4b
- SHA512 a2211ab99b6d04b7f0a7c5dddeb8156c7c24e8ff0b2860cbddb6273d25089c7e066ea6be363a610553ee2b275ba4f7750f9456b30251000596544330d8262dc7
- TLSH T1CA215B5A35F53633026149A2670793CEAB0C11EEA4BF347BC4918374AC344FE8394DB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
- Size 839B
- SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
- MD5 112b4a4c6143b507605be0de6f359ff2
- SHA1 4ad368eac9b4965eb0389d2da4b2723016c8c69b
- SHA512 9afaf96cfcde9688664d33f37168b9c637e414c3fb768b0c70cdb19cefcb42089e8f464a8d32bcc21a140414c0557fbc02c12a29a5eb662405d55ef7f1781b2f
- TLSH T19301B567C4255C230342217CE42B0719F970E14B6E646E2F3F9D845EAF5E47EAA7238E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\2d17660b-717a-4ac1-bda5-701be4afa535.tmp
- Size 27KB
- SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
- MD5 c7828175f89c5a3ada16fc7817c80af8
- SHA1 e6e6f4dd36fb419cb311093dadf8acb61db1d30e
- SHA512 b68e7b8c42c6d571487841ad41148f7452e970b295516fe025744f7bbc8d0d7986699b41d5f71a6b43fd4ac28b6a216e24c19820ab01817c4bcfd50677fe7541
- SSDEEP 384:OwU2+wy7Pxdr6zfM1dGSwrI7dG91rfprU87MJzeax:f1+V7jrI7IeywMoy
- TLSH T15EC21EE360CA08D9FFDF25F155861ACBD09BBB774A262178138363A5D3E4D20D5ABB01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\382d3803-c75e-4c2c-881c-823616838630.tmp
- Size 27KB
- SHA256 39bd99139f46534251ca30ee1eafe846edde8f96356642e04b68a9f2af9799b7
- MD5 4b0f69f3622e2fc1950b2116b5d46c41
- SHA1 d4a08faa52ee3600fc70e38d915050bf06c5b80e
- SHA512 5926cfba0a17a4b65773cb1632fdf5da533a158fd4cd58e63879e16e91d7dd222214056941ba0bf80c654764bee2c5b7dba32468aa933f26da74f5fe80b466be
- SSDEEP 768:Xj9HowGSjwSeroCPAmQn6ctJYcBqR97Lv0qcG30hhAd2sS+:z9HtGSAGqcxqcEdj
- TLSH T143C21D9362808599DC24AF388436DE7D626B6FE83D30F50AADE5BE773B732C25015543
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\473517a7-9135-4eb5-9750-0a7fa3c26337.tmp
- Size 27KB
- SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
- MD5 dd8e6df155a2ff5f53f81679d8701c70
- SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
- SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
- SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
- TLSH T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\612dc786-abaf-406c-b4bd-001d6283c566.tmp
- Size 27KB
- SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
- MD5 20592c0bbc8cff757ec1ba508ee277bf
- SHA1 7465050f95649e3bf662ebad10de27a9bef6a3dd
- SHA512 c50dc6adc0aa4f0b80bfcc9bfa774c5d1a14e1cd3e889c924d3bfdcfa16c96b34f80dfdadde662ed87c0f33b37f59eaa151706e949641a24104c3583fc962cbc
- SSDEEP 768:1VUpNy4heVwCSvh97oYHSI4R7VIO8BkM8s:3UpNy4heVwCSvh97zHSR7VIO8BN8s
- TLSH T149C2FFC2C8C54658EDA95F3460770D3D466BBFB9FEB8B54E8A8CB0717BB32C20426546
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\8b0b1a46-a890-4937-a56f-5b7a1ac4e6a4.tmp
- Size 27KB
- SHA256 750f88c1d2cbead44ca4a3e2d52dfbed8a5dbe149eddfb63e71fa4c6380efa93
- MD5 309fa4e874c0a1a5e6e6fe129be59481
- SHA1 5ba36cbd85535fa73e355d4bb72f8092e44a7c98
- SHA512 ec253afd37c12a6fb4ba6c68b2fc2bc507280dfa0520e74fcc12217b2954a3f2f50d4a5a2aadcaa1c44a45bc6169d5e1ed7386c90d299639ec60b40c76bc9625
- SSDEEP 384:OgLUqD6YHozChGVgJEgjPGhdCyLEOCfMmGZFh0hafgnvvoN9zjLA/xFq:d6xVghj+XmG3G0g+2
- TLSH T119C2AA84B26094E7F46822F4C075CA243D5AADE4F1B393D56E2BBD68CFFF21B1960944
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9f07d47e-0fc3-403c-8651-a8c77c2eebb9.tmp
- Size 27KB
- SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
- MD5 1f17cac9ff7b6851ed5bc95c2625596e
- SHA1 1a2f1ff883d5110a96e252b88784a00789e88add
- SHA512 87539de5cb743b9823566a3c9bdfa8e43c4d78db761b40215e3483a8e0e155af22f057c4de290d9343459ba44a5a5cefacd53aa4fdaf032ee16f88e7039157cc
- SSDEEP 768:+IsX2btgY8GIZbTbg4wjs2W0dWvlSNqv:+X2btg3vZPV60
- TLSH T117C2D773FF4CB61EC5C832B4C04A874561AFBF8C61725607B97C7E997B4E0438856A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 10KB
- SHA256 3e7765a6580d0f6b60662e6d60ba8de12f9934b78a76cbf0537a7bd3bf845251
- MD5 55ec426185c738aae67931b1e16d34ea
- SHA1 52539175245a4a757fccbcd10c4425e9ba96b111
- SHA512 5964d44e5e0c0610bef9bd548520637a59bf891ebb34454236e9a2899a628763a4030c8a7b0c369716bdbed754fc568d00f1185574a88e048de73ceb72459ad9
- SSDEEP 192:D6AJUcJh3cBeTq6MfJzKDxxjpNJJM4qxk8opQp2WAOInmGoVecxbsVUbaRylrmMZ:D6MU4h3cBeTq6MfJzKDxxjXJJRmk8opG
- TLSH T14A228EF7C3E9862DD82652F1AA187E6FCE6E0914831C3D2AC9D59F0B97D2471E24074E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 7KB
- SHA256 7c314eca583fcc5eef0e184f2a23bf82b165498b1ae3671522273d79afca45cb
- MD5 eb8edf5203fca80ea7f3bbefdc19d343
- SHA1 064b9a7d391a55d88379931e040d7ca21e15813e
- SHA512 2aad1d5060d528ce6f11dfe25fdff85c66498c1cb75584c2352973c6c625de77968d63e30dc56133b00d83a5f7861632608daaa4676cdf80869461e1bdfbbb8d
- SSDEEP 192:D6AJUcJh3cBeTq6IxjpNJJMcONAqxk8opQp2WAOInmGoVecxbsVU9x:D6MU4h3cBeTq6IxjXJJdOumk8opQ2W9X
- TLSH T11EE17CF7D2E9862DD82656F0AA147F2FCE6E1914832C3D2A89D59F0B93D2461E60074E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 9KB
- SHA256 23b933ebc130c8c3a5a9c5bcf2f25732b83236e34383f622e77fc719b439f8c1
- MD5 2720e64c3d446cb2e369490b61f462cb
- SHA1 7991548eae7e946c30a7f649a988c58b5cb70035
- SHA512 502606bf25e011a9e633579b3a24226078d612113f667ffcdd81f396f2cff5bb514b74268896e87c619ce1200d44cc9cf195e6a5beadd237483e70cd2b0b029c
- SSDEEP 192:D6AJUcJh3cBeTq6MfJzKDxxjpNJJMcONAqxk8opQp2WAOInmGoVecxbsVUbaRyg9:D6MU4h3cBeTq6MfJzKDxxjXJJdOumk80
- TLSH T19D227BF7C3E9862DD82652F0AA187E6FCE6E1914831C3D2AC9D59F0B97D2471E24074E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 16KB
- SHA256 427b10bec559c9b0ef06bad2200bb6c3a72308455923fb755f92204dcec4553a
- MD5 aabba8454280bddee19ef614de757e4b
- SHA1 e4a9812e36b0e4bef17425469139b69a4ccd35a5
- SHA512 69a60a9bffdd20e77c794a86303b6f0c6ff5db533a8df7cdcf5317ceb216b84c47cb63e6bd7c9a7ba1cbee9b26b419162bb40df0f35ed6a6f4e7f42415c17354
- SSDEEP 384:DvoM93RgeMkZXfJzKDpXs8D2IJx+DiZdWqxjARmG8oGf2W9ImGoVRcRSl3UbaRyL:VP2s18be2Q
- TLSH T1F4729DF7C3E8862DD91256F4AB14AE1FCE2D1914832C3C2AC9D5AF0B93E2571E24175E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 16KB
- SHA256 2bdfd0045b9bfa6519cbff298db1330b2edeb67e9c182a281ee03dbf49179da9
- MD5 74732a19f41cd5cae0f74bbacc1d6750
- SHA1 5c6b80fd6c7275303f225f03e4e75d0e2d17c36d
- SHA512 4fbfc174890f5b943dd816e912810871461ffb66372e89e4817adcc269189bb48d71bb540fb9a14b6b7790106bf5dc46571be86bacf7390aef70f1a68179ad50
- SSDEEP 384:DvoM93RgeMkZXwMuDzXs8D2IJx+DiZdWyhxjARmG8oGf2W9ImGoVRcRSl3Uud8nE:BP2P18b2IG
- TLSH T1F3728CF7C3E8862DD91256F4AB14AE1FCE2D1924832C3C2AC9D5AF0B93E2571E14175E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 16KB
- SHA256 85f5d0c2b60b0443109a54d4db59c5c7317e6a0f53bcfecc4e5cfe76753e014c
- MD5 6aa8ade21489138431f9d0f433c09d07
- SHA1 b3d4ad252bb691e0801fe41ed9b307ad0c3278fb
- SHA512 4f157901bc838347f48c26924eded1332bf08e64823d9c9cd39d0eaaa13e10fe467f0f58ebfaf83776de1b854cde9b17b06a1bbfbed7210c8f116bd3e4efd036
- SSDEEP 384:DvoM93RgeMkZXwMuDyzXs8D2IJx+DiZdWqxjARmG8oGf2W9ImGoVRcRSl3Uud8nM:mP2P18b3IJ
- TLSH T1F1728CF7C3E8862DD91256F0AB14AE1FCE2D1924832C3C2AC9D5AF0B93E2571E14175E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 06746fbbeb83c9e303e19468de0f95fc9ce8d8f461cce66c9cbbbab85b7d3144
- MD5 4b238e50da7584f855c5f17ec9d0ecfc
- SHA1 bafed312bbd370acb3f2f382974e2c2679f3e58d
- SHA512 ff1b31b3eca62b51d38fb66b3411d3057b7ad88c4eb72bfb7bf96c34b458f2ca30ba27b9f249f593b3dfd709865d0225e7606ce45b4cf2e808465cc17bd959e5
- SSDEEP 192:s7VdnL83kH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOBh+MsbodrC:sP3mX+ZbGz0EaaxX05
- TLSH T1E162624799214DBF0CD6972ABA54B76AF6F51020A3536D84B3F8EA2C11DB2CD3023D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 38dca352d14b34b1e19fe7bb192cbdff9882d4be2de9c06bd1bd98163ca8667b
- MD5 21d5463d5bb8b819b15314aa01e16065
- SHA1 e9385c66a968c59b6e476d7c857a878241743b1d
- SHA512 21ebd4d037b42bd833dbdfa9a3e89224a24c0e432b32f1539d04c96ec1457130d3251f5153103e0eb7f7684b5c3ddb566df7cc0d30bf5477752b3c2b40e9b515
- SSDEEP 192:s7VdnPRH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOBh+MsbodrQhZ:sPhmX+ZbGz0EaaxX05
- TLSH T1CF62624799214DBF0CD6971ABA54B76AF6F51020A3536D84B2FCEA2C11DB2CD3023D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 13KB
- SHA256 075cff241e43fbb7190452f582824592ec6cd05ccc39087e6addedce77b36f13
- MD5 b87a1b5bc76dca065d72693f27431bd8
- SHA1 eb501cc374a8fc40ce2dd8f2e3d4225355e0579e
- SHA512 9390c01325dcd131f8de777996e12fa66c2106869af43d4cee4a80914aade974885ba8a3ba41181ee3618bcb70f66c9821b75ff6590cdd309e9a2650df82e7d5
- SSDEEP 192:r7Vm/v/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOBh+MToqhBu0xta:remX+ZvZ0Taa0X0w
- TLSH T1045253479A214DBF0CD2975ABA54B76AF6F50020A3536D94B2F8EA2C11DB2CD3023D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 25bcfcb32c22b7cf0c58835aa545ab176df02e0f9ad61875505234461405e21e
- MD5 abba9ce592c7ce5bd41f5481d599ca41
- SHA1 90807d416504c52b115c0eeeedfa90acc0dfc60d
- SHA512 10df9ac6d71e7f9770dce3200a1397bb34e6bc4f01f2d282220d66ac1675ae774700f79cc54b0ed0bbb0e08ec5549f9d1c4a953e93fa6737a0e67547870df0df
- SSDEEP 192:s7VdnVvH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOBh+MsbodrQhZ:sP9mX+ZbGz0EaaxX05
- TLSH T11362724799214DBF0CD6976ABA54B76AF6F51020A3536D84B2F8EA2C10DB2CD3023D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 13KB
- SHA256 cc64e14a0a1a5ae314669e154bc748c61f8c690e3b7b90deb77a1af694a32f0e
- MD5 96f0fab4202dfcd72742d0176ae37888
- SHA1 8d22760fe96087f57222a289e6453bd7b90c61da
- SHA512 e84a64a66b820e11db7678b9814360fe35072faaf969a16b4c25fbc0eab3b5c0a1cf11773a08b6f31bbda65ebcb81e7e90a4ac1a27a208870fd9d24032cf5113
- SSDEEP 192:v7Vsfv/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOB1KsToqhBu0xEA:vQmX+BPZ0qaa+X0w
- TLSH T15B5252479A214DBF0CD2576ABA54B76AF7F50020A353AD94B2F8E92C10CB2CD7423D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 13KB
- SHA256 fdc7d4955acbe51f2a8856c5a4fc07948b61832921da236a72abff2e9b842dfb
- MD5 ee470f49de8b984b8b1516d1767c7d01
- SHA1 f71a75598186bfcb4c805ad4fda47599c61074bb
- SHA512 f4acfd6b98a6dd63ee3694477360f651c787ec3b53ae1627e7bedaa11235837eb6550fe6c8ea6b064dfbe07504c0c04db531e3d547c709db88eeeaada81aa4c6
- SSDEEP 192:r7Vmsv/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOBh+MsbKhBu0xWa:rnmX+Zb50Qaa0X0w
- TLSH T18F52644796214DBF0CD7975ABA54B7AAF6F50020A3536D94B2F8E92C11CB2CD3023D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 13KB
- SHA256 c38d1544bad18fa0d908687b0cdf25e04fe4e0ce2fec69010feec9eebd7bbc2f
- MD5 6e27048756dca2e883227089a693115d
- SHA1 94487d76ade6e51a79c3074a9c76b342363a36d8
- SHA512 ac07f80adca0c4bc398c78c3c04a0bec5eb67004722011fa1521fb8c8c72d9101152413121752e3eea22ee5040a59e033118e7020a12cc7498ba2325d209107c
- SSDEEP 192:+7VdnbH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOBh+MsbKhBu0xJ:+PjmX+Zb503aaxX0w
- TLSH T19952634796214DBF0CD6975AFA54B7AAF6F50020A3536D94B2F8EA2C11CB2CD3023D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 13KB
- SHA256 cf17311d6573fe20e2280d92c2b3f96589cd6abed14b7628632bbb63b6313acf
- MD5 7b9f2003a08bc853d7893e9acbd696a3
- SHA1 ab015ffb73500bab52560a253f00d42faccc05e6
- SHA512 5b519c646142903a76a0dfc30c733c8acce10e65f5584f626458b0a15cab880d15d017054720eeb1a9f890353bab4ec6862a706d2b93a576a98b15647ed532af
- SSDEEP 192:+7VdnQH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOBh+MsbKhBu0xJ:+P+mX+Zb503aaxX0w
- TLSH T12A5263479A214DBF0CD6975AFA54B7AAF6F50020A3536D94B2F8E92C11CB2CD3023D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 4643726621ef514235d25395d6887c904a497ee14bc36cf12cca4ee5ce6d8d94
- MD5 d5455b30c234ec6a36997d9d5e216193
- SHA1 70fc5384740c89020e13a59f754e4c4445710e77
- SHA512 e349c50fca2a1d83aa559610191ca7b1c78283bc59c3366f1869e4fef101bcec9a35fdc9e7abdbc1c8d7857a3d11c5e6a00dbe624fce86da839d14f97aecacda
- SSDEEP 192:s7VdnJTH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WN5qPBh+MsbodrC:sPxmX+5vbGz0EaaxX05
- TLSH T12262624795214DBF0CD6972ABA54B76AF6F51020A3936D84B3F8EA2C11DB2CD3013D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 9c53dd0ea057a9e7c1048500ee1ca225c1bcfd903429e8c5ddc92d2d3ea91a70
- MD5 7e1f13ed1e82051d821a53d29e7e91df
- SHA1 745bd35c6b202e0606d2988cffdd3a64012c9304
- SHA512 5ff27ad62450c7b70696a4f51e4c7c73b8b490aa94b2060dd9f134eb7333d3870e60840abe4f23467b7b58187dfbbfffbb30c2d5b8d7558de4edc9b6f3a78624
- SSDEEP 192:s7VdnSmH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WN5qPBh+MsbopnY:sPvmX+5vba50gaaxX05
- TLSH T1E562624799214DBB0CD6976ABA54B76AF6F50020A3536D84B2F8EA2C11DB2CD3013D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 30cc482299337a90b8e3c6eea0c57b7e45663468f1f008d4128bdf546baf4032
- MD5 c896d35cac4774c1ce8febd0cc868f23
- SHA1 8d8693f94dbb29f3a6b811fa6ac101f3d3dfc1b8
- SHA512 a2f6e3dfc9c843a50873a387024dbf51e622a33b12584e386fe49ebbfb62ced417339a8d0b1b2f7f4a66590eb20871c8ff6771728845f404be85086b74da5f47
- SSDEEP 192:/cBO7VdKr7fP/WrcxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WN5qYabi4:/mOPmZX+5u8OsjZ0raaxX0w
- TLSH T10862728795214DBE09D6972AFA54B76AF6F51020A3526D84B3F8EE2C10CB2CD7013DA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 13KB
- SHA256 d6ba669566f433d6ad4b4b17241aa089aed5a5d1f9b3aed8685b1d604a4c448d
- MD5 acc6c237b1a58d9701da6abc6e3fd90e
- SHA1 a6841e63a878373b4b5cacb63e18e09959877293
- SHA512 c4e259cb84ad1d2521522d478cf13df17682ee7dc3a5d89a23b10fb15d822ae1516ff1d3d8d03bd4ae53ad0ad48296d90cd883e8864d47ed076b7e949a600a38
- SSDEEP 192:v7Vmpv/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOB1KsToqhBu0xEA:v2mX+BPZ0qaa+X0w
- TLSH T1E95253479A214DBF0CD2975ABA54B76AF6F50020A3536D94B2F8EA2C10CB2CD3423D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 c72bcc721e2a22627f85e4d9d9bd813ac874864dfda6aa6e323bc06ea243fd0d
- MD5 11d359c80cd194a8a577c218c5df78ff
- SHA1 4acfab68f94f65e3582bfd822f630d385e04e0b6
- SHA512 878a99ef9053f8e350b155ed43bcb51f39778b115b9828238c1ba9bfa417b590a1b3cd711cc897429067068b5ee0dc38b06d529860080c76c2b4248ee150f6f0
- SSDEEP 192:s7VdnFPH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOBh+MsbodrQhZ:sPBmX+ZbGz0EaaxX05
- TLSH T1EB62624799214DBB0CD6972ABA54B76AF6F51020A3536D84B2F8EA2C11DB2CD3023D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 52e7eab854332f9c9de8d1d74baa2fcc0921b9cf6e8ff3da6b023f78d738ac82
- MD5 eedda6b0cdbf57995b12cc7ce9f61cfd
- SHA1 d93ef6470974d009902a14e871a996671d8fff11
- SHA512 8188ca7f1c8f00a1c7347b22d9a8b7db1f263623770be44067ad15419c97a7331eecceb920c1f4af19c7568b55a81eaa4aee0d2cd6722b405c9b2eb5d5f080aa
- SSDEEP 192:s7VdnTVH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WN5qPBh+MsbopnY:sPJmX+5vba50gaaxX05
- TLSH T12762624799214DBE0CD6976AFA54B7AAF6F50020A3536D84B3F8EA2C11DB2CD3013D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 931fd2b5ace4ce5133598b597796a454f1261df41ce9b96d02d4f0b950a87d98
- MD5 ec1d9e2a044c7193d20555334386ec27
- SHA1 f01b017341f967fd54f7d767d2f615060fffcd72
- SHA512 6b4c4413723aff7b8ca3572ba8b157be05b7f1a98a4ae0026e8d691786f2963f1992002462da71a8cec441389fa84744db8ea603ceed69f7714fa31072bb4788
- SSDEEP 192:s7VdnzlH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WN5qPBh+MsboXAU:sPZmX+5vbx30CaaxX05
- TLSH T11962634795254DBF0CD6972ABA54B76AF6F51020A3936D84B2F8EA2C11CB2CD3013D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 a4ed7e16c5945d7f61d8219d108c4ca82da5a549eed408cde7de483d08bbc305
- MD5 abb81f2c2982ae4614cb84d7462f7a7a
- SHA1 dcb4857c87305c5ab50efc9277da7be451d8bf67
- SHA512 e2110942b145d71c5ba7f3b93e05e185ab229aa12f37b903657ba717e8180f7ea238a2bc91660ed29b2c4346123545342a5803d8163e2c354e4d464e71b175dd
- SSDEEP 192:+7Vdn6H/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOBh+MsboyJqhBv:+P4mX+ZbHZ0VaaxX0w
- TLSH T15D52638796214DBF0CD6975AFA54B7AAF6F50020A3536D94B2F8E92C11CB2CD3023D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 7f6f90a037616aefdddefa87156b02a45f0457ce5d4affaccfe8e78f0010a3ae
- MD5 ea39181772abdd6e53531285d36efb27
- SHA1 2cdd8e08d98316fed7efe05f8f050f5e21ee6f0a
- SHA512 6b2c457827f100328ce29f8f0ea1e0e5c733471d1942225314f5f1825ea83633c92bf45fe6f883ced5b00a44b70849fe6e10d414a59c299a9036fdce4ecbdf6d
- SSDEEP 192:s7VdnkH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WNOBh+Msbo7oqhBJ:sPymX+ZbbZ0OaaxX05
- TLSH T13052638799214DBF0CD6975AFA54B7AAF6F50020A3536D84B2F8EA2C11DB2CD3013D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 14KB
- SHA256 d92dfe4e5fe9a13150cf67a982b65dc6a2ffd21cbca638e0f325653e3323cb8a
- MD5 de277af880fa1cd2c570abcd2f7be5da
- SHA1 ab60c3fac39508f876889997c694ff5f58e7e3fe
- SHA512 c1dba661f701a743a143e3d64bd63a1ba74a2ae19e3b01a9efa82b7a1b205b949eac34da41fc72ee08e69cd68b23a22a1077d1fbf285d50a10b386adbff75824
- SSDEEP 192:s7Vdn6eH/KxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WN5qPBh+MsboXAU:sP/mX+5vbx30CaaxX05
- TLSH T1D162634795254DBF0CD6972AFA54B76AF6F51020A3936D84B2F8EA2C11CB2CD3013D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 5b1272b146bbbef5f752a2312ab32be885949dc4fc1e1d404aec2a495e564aca
- MD5 6b6144225d3c7558686172917ee3c6f5
- SHA1 0cef7bbd34708422a5a7f3cc46b72b9deaf9be9c
- SHA512 32fa413b6ca5d695c650ed747fa9757c0c4ec8129ee91d27e7f5f0d83183ca846626b979de85dfce5ec2b59599f5f4d967c9873d9c140aed56aabefd2152c7e7
- SSDEEP 192:/cBO7Vdn7aP/+cxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WN5qPbiA7hN:/mOPWhX+5i8OsjZ0raaxX0w
- TLSH T1BB62728795214DBE0DD6972AFA54B76AF6F50020A3526D84B3F8EE2C10CB2CD7013DA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 9fb9a3311a08cb6ea887d7e0a8e7eaaeaa23b5dd35fa210d5573860ad847ad3d
- MD5 44d612a35abcd77d7e87ab32268185a0
- SHA1 e29baa273754d0eca22cb03cca512c62e7f9a1b7
- SHA512 b290a3886f5f0f0221b7a8bee3ba5e2b0bbe33f24cac42c57147277961795887a7d7cd3e1ff1a2cfe6ec6480c4e7369247b172e771f4ea424b3753a60126a0b1
- SSDEEP 192:BcBO7VdnE6H/+cxuyUMn9ZVXMQfBpSmpLvsN71dUwwtH9D1G3emb+WN5qPbiA7h4:BmOP1hX+5i8OsjZ0raaxX05
- TLSH T1F862728799214DBE0DD6972AFA54B76AF6F50020A3526D84B3F8EE2C10DB2CD7013D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 204KB
- SHA256 bbf5521d21278565bb5f90b4e18033df25841028bc8b85d7323e8cf9c7c00e38
- MD5 1d5f9409f3383844d3eb583d7e9ae709
- SHA1 adb1719109eac487a181379935deae1d0c81267f
- SHA512 584a70050e4d63db146367e00be068328cec3ae25a6bb0e3e922d428cc96da05eed1341f6467810c3d13ecbc3459c6d0648693cdec00cb966b26a726b6a60b38
- SSDEEP 3072:eTKSIVza8g1jy/uwmx0864LKaG6odQYQO8BNbT3d0DJhewpUwbg/fUWXOiUIshfn:S2zt3PZQztCWLQMUWTKfn
- TLSH T15A243BE6D89E497D4DC997FACC7E6737C9E802505AAC2D4497FE110C03866CA102FE9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 85KB
- SHA256 18d331a8cd3dbc4e2fa49bbfc43a62182f5b22d51b0a75147bc39501cff2b491
- MD5 0e49d080176cc6671c22124ff833d3a3
- SHA1 0e67858230c8c5b3abe093fee2c68b7e5c47f231
- SHA512 91947a01d7513925f2a8e109e6ea0ec5ff805ae9292af07664b4872e966ab58d49b9a4daf7e6cf64984d648cae8a075e3052eca344c257cad3dee75829b350f0
- SSDEEP 1536:2HMHpHmSGHneH2iR4HXuAH7RH3HhH2WHEj6CH7CkvocXTpHxHsO1yhHnCHBHbH61:ESIngaHu864LKaGEZB
- TLSH T1A683C7E7C8CD8F758FD88BB9DC36671B99A40405AF9C9E04A7FA504C43C6A85203F697
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 207KB
- SHA256 d87cb9ccce3973841ff2e981ba4120a4cf92031d22a306c8913ac59e1c1bbc43
- MD5 fd70dc0f57c33e1412c991d3792ad74f
- SHA1 c2836515be02b31e00dd742f2dd5e5e71774d22a
- SHA512 724dd1f2061e36c17998405ba4538d5c7a478f5e1fad6cd8632284f81074b11bfb090576a8b74f9653f5dd9bdd63183d35deb8f602624fe07075e9c79b7e8a0b
- SSDEEP 3072:edKSIVza8g1jy/uwmx0864LKaG6z3VQYQO8BNbT3d0DqNnDUMhVlb5D/6zPGw:42zt3iFZQztCcnQMHh967
- TLSH T147243BE6C89A4A7D4EC997FADC7E6777C9E802105AAC2D4497FE110C03875CA102FE97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\68d32fed-4c36-416e-97b1-9b9843ef61bf\index-dir\the-real-index
- Size 48B
- SHA256 0e9b385a94aa0b7d062023e58dd7f2cddfcded3462d8b40796fdeb49a40a1c83
- MD5 6bcb012a40fcfd8469415a431387653a
- SHA1 9af58d7e715ba4429526c4dce31a0dfb3afc71ae
- SHA512 8396a15381b5fc082c4889d97610827c1ec32c7c659102ab5670e59b824b900d51b131b81f4bfd9ef9b6528b4c6e05f1be7dbbc5912d81175c16d61e97a2d36c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\68d32fed-4c36-416e-97b1-9b9843ef61bf\index-dir\the-real-index
- Size 72B
- SHA256 a5e30ee94fae7e2009859664bf74e045dccb1cec5b4f5d6eed37e11d52db2151
- MD5 1800b8e7194dbf5738ee442d3aaa4f3c
- SHA1 1f788d2e7ee43029341037e99f5a5fbac81abe27
- SHA512 3cbc0e33efa71d1a099f211b30bd8bc29e0f51db8baf9a35b778bd9b8aaf6229b484bcb98a17c10edc823319a400ffa94df1fce724c62a3122bdf7065c7172fc
- TLSH T1B4A002259D5CF460D50946F4387102C417116DED28501A1242D90559C95E5504AF5D4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\b5c74359-3014-40fe-8419-275828e32f88\index-dir\the-real-index
- Size 72B
- SHA256 dadb6c956ead15fda55b7ffac2c5052f6d743a46880977d227f76e2afdc340f7
- MD5 afc2f0dba417f91c40c629a34fcf177a
- SHA1 f197b4828d9652b0b206cd26546b5862f6cdbee1
- SHA512 9e86690c0b4b087070f36147b7058eb73e6caf348205362700404234b9fa3f687c2bc878c975607193ce74183afa3e0ea692ce3c035090400382f0e23098e2e2
- TLSH T194A002248186411AD3152E716877525076104C114101525352A01059AD947854942404
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\b5c74359-3014-40fe-8419-275828e32f88\index-dir\the-real-index
- Size 48B
- SHA256 48ef796d04681434c9d6f782a8205ffb727985e7b58e9431dbebb44a2ee8b0aa
- MD5 52e1607d0467c547d9d86c04d50daec7
- SHA1 a528ce68b01b287d76ee5dc36fa8ad6d76c1b867
- SHA512 4b7f72aa944ca1cf063f2347eaad65a14e08646cfaeb790879df2b1716ce00048f231db272c15f976bef2d351db4d49c0deee2f4cb89b719f9299e2a9ebdf631
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\b5c74359-3014-40fe-8419-275828e32f88\index-dir\the-real-index
- Size 72B
- SHA256 8458dd6cc73e2da62e7abc0ac9319d19d895cf04d64ba433270c22b2bc79c33f
- MD5 d0ae0065516bea98285143ffd01f153c
- SHA1 9b0059858a7563715bbe2320138538a1fa41c58e
- SHA512 3567b814b586e48118347388f24e9f5e2517a9080738dfc5c58472fb1176bab2c3e76a16571bea2df36f2e6798b49e010b48c2c23da6f3d588f55fdae979a6e7
- TLSH T1EFA0022481489205D1D45971243341902A5648154031036256B00149AC641A58502844
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
- Size 233B
- SHA256 e3286af40e33eb2cdc5d1e1be7e4cc1dbbbbf0cf8e849ff6649cf947a80c5733
- MD5 59f4d5008a11aeeaba60dcbda0a7719e
- SHA1 b71881c2acd0977a193f0643fa44b4eff1196598
- SHA512 a949469fdec1c1cc1241023169014d2d32c4420cdd2e5b6e2893224ed43a70e799b20578e375802c7d1325babcc7f70d09c454181d3d8d26d8b8ce012f2b2ee9
- TLSH T18CD0975B90020840EB3B4FA2673618AEC210ACC88885904C8812341C64F3A06C921EA3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
- Size 226B
- SHA256 de9865cb9138e3ab6e0644001c331dc7439ab021b04cbb866e62ccbd6e4cb487
- MD5 f1a583246d2332e7d781ec028bf8b5af
- SHA1 04665b5cf6cfbbdbb5666798dd078d86e923d5d9
- SHA512 85ec074dacea638b9bdd723387bae2cb8dc5e569a7d3f034a7ef134740336cef7736ccc72005b257d03fb3885a24a9e76f91b266bb242f762dd88c7cc9b67ec8
- TLSH T132D0235B90060C50EB7F8FA137362C3EC300BCCC8889D08C9811141898C3E07C822EA3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
- Size 229B
- SHA256 e3878ce132a15d3c7b073724d07b9ddfee866f502676d491a9c0fe7044879a60
- MD5 f237642f6990d063c934aa869750552c
- SHA1 350d10d0fd4fed16f440214de73d92cbf73d847e
- SHA512 6d2b674ffd3183dbec3565efb12ce10981df40ed2b81f8e5dbb7fe49ab418881a2287d63680ab4d5bf6d3d6998f93293e9a83b196404a2999f56af1d048f6adb
- TLSH T148D0975790020C40EB7B4FA26726183D8208ACCC8C86A54C9821140D60C3A069822EB7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5ccbe3.TMP
- Size 138B
- SHA256 ae27444dca5654facbcbcd87b912519da69e9d0e13d3b021ff546394ef79b8f5
- MD5 658eda153c8d9ef625d780e6b7779b56
- SHA1 70622137d55cbf196878bf57b1cbf257342e3d42
- SHA512 773c5aa9e79a4d8cbabb8fd571779c6fcd7ca003585ae5923ad34d61dda0a50501aaa8010ee943596bc7eeb043430526227c5d393b901aef65bc979c4d37ba2c
- TLSH T10FC02BA3A0010811CF390E521333585CC30E2CCC0CC6C09C5023341830B3E13A101EB2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_0
- Size 47KB
- SHA256 22e5f8042eb1146fb5c84fc8ce00367b8127f1bf1b6a4fdcfaf5198762add9bc
- MD5 80945172c7ba230c06c057a0a049b092
- SHA1 3b196e332f74a35a8c59ac1fa2901346bdd68136
- SHA512 a2ed90abd8536983c3b1cabc64f8efad7a9312d455d87f5595ceb4f2ff8f2e85f078dcd4874ff1d1c278c6e2e0cb14207b69bb3c10c649446adfa59c4f92b8de
- SSDEEP 768:kpAtn38+HSEWA5W847Zrr8VES3vf2dJRy68hkxkh6GRohqkVQZm5pEKr4iOqsVnv:0c38ZEbWXVGp3vf2hmhkeh6/hqkKHm4X
- TLSH T1702319956258687E0AC6D2ED925D1313912450F8691D84ACB33CEFDE2A0FDC6127CFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_1
- Size 111KB
- SHA256 2bc3b5da42c512f294b903e5e8fc6606118b4ac1e96d668863c4ff5f712a9708
- MD5 9d813cc948bb69968c25c6ea6672ef65
- SHA1 be2843fe7a92a83de20857e841dea443f54fa257
- SHA512 14c6345cefa3c467b171ce21ef2f21f0329041770d1f23715d76651d69e2630f1149bbe63ce869bf6bc5f2510104e6ebec2863a68597859ae5b53aaad133da3b
- SSDEEP 3072:JKlN917mHFuK2wjXb1ucNFngder6lN+VPiwr:JKljhYZu8Hp
- TLSH T1EBB3B55753A48627CA3E13B64623A61B3770D28C7FC3821B6162D73C1C257FAD98C97A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 96B
- SHA256 9afb286ba61c487e7e712db315192b8fb6c2f884b14a32180beeaa8780d49943
- MD5 0445c103b5a4612969ea725a456a3029
- SHA1 880c2d80eee5eefcd725e5136e8c52f5593c80fa
- SHA512 ef66d8d1346d6b14ecc45d665421d7bdb022cd3f4eccc898d9d9a465812bce3688536b669d0a5751b6c380587569027ad116d73cd5b744e508ebaa129d0b9a0e
- TLSH T125B00211554D6A93C51147B1309E51987B3D7E7A420303858ED2D3FDDDA93B25252647
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 312B
- SHA256 9d433d4503abd85a10b177746957dcf0b11229f40a2f6c99732a868078c6cb53
- MD5 1301a1481e88d50a22df2ec5d40caf2a
- SHA1 c27f06c8067cc2221f7f4e7d197cd33e44f51504
- SHA512 12af9265f27b92f7f8d7c12b33d9a50c39233908a8506dca372e5c04e5257eb39ca1479d6c62541697056a8b7cb239cce07d9d6dd283ac851b2f1196f40d2f30
- TLSH T156E0A7178A8960C6C03A86786203454533369CB1935923D1411414AA5CA62A28C4B547
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 336B
- SHA256 408bc4ca222e2bbcb4a05538c4723e766e1344eea3aae253c9cc1524b5c475e9
- MD5 a71a2a7da10a98187b0dece92d75fde1
- SHA1 ffa525002d884032b30b79c29c5a0de9c8332147
- SHA512 1364b5dbc86b6b539867f2eace3c55e4f184f0dbc43e8630a0e0fdd7e3e4cd2d1e94d781fcf284ef1d62dba44979353339ee252d2c1445280184ea0a3f1907ba
- TLSH T104E0A7534A8951CAC429C7B832474986733A85F1936923D1451425796CB52B2CD57547
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5c2ec8.TMP
- Size 72B
- SHA256 1ae008d17677b54469cc32815825eff19d37a8fa28e92a807fafcc7f14c9cfd1
- MD5 138459d41227c78bd274e1281a886932
- SHA1 1da9b9ec8f642424c46397b9acb56636f5daa481
- SHA512 b42f21432a41624f9789193c9062850f0751634c7593e91d8a321fcdcef8a379f28066ad9cacd64eacadcc59a86eef19349c5a676388a2f3c9f95c991698c6e7
- TLSH T187A002150248D250C50603B03C0187891200B926C402221777D10346ADA50704A51945
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 397B
- SHA256 7321a27b17376f0daaa5ff4085e75c05e60806c860123d594aa6c61bfd7ee6b8
- MD5 05b0c90854ffa36d79ebe0e456602aa1
- SHA1 e8415d85b5a7821df74d25b66e556e9baa4684dc
- SHA512 ec9204be31a80f4d205d89acc17e86aabe9ff56ee30e631d34a8f33d91d6de4ac04f10771248eba1a249c4adf119b33e84ac7f46591dc9f0a279fa4e141e037b
- TLSH T119E0F18018AA4BB608BAE619D01EC792AF411A502F6A57506333492611BE3EAA05DC16
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 861B
- SHA256 03a62d12ffbb6a87512f00fc1a6e5ef1cd3a7eedb2c769a37ce7dcd2dd50254d
- MD5 edfa4bc9ad7425e79b61c487d53ed090
- SHA1 f5812039a829feeca89d135e03fd6c02b12463f3
- SHA512 e41900db306fa7890e4dad85dc904fe15608a6ed783d4d856841ec41332218dcda814731f28c786bb0b52647feba345baa08085d825d3ea0c16ffb54d182a4b5
- TLSH T1D21163419F317F0268E00984EE2C7CE66C091831AAE67D142679B4883A084A76FD5120
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 1KB
- SHA256 390433b5de32252c7506ce07dc5617eb5294f44b9cade6a5be9cf667041553f5
- MD5 6fab2cdcdf046723bc99a417140da6a2
- SHA1 3650d529d683f9a4d0b8566ccfcc531d116fa53b
- SHA512 6759fca1182ddbd8128fd0b54d13980f783b75a29e7afa78acc965c1592ac24e8d8ac9b545f60e61143c103dd431e4304eb1f28ba1c9354fca5e0ee7c063c188
- TLSH T16C21CAA1F6097582DA2F7F07BED5B9D34D912285443C7F09FEE931295090E0C90C0761
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 573B
- SHA256 630d8462900fe05fe48aa4d02491c37f6254f23f40c6c19f22a92285e0bc0695
- MD5 f318f34ac4e5bd16b34b7b73a8257d1e
- SHA1 a077b0f8ee666bef917be5bb5b656451f872288f
- SHA512 71cc1e98234f134a2445fada34ace74a38b745cd8c1efa675dfa986ecd9f913218c6b9862047fbc6dc9ba0c778ca3211ffe7859507c957d83fb423d793ad3249
- TLSH T144F0E134B16833C9BCDA4C5D48AF84E2C6119468C43127F95D67F5C292CBB3365CA52A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 685B
- SHA256 ff287786757d9d1197b23e70042ad58b9a59bb183801f2e7907f42d8574c7180
- MD5 b37190278a18b01a52f05f5885fb890b
- SHA1 059281320e3dbbb92409bec8930e1c1e542f0df1
- SHA512 ad96a5fc27717a0361822a097cd5fe7aca5b6504aea726270bc33a57a40c7deda93b9267560f3dd18460910efe4c0d5bc3528e035c1cb72697f2777df1f6cd51
- TLSH T17D01FE82B6063677B050698968FE187AC2017419AE62A0D71CD341B7E712AE74E98E2E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 845B
- SHA256 43ba5e5096b0be5a2921d9fb5ce4eafc280e05f1222d45719b387d592edc18bf
- MD5 ee6acfa3c16219ebaf2640c659457c62
- SHA1 fd93973a45016a7a3e038b580b63893e90e412ac
- SHA512 412b88c5aaf44a83cca49b38cf4be7bc4334eb4a4f9046a46ce21dce53da4551b4a47c7acf7ba8681bd35a51a3b7b60e599b5aa845dd58bec1c6e4bd326c6799
- TLSH T13F0152438D3387DE3FA8AFF2B25EC8C8704E192C6251538521E4F94B1A207575892A9F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 1KB
- SHA256 943be0e56fd62ee78251fcbf0fd30f7e79da152468aadd5cb4fef26fbbff92cc
- MD5 f0f13125f6f9eb565028de6b39e1decc
- SHA1 dc67738c63e62c054fdd047a065dcd5a103fd1be
- SHA512 330999de69eea85cff14e06c9f03f8d209e751266bb536b63b153719d864031934f96eeeb07dab4ac08c860e2ac3fb75b81f9c53633718c865de1bdb5732a571
- TLSH T1C321EA1040F2E7E206A9DBB1B5E75CFAA872931083E14B520646751741FB5ECD18C8B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 861B
- SHA256 48b05b9a31a2efc54bc59ec4778eb3630907e176f3aa28bbc417d670bbce5c6f
- MD5 a003104030d8bd70e65f25a08de43218
- SHA1 52fb30852b3017b805d52c1e37b20cf46fc9ea4f
- SHA512 32058aa18bd5b198577e1408355dd18b30205e420e676682aae2bec56dc76279db6edb2426709a3f7114526b49e1ec056d302b79ec2fb23aa960e64e846ec9f6
- TLSH T18E11DA914E2CB3FFA2BC834B55427D743399C30986BA7158EB53BE5C147670C4D5E024
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 1KB
- SHA256 7d96d5d6c3461d0c019fe70fe0399c267df3194655419249dcbae990cb91fd40
- MD5 55cfdb0a6e8f9f452014927744822362
- SHA1 b7bd39edce3c8f3c5ddaf0d36e4ccdbef26565a4
- SHA512 be807dd6c738a8934a7f3fab4d8dcec12584a0b04730da4f2f8bdea90e80e15c42c4ed489a0b303a038fb8f388fe85e96016147fa033c44454e75a81b429e5ab
- TLSH T1A421D505EAFD460B8101EF86E69097D2DDCC790E533AF2C3EEB85B041E6C54818BCA48
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 1KB
- SHA256 fceef190a1d56915fde0d6c5048e64dfaed67c0ff9e4e41c70767568090ca835
- MD5 8b6cf205b468ca00e43f0aac639fc9a0
- SHA1 500d8f15d578ce2187e298d657d3bd92b1788bca
- SHA512 9e342fa0ca964070d817317adc8470fde6ace222ba3acceb31551d047d0f98ba39eb9cc78dda129532bcfc002b843c24d7b90423f5eb2fe8e2663e9501443e07
- TLSH T18A21C6141FC6E408E18AC89107D974A74644F84B0E73B21E81643659EE9635703A8E4F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
- Size 1021B
- SHA256 ec5ac74385a89fddb89773aa1fdfd6d2a0b105197451db37ed659e670bc287f5
- MD5 c970b33bd5a3c5e843fe01d4484df913
- SHA1 11aa66de21531b516b173fe5a1c4e092ef26a464
- SHA512 c40541d407aedfbc385873161db854916c85c9b8a9ee68fbb3259222d0a1e7d68da7e4815b4d86f5a5bed5a3209886f8ea42701ae9e4179999dda29d0a9ec717
- TLSH T1DD11A5321D9961190E8CBD8EEB1B12CF87F14F049DB502214429FD2A2D2869C7EC6A00
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw~RFe5c27b4.TMP
- Size 285B
- SHA256 18d97a256f30eb8f9eccdf3c6f0e1b6e3a72c54bd1dc03ca2e78d9bd5df02b27
- MD5 612f5ae0fc0445eaf976c30cb43555fa
- SHA1 adffeb202c9e5e8d9caad55e9676a983e1f2f524
- SHA512 da978292a551c10e4a0c1500a9a4ecb872c97bf29a89d073ce4d0372255c551137720db558bee57d3a0744d28c2db06209a4a06cce8c055b8b47843bea41759e
- TLSH T108D0EB17A4C7CBC0E822AA0220AE070207838288C03C0C011B08347B22822C9FA26280
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 bb36c4dd8cf6e205aba16a1757eaf3512b311f42b7abc274f3c427f18fec8b44
- MD5 665572ac7b96cd582f23458f4b6c7f29
- SHA1 c949d5580fd1c3d4b04fb1ea8efadbd76e3492ff
- SHA512 8f383b29771531957d6df5fb1a4cf0e1d534d62244275ca31421ee2cf9ff1cf11d2f1bf25d47edf49d3438338d5522fcc1d48bd02f2ee6cff7e53d0fc293a684
- SSDEEP 384:1KN8nJWSjOt20nAHAo4YlpeauJ7pWxU6dceXH6Cek6u6mu32/PL9QCHh:1KN4JNytfWAlYlpW74xXdjH6Cf6uZu3U
- TLSH T19282D09B5F2898525E93B952959AEFCCB29F0B9116708E72057F60EEC69C41BF3C011C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 79d18b1a9b92de0ad28c2220e83a051abd4cac89d6226d643fa95ce70786ea2b
- MD5 cb9e48e4ae8ea2a29763b37d5c84431f
- SHA1 1b60fabf235799acf9217c0314068997ad7f2b3f
- SHA512 e87224646c689389babe3f125cc04a4e5a24af5db376076459f79f345724b5c77528705c50da38dcbdfd7baea6d314dac4cecc1949fcea946c14aa835c9d17b7
- SSDEEP 384:UdSZdfbhqzcF54ffpoSE0QAvZGllVx5DKY6guLeDBCgA+3Ryve:UCdjhhFCyr0QEZYlfxKTLedCgASF
- TLSH T1F582D08DF39C9CBAF4F85B1375D43311EFA33639A0BE92E61B04A4025A5894A5CE42CD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 6d2683d1ad88828b44ae54373d775ba2ebec60b7f3a673fe2d84d212fab1de0d
- MD5 fb4382c4d47298275fc7fa122cc8e34e
- SHA1 63c8e1821222feac27a4fbbd9acc16e6ff163c52
- SHA512 924fa83caf17c0bb2dfeb2cc913c2838353c3deabc784993540df228ec1a1e2954410db54dbf00faaa49bba0508e88561faaa8b6e7415e7e0a3ccf931d549e4d
- SSDEEP 384:Rg4kzAlUVXPTIunvi0DM+XZTxuDVNTFhzrUG4Kb51bsNA3hXNrEotz:Rg4kzA+V/0uvi0DXJohlZ445GChXftz
- TLSH T178A2E142E7B8F968A1A25E0D36FF26BE74391507AD3A1743928667874D9BC00408E57E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 2361e801bf9ca88b95b4f633a4fc5b520003cbaaa071703b34a64c0dc17b459a
- MD5 c12eb55153b2d6db1997c76f8bebf5c4
- SHA1 755d6210af670ac96863dee3ea64bd91bd26be0d
- SHA512 7de269baadeb8aec9d8bcdce01c8621221e85542003aade3b454e06810645daec996a5248aa8f74403bbd3432168410b93e2a001a004b4287f35232e0c31b11b
- SSDEEP 384:arxbkZRV8PU8a8ottiT7oMxHzXIOF5UbtCD13I:QqZj8Ps86tiT7THbPF6tc4
- TLSH T14152D1D8DF14139C0247A0EA4E1796BF849D1170092B1DD03AC2C9993E99C4DF275ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 2b1ef38aace0a789f0f30a7fddeb904cba13c2b598d85018d05c24d3d17ac436
- MD5 d2552fdc6041fe48b88e38236501746d
- SHA1 eb20f9c92cf262412dab7c9da386ebe9d1a2d5bd
- SHA512 a154aeb21d35e5a4da1c2b034db763b15e50cf4104b8f38427dd094b94e2d2bfdd9d5de293454b955b314d100916ffddbde5c27c48fda339bd9d62c1216e87e0
- SSDEEP 384:B8UQdsU6VNrrVoOGbgZ40QJ/SBEoqD5KfMlXnhKSWMCd2gHdj:B9K6VN9oOGbgZ40QJ/SBEXD5KElISIl
- TLSH T10EB2E179191EC6DB576E22DC20903E0D8EF8FDDD8719EB4C58AB8B84AE4590D0FB4023
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 310618771f6f0a41bc7263d68cbc918c87834e78cefd339f292b4322de30b2e4
- MD5 8e0598a6ce133308722ab75fb3d96a04
- SHA1 bc818cdb0b161f89dd087c9c6cd9f6c01bea0a3c
- SHA512 a0c8dabab46826860b075aea5bc34e3421ab1ea72af6476a31c601449dc6444613072b94146bd26a3052fa2add159bd2e50d4d13a563f11a4a602f9bfd39d523
- SSDEEP 384:MLOXBgV96yjHJZBUfOiVJI/wym3M2tOBh+Mp0AoaXl8eBCpvb:MUBgD3WOis/wNtOH3uaPBCpT
- TLSH T1A652D1A005406C88FE61872E3BC6341F857FE9555CE690E528383029EC6FC366D790DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 f978f86a21a058493b4b53b78c33d66f7cc00d64efa488ae765e29af2ac9b3c9
- MD5 9ca6790cb6e3b93adfa5e110184376d5
- SHA1 88c433e1a92aead23ea9fd368ceebb27440ab967
- SHA512 3bcb34ae3dcdd3b37640e3ce6dc56f88ac4a9eaa10cbd296ac3920794560e3446ff5499bb22b1f535e3cda1d4aec21a2081d18016432e257772dc2dd9b5f89ee
- SSDEEP 384:xGU5BtjGK8CGrgx3Q5N9Whw79uSrRRTJ8dGtVO1ZK+4ErA9:1EK8CGEpuN9H9trRRftVgE+9ry
- TLSH T13352C0DFB568D9C40A0AB9DCA8F79F2FE43AD9A8E951543451180D1E887C8FF20B7708
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 19KB
- SHA256 f6b8dd2e760592a0db99ae21413f71596e8e48d5bd4c13a440b9968a4e26e9b3
- MD5 056a894b156d90f7b0fa008aa7f868fa
- SHA1 7813eb22beb10edd1a75095e47b984f6fb6fbb5b
- SHA512 9553ba7e28cdbcc423a01e10eeb5547dcca2dab8bfed4eb7292727a9d432a78b6285091de802cdacf7254f0d096498b06bd5f1da96ba96c9be76c91c3e0b660c
- SSDEEP 384:EFtNuUjrm4u2MqixV2cXQ0pYeoPeUWuVXTrWjDJPTfUNRIreH9JtSjZ6eb2J8CnA:6rm4unqiX2cXQneohWuVXGjhfUNlH9Jw
- TLSH T15692E1B399BFE9BDD99243915F4F98460D401D22E7AC20AE13380C767237263BB953E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 4acca09f8492d6e04e3eda08221bef00c26550aa9a857fbf5259d8e278ef72d7
- MD5 d95db112c4d2e840ce7b588f5610b732
- SHA1 9c684b5ac2cd60a8ef6024d15cc782ce013323d8
- SHA512 5dce867350fec44ec8dc9f5027005635ce5e0a4607df31895bc7cc40eb352dc911458b0dd63aa14e602d4abbc5fe72ce4bd2706b98f57592fe157fe703ab5e82
- SSDEEP 384:qxS55BC6QOMbpYNPV+zDTDG4sKT12xMBXVcejq:qe5BCHTbSNojDJT12KBXSD
- TLSH T16B52CF5C48AB438C60D192F38F2F754E9C06ED6A55CF7F70A56C96FB5802AD1C8A42C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 ee09be353a0852d83246e4373901e160dfa12a3b91ed8e71a1104abf9e6bcc8f
- MD5 ce8f00101a94e0cb29c072f3e81878ea
- SHA1 bef0869166b4fad0ab3a3044a3488544b711f5ab
- SHA512 a138304b4ca58113269aadaaef5015dda6e816fa85fbffe994f9e853bc2daf975b694325401bc9cbadb584d385d17202dc880bde5d0eab8f6b21654ac0c34a60
- SSDEEP 384:VE2JhjHutbKPTxGxG4TIkP7PdkxCy6OmmeM:VJhjOlKrxGxGwvkky6OmlM
- TLSH T1D052C0706FC8B3180D016DF66AD6E572113675FA4EAE25E4126FA53ECE0D8D27C09931
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 20KB
- SHA256 58642997f8e32953c523d13c0981f86a2ad70416e718eede863c437817614c88
- MD5 40c92d5435daa4cb5d0d016e1e74f153
- SHA1 f5aca1e85e3de7796df6e68c0a2b3e965ac07827
- SHA512 127038cfb6e5a3d71f017e28bedab6b38a02e1c35cb7503835435876067c42254241165fd52f44536d82872096447be7890a774088b7036dd41b248028d415b6
- SSDEEP 384:VztRRlFJLhsmVtXwpMXS7Oh7F91qScOzCXyCfw7xJVosjYCs4EqGB8DpnOaUn:nFnTAcSwJ+XyfR8CsmhUn
- TLSH T18D92E128A6B2DF53070F448D697701DF84BBD75F89821675D6C7A7DC92232FCA620872
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 acc3c8e376244e90029c4c6aa05c29bc81a1f319db8500ffb9ee0fb589d69feb
- MD5 3daac70277d67245c331e33cb74f52d9
- SHA1 1a3dd797e88a37749318b14422b07c9d5a8bab15
- SHA512 8511e3c38df79d309eafb481d816d28971631fe7ba4775919a1959c240fa56301a70a1e2d9f2dbfe9d98136fee3753fec160cc53fdfab9a3b05209f69922d9fc
- SSDEEP 384:DLgac5W4DzvBsRMwH/AM5UwG5fcltKABAhzp3QJ0n:DLzUqRMwff5Uz5bp3+0n
- TLSH T19C52CF841C569BA81ADD2D13FC5D17D4E9B086D9CB19E03C9FF0BA8B38301756AF4D58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 37bf99578094e75d9e416798ab76b309ae22bcee983b11e1490ed4db533287c3
- MD5 a12095ceacadd51f82ac285d7af2a104
- SHA1 fa7df1ba2e1d04132fbbf404bad5a04080e40510
- SHA512 4cca3cff77722211951d6efd055e57c563b8f9ad228f0e876e186043e0ee06ae4f286ff69bbb88fbaed4b05a191213fe949fd32831ab9a31c16db9dabe836e36
- SSDEEP 384:ER2Lsb88r1LJpNZWBpsQ5aR8qn7IatXbV2AqYBoJn:EYLs91DNeRi8MHVLBY
- TLSH T11E62D048D52A1C417E0506C1BCAFE37AE49F891AB39D63D82F5722D7001E8048A9D4CF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 ba7441f701a6fb768b583312e0ec0f6264f93a86df1bec5c4a5779be49b84f38
- MD5 7e1a8401c9c9435c61d6f5d7e91f83d8
- SHA1 e4162e7faa5d50412eec6f8517fcb8d5321f4a3b
- SHA512 742e74f2b6ededf5baacadf81350e47450f1cfdd6f383b4c7553aa493187ac60c9b3f8763ba68a9c3944a58b4b70fc4c5eb4f747db6c6fd634b9b6f4f695e034
- SSDEEP 384:xcJpliXUoqrFuWG7qRXgRAcmWq94BlKrDjZMWJPcF:xcCUoMCqKXzqsKWWJPo
- TLSH T12062D15513FB97C3F9F381B0D368D701BC1A84AAC56B8418902C321E12E7B9EDE8999D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 77b10bd38cd913cf0a32aa168afb3fb81002ce5566a3128a71a2b7478895e83d
- MD5 6a8fcdcf56d2824cf6b0a1f81faf78bd
- SHA1 c01200dfd8ea5da22cd9b07240a37e46b84d93d1
- SHA512 a865dc44fd365271bd56ac3cd812f1752f9b677a223bece0283f60b2869f0f5f995f64628a5ff1c27c00b72ee8dba7706f11faaa17251a14d63f9ada170654b4
- SSDEEP 384:obL01USIE4nrK0i2pm5PUd+gU3g0742JPfVBwU4:lUSIE+76Pg07xJPfzwU4
- TLSH T10562C0282DD845B672B5F03AC503D02D62C166BFAE794E87072FCD8C364E766626472A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 a21225c58e81332fb3277879cc1d84ddbc5a716eb143121009cc7393c85f7e3e
- MD5 b8a17bdddf1e6b8d13d91e88f3dccb89
- SHA1 33a76957050dfa3c56369b6bdd50fac7da050a54
- SHA512 c75b30a7bb8a4efd293f0f963262afc9ee4fd590305cfd854a2b25085f3e867c6f447fd11e44fedef11b66becd3bf9449c73b87144d9fb0e75002e0d8f910006
- SSDEEP 384:Bs06xjNKU/Mi1rPbuIQIwTjDo9/t7nGqkCQg6UPj3ZUDNRi:klvPbuFrTvyBGqkY/ZUDNRi
- TLSH T1AA62D03D150B43F8E254E608598B6416AF606B9A0FFBF0CEE39B12B20637A3560C3D09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 fed51517be813ad55596a826fd028fc733f8f141086c02ce133c871dff7c2bd2
- MD5 8c202e6128e900aba087d6304f6a33b1
- SHA1 e77dfb2a731d454b918cc0fdb64e86947c528502
- SHA512 59c04fcc07e11ef79de12b5df472ccb7b95b21f70ae01ec49b4b51314e7752c2ab6355319a6992db931d6b5b16b634a9c52e4b17a20fb9e15641450ab1645fb6
- SSDEEP 384:0dtvBfmhTgOyqLuFXvk26+IoyTMOif0mjU1:0/vdmJgOy+wfftIMw
- TLSH T1CB62D1DCFFC5C7E719B627370530E6C98595613CB2444F2594C393C1B6379AEA622B18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 16KB
- SHA256 99d3d890783370e3337d2261d1c695cd2cf773ee42deac65c303214875c8969f
- MD5 537d8dbc000ea3e62951878821f7598d
- SHA1 8a97eb615b21f8886887fdfdbdac76b844895b53
- SHA512 e1a4598fd3000203f41025fe09dc0308f342c02f33f706ffbb7b7fc717f40bc1dc2e0cd4d64b8ca089b390e528083edf5733c1f33673041fe590b88b094388f8
- SSDEEP 384:6KsAPwfTkVnksHYCi9rwBAARJl22gl2DZAGFXivOTOBw/2:BIwkTIr2szFSMl+
- TLSH T14572E046CDE0FE219DBC23F05508B759309834550BAC34BE81DDBD8AA99DE826E75C3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 16KB
- SHA256 2673bb7547fdc3cbd59fcccb640c490e7646975666249476640d74aa7043483a
- MD5 209bb71e8f377548bd7c7e1440e48d7e
- SHA1 4b7658fe1d78d263c8278ba00515d4fc3b978279
- SHA512 8b6d4fabc2386c8aaff5dae1c95a268304c5357a1ef5c663138c06fba621e7b64387002141f9ad6e140cc26803a739d1ebb473b7cd675e56f2e4d93a90ef1d96
- SSDEEP 384:9uoMJ51yf5O8LSROyPsQq/8aSAwxFzwmXwjMdaBiv7bs:9uoTR8c/8aSrsq9Qijw
- TLSH T1FF72D1839EDB5353FA1917779F473663487F385A468144D7C00FBA3382153E618ADD2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 11dd7ac5ca17b227832abe09a152c809b5ac411a1bb28f9a3b5ea8ad71612f0b
- MD5 dd63ea3a23f1c64d137b2405de5d0cc0
- SHA1 743a8503daca115425952a54befcab8773285ef9
- SHA512 79c825b9f6b2b4e55f2bfc76e6ec9b6c94d2c60553e28b3eeb4d556e00d18006ef218693d6c076130a083b5c2d81ca079ec42ab99efd7b127aa2d861e3b3e5fa
- SSDEEP 384:jPRuOAFmHaIrTH03xLYXETA0CbKr59Xqu0NGuokOKadGlB4:jimoxLYU42uu0bVhaMlB4
- TLSH T14482E0C40F1CBA1943F1AEE72293A2B17D1DCF296CD37821C4E677864F0D6721B55AA0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 20KB
- SHA256 74cbd8bd0d99ba52849b1d35b15de9d3d9272c8f58a9430187f3ffcc65c071ea
- MD5 5d559ce01c0dd53742fd9931b7671405
- SHA1 0616042294326e9ed99a111131cef5c4820b1235
- SHA512 657c435c569de3712362e2fa9d25aff6cfa44dd1dcfce81365098252297538ccf8af8db59ec9350e939fb8f40d25ac15ab53c8e6fc09162611854003941f42be
- SSDEEP 384:ELIn9iEOEMCux5uttj8FzINSrUtEwyaoV+ciDIloHux3uuax+SuN1wzR:bOXCux5urFsUdyffmVUuuu+SuNezR
- TLSH T13292D09CE56A2CAE65EB5EBE75708CCE20BD5140E1CA8623784296DFB08584DBD22078
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 17KB
- SHA256 2de48f11e0885e0707373aa23893118934e255db3843986c31fde65cfd8bce06
- MD5 4385a93700282ee92fa31f89fc60b1db
- SHA1 a9819bee6ff7cf8a411ffc9e062d9499fc222d71
- SHA512 a494a67cc1780e05333ad24f4093865bb2779299b7f09ae980c29ef6c85bfe2536daeda607812d38105f255ffc97ba6389bc81051b37324cea02606b4bef1b62
- SSDEEP 384:gDDEBgPSG8hLv7VjuMoEIqa0dQJCb+iP9RAOxB8a7TEMK9jNred4mskBFJxM4659:QDEBgPS3xv7JuMoEImpb6yl7TEn9jgTy
- TLSH T1F372D0124D86D395A1FC3D1AC7473E8A96EC495DC38BE3078239DD3225E88F4448F59A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 e74f1aaa65437144df812501e81e39da0096cc31bf7788d8db05c92aa7d2f6e7
- MD5 e714621865506c5fb4c430157421dc95
- SHA1 701e78fdd8dc6ffd999c5b030e6d6a0e3043d47d
- SHA512 fdd87c3475a359d8c2793e29b5348ef4789fc2cb199acd4619c03602171946f01e40af7d6256bd2de39c11feb08357c5a488a773ed5e9d12cc16ef1343926ca0
- SSDEEP 384:MrTE7RpexihIRmq9/SaeuTaF2gpMNx0Ny4:MrgRnqFSaXTQNy4
- TLSH T13F52BF29DD96F1F6A3C990D9A676381D03E402752C6C68539BD923D3D04CAF13E83E99
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 733B
- SHA256 126a9507d5fcc5986188330335cccc9ee2431629bbf33ee814b183384bb17ad3
- MD5 d5ccd324516ba7ef6866675fdcf21e4b
- SHA1 f9ae348c74b9ac31eb2c9b38e2bc2cfca504728c
- SHA512 e049d7b97cfb34430bb0590c3be5622801185fb8f25f845135cb4d1faa5ffe21a0999d9648368cf5d7bed4b039b7a59f9e43602b7225d55cb5da7d9ac3da21ca
- TLSH T15901B5C86078D61CB5A299CA212812254774910ED7D4522131524FA8A38CBD9747C32E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 2KB
- SHA256 34fcfa5dbae8af03a14af775c838c7139ee9a330305deda2bcf28d82e542c3cb
- MD5 c230929100cd845d66109cab5e1085a9
- SHA1 29cc11a2578bc47f59f4488b7dd40f11bf037add
- SHA512 877077b749e11d9b42621d7aadbfe970e5a8de9802d49ec0577d388d7071176e3d0874fca3aec87e854d01e0d2052099f3d2c22566ccc13e2f82b4079e797536
- TLSH T10B514B7CA191A1367F11C315241132F88196862E431CA9678D4DCCD7262C6F7ECA2F35
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 2KB
- SHA256 6190bb8323d9596a102f929a71a77d8f13345a79c892ebb23f22c88031af9baa
- MD5 a71141ab9730d30fca37968a974b193f
- SHA1 89a74655c28931841b92697c056a79fc400a89fb
- SHA512 87a98be181a03d50a107a18e2669a0089d87d7fa67c158c13c15f51568204b31018bfc8642715cee8178a2b19f4ed083ac4eb44150f598e9cc9ca7a22c1c5a8f
- TLSH T166514BF07A17B2EB6AF4CECF8216B23D47582F8068D0BA76CB98700266385F7D345084
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 2KB
- SHA256 e405298e138543b5f8aeb9ad9f031abe5c08e1344d4b8ccf032717159ced6728
- MD5 ce7b89b75ebc744024cc578ccfc72711
- SHA1 3e14a0e955191cae486cb349c960ebd9a4cbdbde
- SHA512 2903cc433d61e1913f6a863823383c2ee5228f6f624ffcfdd9b55d764a70ee87f2bccb0f98671fbdd335b53976acb97a47c2cdef12ca083027591910108f2645
- TLSH T1F8515D8B84DC001DE0B9DC56BD8E4D3F888B6C0FF5018F4A21AF83A05DB69D7036168B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 11KB
- SHA256 59a9e596970719bf5d9f5eab69da61ab99cc16757d75523719b460f791c33a7c
- MD5 d8dc6d165d829de5fb703d68f7c01114
- SHA1 8eb393224347372dac499641419605f43956247d
- SHA512 c2775e87e10038031deb0a6c2d476696a0bc27547bf938b12d3e4976e243e3c3c7bdd929250b4d2a5b3adb908ebeb6657bc231f9015d7e6094947c2b8b6734cf
- SSDEEP 192:sqaKIiyFUvZ6DeAeRdeVtNjU5oXQTS/11QHY7bRw63gMZ8/WH/BMrmh+QtDT:sz4Mle/eVtdOoADHYp3gGR5hJ9T
- TLSH T1C132C019A4265B16B13029022C05F54F3CFDC9F996014F9C2701B71CF15AAD7B660DFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 11KB
- SHA256 9b2bcf3cf4841826cfdbf1c5bfd80441d4fe630cc6b97948f3ac53ffea36883c
- MD5 d8e20ffc9639e3d99ae211ff9a229a16
- SHA1 f5f29312e0dad3ae5f788286d17026dacd2e53c8
- SHA512 949d8611bcc2bdd5222a0011664fa42943e116c9c9e27c8a104479c50d7c186e526feb04260887accd619d84c95d823b9849b4a973907f21a9710e1ec30f3fc8
- SSDEEP 192:npBRlTBLIjMXW6X/Zi88+LQgRQoFyNV39BxlDear8WMpKGobZ5N3CXr:npBRxBkjMjBi8BX0JlqWFVS7
- TLSH T1D742BF8C94B364D47B53C2AAE8C627D0DFD85D17E436D1F04DCD786013A4177AD820BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 11KB
- SHA256 44b8aa34e120cd074a07efc4a1910931b112292cb0a673a31ffe02dedee1ebc0
- MD5 8d2d655c58b0dfb7bbb52e2e49103318
- SHA1 47d20626077eeac230c1958ed5b98d5dda1549d8
- SHA512 3d2bb18020319e9e3dfff018cbde2feedbfcb1a856ba6f364e6044d4dfd914344967f292fc8109d0840c181b3a31a754eb82129660cdca59a23f3edecf30dd97
- SSDEEP 192:EJiQM2QXAe9veoBE8TGrI//aHIbHed8NG0bogIXd0HTUMbetg5Ae+0le:EJiFvXvrWQGr5oKd8bAd0zfPnU
- TLSH T1EE42CF1A3921D3C2C091BD9322D7DC5636A880E152EFB50E0DAAAC1B06D5AD71DE45EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 efccc2be8ef11688f3d6ed582a548bf9a9a790167aaef36eb294705175ab34c0
- MD5 1699a70a907f41468baf86e72efb3f56
- SHA1 16998573b410d3fc3364bacb87f9798e7e86078f
- SHA512 488434afb1b5519fdd06b37db76447bafed3ca53e53552b982ab16b2758d1a746f51653e5b30a26943ee029297c0c4aa8664a4b04c8e384d5a03c03b4bb77b2d
- SSDEEP 384:hjOmfRrQh9HalrPIlXDM8iLGGz8HqrejuUErqh:hq0EH6m1iLGTKryuVE
- TLSH T1CB52D132EED88369DE3E7E7C0FF6F569493A52667D225C29C8055C1E70F9201239267C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 e559c9b6b072eb6ea4fad0c4e8f298a440b87f1085c9cc7d290a5c49d1e6f5db
- MD5 0eaa08e34a8963b5d39ce2cae11272b6
- SHA1 93c47d76ceec8bc297f14779fe3b6b443de5d9b8
- SHA512 00694d22edbd82eecc09d05d6824f27efc5d0e5717c86fe2d44747b18e09a82e7b1a8a9f62acc6a9641f1c6e11754daf03888878fb46be35fdf50296e8601bd8
- SSDEEP 384:ggD/3hi9Ey1Jz/rU1GUI8nhdsqL1qjsjDX0:ggD/xY81GUJhdnL1RQ
- TLSH T18652D0EC3BBC87183719249B6E6349A20CB83A79853F449487A3925C9327B1DD0D927E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 fe06d5b1cc13dd01a81ffcc37045b0b4fa403952aa0fd652f1191e997cc5403c
- MD5 4f7eee40546128c48db66bada00f4fa6
- SHA1 ba5ac4bcfb2a6f58e27b780c4a4bfcbeab1f4700
- SHA512 61a8cda2d10845fdb05c2b185d77e7c484d002caa001b73a9f2a21947be63a82d2a8dbbdacad2c164346a0c2941c8efdca345dc17c3f58dd77492d5ae3374474
- SSDEEP 384:pI3ORMvXvyAn5OtogK22soSbG1X92aM4RuGZr1bDbeElhjpX:pKORCT4iK/C92ERVZjeElBpX
- TLSH T1FD62C04E46AECA6BE6A0D6717F06430FF7008824DB8A9D94AA078F4D7E5F4644B34C5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 da0a9a71c2bb67975841d40c45dfe623e3b130bdc8c1888ca8e582049b3662e5
- MD5 556b3245a6870ec07583c0ac35537a51
- SHA1 ed2fc822b4dea3b1dbe5b4095fecf7dc6562f4d8
- SHA512 c887e5ff7903844e920cf54fc23e99a238a24dace0986961467563dc181e9d17d108c1b930a2e081bf86e3c2ecc823b79c1271740f9749002354f14baa1c15ae
- SSDEEP 384:yJSBgUJLpBDPRqNNCjJAj62aBdj6MUirS1u/IM8hj8r:yJSBgW/DcOjJAj62K3UOS4r
- TLSH T1FF62AFFECD1AB01BF413FB20511F4628054A4462A86D8E9E703D4677EB2FA099691C77
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 d048845dafa2afcbff4198f66defc95d56e72d85f9cbaff54c87742448fcc645
- MD5 86e6cdf7ca73a55e9ab8710eab8ffa95
- SHA1 84dd6630d514127e282306aac98c0e92e16d8207
- SHA512 f542d7a574c66b96a4441ad79a6ed12ef6132ed88379a692a0e07e8dbe9ed2c4b5acedc3ec6f63d661698d646aeb5c5ed7c0052704bc46627f831992aab9d812
- SSDEEP 384:9l9snXqTImLugprNm6CJphwiLvcDFRs7N+MnoqWsbIqhq7l2M:wcIAug3mVpK9EVTbIVn
- TLSH T11462C089F5DCF80C81D61955BAA96C5AB84F7081ED25F30929DBF0FA01AACE5D241C4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 5d46ccdb225d7682b729f95394d272dfd4ec1e4b99429d7ff43944d7321d1576
- MD5 d35625441b1ab7db88c2e89291d203ac
- SHA1 d0cb3fb57f82017521b766aec4a33bb2bacce0fa
- SHA512 f1a8ef5336ff8e2be577d22e896acc833e58c31a63053a1911fb946c26b357df03cb76f13cd0d89259e8306902452b20bc3a882c82dedbdbd8adaf5d30da6ce3
- SSDEEP 384:C5njltNyhoTb5kB5SS6XeQqs431SEHjsNXzxUxcjAiYJWLPQ:EjlKq33ZqDoEEXzxUujAilrQ
- TLSH T11562D0E7C1999540577D0728F01BD2F185305CBEC8A8966A75B1B481C7E36E8DDE3288
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 8ddfb74ad01c0c8e2a7cdf00723cf9b3db30128ae5e1e285f170873407cf1f25
- MD5 ef04554118fcd77bf5c00c336c67ad1a
- SHA1 706f0cc0cd4a0fd1e9323aecc9e384140edb772d
- SHA512 48c80d784acd9d5db54ad78ebacdb8641cc55d19a04fff68de2366cc81b1ea4ba46d743a8b768c0eaffa6174fb4db8c265608ddf0a26fcbec438fe55b90cf462
- SSDEEP 384:NVYf9+ljLczDqKnKM+SfsJ38kDIs8jM/ZA:NVM+FYqKnK1SfO5ss8YC
- TLSH T18462C019C16EFE7ED4449C3A43863E88429AB38C3BDCE600FB59F16735248112CD5646
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 ca953122c8ebec3e48605188d40e110a3f98bbb2bf854477507d59d99bb1fbbe
- MD5 737ca8e36475352b7594168dcf15e1cc
- SHA1 bba247432753e34519758c0796ff414f52f2c2a9
- SHA512 9b361dd3ddcede96b7490abe4a38d535f078797948f2f8ac489b16900105f8f4b8402c0573ba27ac89fa0708a014d0f699363724451afeca036546a29cc3ebab
- SSDEEP 192:h5wWogcRtXh1SNMFCN7F9xXJ68G6r2Q23d2QdYvlhQ9UXgXaGmzf3k6veC:heWog4SN1NFPXOyid2QT9UXgzuf3kOF
- TLSH T10062D1F24ED4DF78858DC52C959A0D546659108D8E4C278E0708AAB740752F3FA33B71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 aa06fa8d3f0cd8c0713cb84aba6e0280750f99f91efdada55097e6fbc80f353b
- MD5 04208582e1955386ed4cc686de45b01b
- SHA1 d3f0326b8463f5bd17b35b8afd5ce2045d280c20
- SHA512 51a9c11096ef65e4077b3c8cf38db4aac695b9c9c7eeec6be9b2982d31d7db6c0a7e84aa823c846fddc816d47d9b7af185d33fdd6154b32cace413764e150f5b
- SSDEEP 384:wNGE8Nxe51adlGW9fO9j/FmNFoFNdtvfnPMcxZTnpaRX4:qGE8Na1adlG9jAXoLnfnH30RI
- TLSH T16B62CF4A38568C7FC7261F18B0943E97A9E397948A03AA0DD7CDACB3E51C627071A426
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 5cb181f9a255809ce90fc85786f6cde8c833d475b35bc051b316770faba37737
- MD5 33bf54d6fa4c13a0885439ec4b498cae
- SHA1 790705382890696ec2ad59e58ee07dd412241c29
- SHA512 cdfe57935edeb8991dfa0cc291a2dc0889395f1f7d8b29a7af2e06dca74c2640c20f2b4ec3bfc5fb7b1169ca35dd8ddd57dba527f52cb40a1048e83c23a0fcd0
- SSDEEP 384:WpHDfgwlMUQLFVdwe5GkVwaEMLzxZ0nkJMr6ZHbL:WpjfgT5XjvNJMrOHbL
- TLSH T10062E1E23EE007925C3438627B4BBED1C68F8150D0B6801D78572F684261E817CF7EAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 463e3121c38e5825f4df9c090d322c8f08aa32b7b9dce537c449aaa3f8e4222c
- MD5 54cb6f0e71b0eb99d2860d711c74d572
- SHA1 c9104112eeb20ac68f8583505e07939f8eaf3ee7
- SHA512 499dc75e9c8bf1219acf7203bd42481b734a1ddfdff91ff5abb4752bb25e00d030209a1c34cd703b51fce8a91925a7be1d699a90a4872c401b4c155d591e9841
- SSDEEP 384:YG1aBv4EqDi5WKDf1TmHQ6k88nThKN+UPfuDay:j8BvnU6WKxya88lKA+uOy
- TLSH T11162CFEC9E659F83F79D3AE09B44626C4845ECD058AF0953FF4C34E134A72D268498CB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 b9b4eb200585c1524a578cd1b3a4bcf295fc33fc444676803c5ea5a52f24602b
- MD5 71e80353fc5cb3af0ede3cd87890d128
- SHA1 3a6e061d127fa5bd4baf43d0e4cba27ac2e1f4d3
- SHA512 441076a3d4b830509094db5ba3041903e8e6c179367592587ed4abe952286d49b5eef521c3510bc4897dfae394dca08a56305638bb5318695d32f3b099bc56d3
- SSDEEP 384:5ujOgaL1xfJzcRyRwSvwIoMvDqH0XYlrjArcZj2/Cxhw:gOBAN0wI7o0X8rErcZyq/w
- TLSH T19D62D10B4D90C4FCB059751725A9CFF39AE8B91EBEAD051C8933F0893C1716AE362B09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 7e731eb329d712076707298c99c42cfe711f6f4e28e187ef4c119b9ae2a0a13f
- MD5 2da2206fbf73128009468ac75f6ea0c9
- SHA1 9411272516cf88b6a118b65f4e6dd0a76ba92ff7
- SHA512 1a4069a5cf0675e6b1b584a2db09df3d00ed277c087bbfb74f34249ec6579b212532110b3a1158bb58f3766ed60683b6ed7069a6b4f0f60df5a9f59c15452fca
- SSDEEP 384:21Kia+aX9Tx4D7QBmoGY8oHPoItI7xrA5axOHBo++Y4CpZ+T:21KmaX9Tx4D7MGAH9W7xrA5aKBDBZaT
- TLSH T17362D0D78C350F4ED76FE12F225728867F12FA4F6515E5962424B4DB75B8C302206E5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 16KB
- SHA256 cfeeb8ea830f93ed9b440df0e899657a29169bfc296dd58e9f9689ec7016511d
- MD5 800fc6efe3510f7c796ef13ec92cb568
- SHA1 5d0b8ccaeff48602b235b32c4088a2e9ced9a2a0
- SHA512 55fbf4dacd9d065846cf7d54c3092ab83e1125c96b4c43d77e723ac6e76ef2797d647498a61e36039d9fb22e83b88ea55c199a685747056db7c81ba2090bc95f
- SSDEEP 384:3wg+2/5nlTq1TAaCR6JFJrTj+etqgZBEo6wN3w4f:3EySDi6zJv9rX6g7f
- TLSH T15172C091C1EB91D9F33053D54A956FB2B3ED29BAB44B3531D0F0D6421AA89AF3133074
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 16KB
- SHA256 7338516f97f1082fe62f58cfbff334f1c79fbf2bc315dedc390c14022cb38897
- MD5 8b5535f0105a155806beff03c2027e64
- SHA1 8a377cc30c6e0922963302d586fe14303c0447ab
- SHA512 94f72a9ced2ced7e37a1aeb600277f31854550ccba219c8c63c175f84a1be827c56df6333b090d8f925ea58edadb87fd4b087b6b03bc1f6927d1815a0ed8bae7
- SSDEEP 384:52g0FbVdjAEe3VPywtjM8WhnROa8xGMlp4e9lr1fm0v844S6:iFbVdjreFtbud2FpfRvZ4S6
- TLSH T12A72C0C0C1C2AB6BD37D734A2600E2772547CCB38CFAC95329F64B285D9ADAD1195E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 17KB
- SHA256 8581ec689b461bd06510cad6a317245b7646e30f9021fe197a0de30fd22b646e
- MD5 c7fa498432cf890f32134f8032e334e0
- SHA1 f5a071c9aca69ce622a5ba2d8730a55131f5cbb4
- SHA512 b02937b9fa34d7ddf53e9127940c4dbbb708c0e4eed7c3552351f03cb4f47766d70e3eaaba354e0727482d59e0ed4914beee1e78cdd27f232f8b0732287519ce
- SSDEEP 384:Jj32PNIANfe0aUG/cIvQePGmkjKZyLaaAxKiRkPPz2Braxs:Jj32POCeBBvQ+GmkjbGLx38PJs
- TLSH T1B382E0285EA70DA927A10A1D1C7ABBDF7E47BDD0440E23C5D05C0B480D76E933EBD496
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 5acfde294fe41aa362296d470332888d9cc08463ee98ee14b79d475f7f1a76b7
- MD5 8ce3a7d9c197ac2911a0d325db9e7c17
- SHA1 3c5596047e2098c46e907cc208db238f8a06dae0
- SHA512 6a66272639ed6e2b1c605f876cdde76d6545aea69c31ee123234150a091f22e001208c198d0bc818490c1e8b1a1acaad041ea89cc98a77ca92eac26119485727
- SSDEEP 384:HMQzzUMGUyU7fl4aryhBvkNT+7+7iEhf2FdiHhgyJQBnWPGcFewmEK3PIbUbE:x3DGc7IhBvHSXuFK6y6BQGcMIK3PIbr
- TLSH T1B882E124119193A42EC2C33CFEE2E52D058667F3AA56974DC2B638B7DCB385ACD424D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 07c5b1655a9942ed08d6902246180d4955fdaa898e50ee2a330cde491b0d75b6
- MD5 98e4b6351d395bd9a699a6b6cb47c42c
- SHA1 67ea0e60be0674a0cc723b72e329aa622b2f44fe
- SHA512 a1f728279352ed81e9d7041a41d6e8450bdbdb1a11db0cf471442d9ba28682861410b49db199ca813d1b82fd300ae4d29084017a53633ecd28f65e28e9a9ab48
- SSDEEP 384:NjJPEgfd/wjZWCfgcyjfz0J+2h2pLow/AnEnYaFTTP4EgUNvZCSk:xJb/wYJnfz0Jrh2tozEYaFnCUtZCv
- TLSH T13882D1821DE8F36A8716F96E9FD37457026242221AB8D814059DDFB1EC02FAE14BDD1D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 24ad11ae718d9dda1ccb1ab0ae37285a751459e5986005678ec1f7d44c7be33a
- MD5 8e71e32263a2f7682b500aa56d14a638
- SHA1 c49ec82dfeab9ed8a271787baf7e207b6827f49d
- SHA512 61593dcfaff1b279baa07d8f4bd30a959ce087a485d8867a992be85922f2ef4f8c0e6d14a42ac4b7cd921eed42feea5f91ba900c02e1391bc2aae47e871ab138
- SSDEEP 384:BS5CnY/NMd/xvGoHuvlr9ErvwFajP1C8sHVXmN58Y9CsxwlxfxeVqL:BS5CnYkJGoHuv+vuabLcyD9CjY4
- TLSH T16782D0F6A74B1F6F705BE03BB1D8DFAE5842C6850B175FB14742CA5350D118A884AE0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 36c7c101b7e38c02b86b8cc4f38650735dfb4a8bc38085cfbcb8dc6b15df5d21
- MD5 2149d8f90beb6772976eb85c8a1d7783
- SHA1 f5feceec91e80d18fabd9bf670489bf9024eecd2
- SHA512 5c1f2fa8cab384ccccc76545c6bbb749fc352c917e82c82134148334fd1c5f5139d7bf69c2ee8ed76b97d4597134edb2698d42a490b38e10e9ea303955064133
- SSDEEP 384:rVSMeLAUpBj41HOqIiCBRDqOxuahN3OdOQBQ+fpKtqaOqhuQ:rV8Bj4wiCvF5Hr6fzqh5
- TLSH T1C782D097ADBC5B26332A10076E006062F03B6BF8B5CA767107FE17255C496C0DEE49FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 fcc33ff5b3537f54eefe45d1cc87095555f660ac2e3a0c1a56c3cf066aefe1ec
- MD5 be1f3c71d12b05d017e4ab989d11b047
- SHA1 983657e2d21f089f21798dc33abcbe9e81fb792c
- SHA512 435f89b2a1a7365cd61c638abea9cb38c49ae2bedd533ec5975ce4c7f60e1ad4359ee66b8c47dc7fafc81e119dfb4797e90ad2f0a1dac8bc0976caae090409a5
- SSDEEP 384:vYnrcoRnGpjEG5rH4ZoQXX8wt0mP75A+yUpSyyKJaIKLDuB:vicEnGpwOvQXsQ0Y9z1/ya9KLD0
- TLSH T1A382C05AF39F6259220E8CE2A3266AAD02F5F20C4C4D178E69961E35EFD4C40349ED77
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 21KB
- SHA256 a3f96de7818e6065c746f08c1b8e82651369c41d2edd7357c86e1895f34e4acb
- MD5 100bd2a70ae01206c8f3103ce818cc71
- SHA1 5589465ea748477bd7d590dbf45f8684c64e4aea
- SHA512 791862479c53bc8a9d630ff566ecde8a6a1e0b6f7fd27cf4b180b5bb04a6abcf13dea47a54947e028ecff08bb29559a647f4667c6578c8e946708d4e2bf94bee
- SSDEEP 384:vWDH0eQjnfCChu08jNJWTfMKE4zLy7Fc+nSZrqAz9BYs9DkFr2QJi1gDBlmtXwH:OT0eilMKE4iCKSZrqAz9BrqFr2/XXwH
- TLSH T177A2E16F7788A216E0AAB169675CFC0E335A64B601FD4C74EA86F31D27C30275939C0D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 21KB
- SHA256 b55621b646608927186a078161ebcef03af4c34278b000686045cd1ddde447c3
- MD5 b80e3b1b91bb6b38694b17d5a90aa6b6
- SHA1 1204726bd870b5a40e284757447009327458e9f3
- SHA512 4ecc11ba7037c20aaaefb546c1004899007b53bb7556f31ef7398b8981acc9305cfd4fb813d6d3c1ff7bf78a5eebd61948e51727b9b3e23c67089bc382c4b9e2
- SSDEEP 384:PalAL1cscGZuvWMSrWeEnaAogg1RjL/OJep3UT4B+bbkCgNc2UnZvu/o:PxBVcGYxSK6QW/YkXibVt9N
- TLSH T1CCA2E0E9BB58EC5E393E0611DB35E0BA9F5D3E313D996440CA150B0C78388C7A1DA68F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 86bc1d3ec140688606e29680c8b6e4259f05436d49cbe0d5b9aff721e14888de
- MD5 66109346fee0478612bec592a4a83cd8
- SHA1 7c8e1f954a89220c1b1005d5647d8c8880d5da05
- SHA512 b3e35ee1947d5f597916906e1b0592cf79a4d70ed25f8e8959a33e0c93588b34684a602ced0dd8847b1ba50c1b2e7be431563fdabcee1965054b619422d60e59
- SSDEEP 384:Y8RZdaF31sG4XLGVRxrJ2bTBpsUM610XoFPnzvSdajMr/RGWwHv4QXeTRC:rdaB1sdiVRZobTB6UMb0PzadaIrJWx4C
- TLSH T14DA2CF6A9CAB034D7AB1D97C0A7522E4F8CEF64AD25F600750BF4D12CA347E15E87983
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 66d3604b22fc8fba4108dd8ccf41e4845133654af615b36d383d914f1025ce8f
- MD5 010cfc278c451d6753f8ad5acd622fc9
- SHA1 a1647877b9bdd5c3bdb98ce01141360c989518ff
- SHA512 3722bb8b1b39ac1b713e2432d0f29e5492f1771bee3cc4708bf9198ba42edd5a3b61efe3ecc4c6ccb0abda74f99daef5f47283bdef742c11f97c3bed6119b9ee
- SSDEEP 384:aJzAOzavC90ltE6sBZBjn90S0QxKwTBllE0wjkpwVARR28BVx6jsIY9P29b:Uza69Ayf190S0QxKWY0wj+KAR8kx+W2
- TLSH T1C7A2D150815B8E75676D0EE1F590FFB9EB4B59041DDDB28C98A0D6E6890F001533BAFC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 b0b7b4c4028f5485ce777e973eaef11b62090ea595c7aed81554dbae60e4a065
- MD5 9b4cdcd3b2d9c33dff37310c651be122
- SHA1 66005bbb60f2dacf8377bdc602d68c79674533a1
- SHA512 db3f8ae97c19f6f4ce0fd9ee5a4840ca64f37e6aedf6257c4f5cf1be5eaa6315fe8ba711c6086ff96b5e3aa9a42754c79c5516ada21784fcc6aa05f33cd97d33
- SSDEEP 384:2b5I4eEuinp+LksxcJ8G95iaNIJy203vVXjkckZjGAvku59sefeKFu/t356NU:21gMqJxtm5/sy2C9Iv+K9rfcl354U
- TLSH T1F1A2E1332ABC92468B277218267B65206E5C4F6CB83F2E40F7FB2A373A26974D510530
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 b89b9dbd89a7f9aa71ecae1f78e2cfe59dc196a150948203d1d4f082013c9c10
- MD5 32eac2d6f24c7907c4f5d3641f42c2de
- SHA1 5a5fb77c2857eba127cc4f3a397dff65f4c592c6
- SHA512 6adad23e70c7c2506ffcc2b5fc1f22b3f62562e3abee2dfeadc35c00a7320c7f2cdd43038d37975b9a1064ea7d5c083b591f2559c4cdbad84f3c226d73161d38
- SSDEEP 384:NATxKRK4wnmNqlnlzIfdIpHbKj0No8sCT:NAwVDNq3IfeMM
- TLSH T1B752E02D6199A8772CDB2A49242117C936921936AF83036D47E8A353FFE4DD1E4363D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 17KB
- SHA256 5e5fc08ff00dbd21ef5b7d57edc847301cf051538ed2f76d472150a38f30b045
- MD5 8f361ee58f98a93550993000d7cec39a
- SHA1 c894a88aea14a09e2d24ee473176b47c504c39de
- SHA512 7df02fbc2f47ed330c593ee2053412c48b9f87a0a74b1cd2b20749e0f51d3fd84e71c1b5741ddb974265574d9fbc78264c457d1facc2d348b115cdc37899d2a1
- SSDEEP 384:PWFxKNReFtIcFCISZ5RarSsi+N2BFEIiLxY+YsquuIyBPsGQ0:PwiReHDC3BO1YnlP9
- TLSH T1AA82D14E0C7BB7E38D11C81F58A64B8E8460C6B7E970DA01A2587E74594BD94F6C1B2E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 477B
- SHA256 77f02db2cf4f3a611af19a5be72488dbbfa40c113c074c8c587859d28380dc65
- MD5 34d253ecc15a107008e40cae94b1e72d
- SHA1 3cfbb78596d5ac154fb2c7b98a9fd59f2def3c3e
- SHA512 546c6048a2c9637668fc78a4c13acb858afb2c55417b79e443fe8b766300ed0a871ed835fc2d0fe26a39a117fa77d49f1f86eaa1c6e7598290e5eecac5926da5
- TLSH T10DF09ED0498073AB0E5B5D520B034588D1E3D77872868541AF7557B5E61098ED591F54
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 11KB
- SHA256 0ddc582c731ec8223520db49f870288e5c2c3a1f76a002f7dc12c3da25b0fb8a
- MD5 ae0a3f352072161b5d716187c52409e8
- SHA1 f17aa8527ec1a02de808edf8ad3a066bd9ab389d
- SHA512 52a90b3df26a1e4f9e5a6cabe2ab72efd4af6606077780f375e9c9f6e816b42a3ecbaf751ff8e7080b9f72e41c8980aa2515bea86eaa250f3eaa14f2482be25f
- SSDEEP 192:s/Qefwww0SEN8V5sRlJ8BsuFSWpife4H64+IF9Vpeqt/FYQxez1Hjns2rpEMU3XO:stwmNg5Gabw1r9Vw6p0z1A2rpEt7S
- TLSH T1C332B084F550C1D584BC2A2CA202BBA6275505C3CB24D29F5B21EFDA472AE69897678C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 893B
- SHA256 447d18465f68dc80d570dcdef22ba7de262a1865bc812c97eda6fcc9566a38be
- MD5 4b9cdda8597cfc79d4e1d26fdbf92dce
- SHA1 dcbb07cdb5102cd504ea131ffd92b7e3b9de1165
- SHA512 084c9e9b9f679740deaaf4731c4a6700581bd36ede6a879ba167434706b948d6322665e55bb6a89979480abfcfbcec250d8aeb754c5576df8fc74d29150abfbf
- TLSH T13311965710262DCD51833E6502322023B032BD09F73317664A742F1EDA581C8F2B3825
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 941B
- SHA256 b4bbd153b01a8fc27f311d15ed327f717bc2eca0a9900d89a1aabca608f34ef5
- MD5 a09b7b01e15a754f69e04d635bd980db
- SHA1 46b3b660b7c2ffd65c88d119b187a47a75d56feb
- SHA512 985caacb27e8bde6e03c6b13e4bacd9e6d495be433f4db8f60ab7b0e9e3f76e9fb85e4351063b3a7654587ad2c578c9aa15d7c0f32a00d544e465d19b3e559af
- TLSH T1F911880AC07D8787EA6AF928471C2C9FF8D43E9653A8497F8D02589350D8C5E6FE1148
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 1KB
- SHA256 d0d882f1a723cfd146b6c548285d2c91a761937de9930132a42591fc1a2672de
- MD5 73c1aca6447dc44fb2849536bcfbf752
- SHA1 8971410b716e4637b701e4a51599f662be88531a
- SHA512 1d9cd1c8a8616834d970f96c088815d802114df31534ecfd7f8f9dc508126fadb89814d899747fd4264b39cd145d56c45db83caddd4b660905d8528e571b2efd
- TLSH T1B111B51CE3286D3BA802938A254A1089C0AD03CF8A44E86873B7F2531B4B49633CE53A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 1KB
- SHA256 b43b03df362a5cfec477a51b80e04f94edfeb12499c863fd235a3b6e5432b884
- MD5 14d706e3b333aa149f4904ce3cb71a8a
- SHA1 1c3836c2a520173e4b6578cee901780153b42463
- SHA512 bb29b21a53cab0831e512e66065fcd96830939519ad1eee88e717f5e809142ce5689f9d762d93dc3800e1c7f8c97b76faefaec75e88e23914d1aeaddc32265b8
- TLSH T1B72193198B30653B626A629AA4BBB074C9B6A4CC8D47728B133AC4892C0EA371030B52
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 1KB
- SHA256 80c3db4845b952eb9e5cbb562532dd9e14b7c733d6aaadac0eb829339a8f60f9
- MD5 a6a5538d32d49675ca894d4d8fbc8629
- SHA1 991014ad7a0eccd4b80c704141efe1b92e6f7b32
- SHA512 f13a961a4c514e673cb710066a700a0c67d78d39c3ea88d0626ddfba12fc134efcd1b47c11aa5dc745d0aad3917acd176c04221bb471dc85903b05f96425c19c
- TLSH T16421D5B81E0AC4A29324F689429CA3F2AD9C2762769E90C82BA5C09E5DC130AB0C54D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 1KB
- SHA256 832a7ad2b236e002773214c51df9364768db1cec57be8cc6f0ad2dd2be86f67e
- MD5 6b7505ca012150e402b6419546885e1b
- SHA1 0d50dc88feacc6381b6287b4f721248fd97eb75a
- SHA512 7ce6f19656dfa61ab92b00484b42d037ffa36818e3c6f17621ec7ad34cb5306361918b3e0d59d5136eeff7073ac45763c541db2588bf88ba6db18790cb063b1e
- TLSH T1F521E9F639F7A4435670720D6C8A503285B02FA0C969A0A5A23A58317E5A7E951B03D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 1KB
- SHA256 2ffe741c95a6ae8421a994f44edd9f1bc48b43b59558501b4a28f328aeb19db2
- MD5 817873abf021029c42a0baca9632ece9
- SHA1 28eb49d941773937a8b8a31c0f6f19d2e5ec8c85
- SHA512 04751ae3903829386de5fb5dcbc4e9f31c6070ed2c2180cf8816559fbb9daea55a95cc773fa3341db7206c8fe2d19f49ca8e37a4ce44aee9dbb0001409df0158
- TLSH T117313A928A354239A8011BD29D43D1178583BAD7419E82BB6D0791801B0049763D9AC0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 1KB
- SHA256 7d52279b16f2c4f7ea841947ca89318bd4a406af1c69e098b1ac015ec5ab5fbf
- MD5 c8664164606dc83b70c8abc82455805a
- SHA1 89b81184cb8dbf3fb6d86730809db1f9548cbc5c
- SHA512 5fbf5e8e97e35476b1729e58e92e6f05a4e2450b7506ee36544f9c7a0681d8facbe7f7748d4b0cdd551cb6b3e9b161ea120d6be56ff1566b9526755dd9a88be7
- TLSH T1C2313D43F9868D37E25D35EC0AA1DDD05A424371196B4C70E6AFCA8763FBFA12290806
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 1KB
- SHA256 8fe7c56e0245348ff7b8f3982072905a7b9257530648cacc64d5e6f50c6337c3
- MD5 072e982e6033e55de073808cc5366ac3
- SHA1 472bf5c7d00986cbe42181da685249b45a8c42a3
- SHA512 b2bd17d45502abd61116df66d473e22ef6b7964f65c3e572bb6bf0211e51ae8baa3df78eac864145561f5f31293bde5b2a2b0f73c549bc905f8e337b43411393
- TLSH T1A2410A94A23D818EDE14A0615E010E9DDF8311024F6C341AE363E2F049BDBBC9DB3264
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 1KB
- SHA256 fa8285e55d888d46208c4b5dfbd265c2a5fd7af096fdffca93159646a45b9ebe
- MD5 bdc624af74650b70bf63bdcdc9a0d40d
- SHA1 ed0e9d93c0e595396f57ba1a6cde0feed9f32d1a
- SHA512 006403dc6c4cc254e35d78c2ae01b9f0cf531c5d5af7ca4e0f1f2f0570cddb43e7dd6afee31bb0014254785f10975b2103299f3a2cd6950ef505ea0ae1e18bd6
- TLSH T110410A85976D4389D460F872771875DF949C27C2848549CB656A66210BA3CE2D3B4734
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 2KB
- SHA256 6ca6d0e69d876f9cf6b377c3b8a5a7edd2380c85a0845ca3e1742f57d71454f3
- MD5 448529c214a33bea668c21cd54adefa5
- SHA1 c89b31d457f10662730f2e0be8617a11ed23bddf
- SHA512 738298ace693a430c4a2ebe02543cb6665451dc1b61e659f022644c7276bbd7797ff84153395bf0a9231004e7ed7e12aa8136a73c76671b5b060c8c864931ee5
- TLSH T16E41F98923AE31F557686D96CAB582E48BC30C53E898D2800B100C3EA55D276ED69367
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 2KB
- SHA256 abb58fe4113da9488619eaf96f60364b7ddf9859027ad0f9940f2a622a693c3d
- MD5 3af059fe570a993902ea1dc61ac3d65c
- SHA1 ef8fa5012c0b55374e2b9139d8891a7bc4a3126c
- SHA512 57e91b5761f320dc8f5285f0a01a2d90260810f5fd04c45e4eaea6feb877f3427d3275f9e68e0dbcbf4daf84ff6ad405b4ac62864dfdcdde49c352700902ada6
- TLSH T1B84138F194EFE8C8C90E3CDC21ECE087E626B1BA648BA390468696108C10A80B4C099A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 2KB
- SHA256 b400710b8e75fb389551a709e36d79a19a96c1ef9e6da3565b6932654c2e8a4a
- MD5 3bdefd2eecf8e4c72568e5e81496ef3c
- SHA1 b306cf7b87aea75626beb6c831b239904b43434b
- SHA512 b6063bb37091734b89f70c2ae923cccdbc59aae7522ed27f7690bc880194ca35c1c4b0acdeac68d11b022a4243b623602fe79404a78404325d08117f6b104d03
- TLSH T1E2515B00D874AC85770BCD99D9A76E86B8F11A7905E997ED0BB1F845E3735E2824D0E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 2KB
- SHA256 a2a97842125a0d0226c3cd02c3016397f264a38a9124f322726399cdbe50e00a
- MD5 80410fa446ca83d0b82360039c4095e6
- SHA1 9e331909c5e16d63bb5fa5c1d8cc0666a657cd80
- SHA512 dfcb03f31561387b0cf564ab4e268e72729026c44e60dbb0f6fbb535f73362d50a4b4b04656ffc887a9e3f886afc50fee0fe4700a63364597002efaf7b26de69
- TLSH T1B5513C2050B75A673DDA4CF0D9083448AF91451B3A40BC142DE8F14BB4991CEAAFEE93
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 2KB
- SHA256 b22c09d65734bec9cbc53322e61591090244d043e40571641e2cd21de8176c11
- MD5 bfda0f99b8499bf639826b58de07426c
- SHA1 27e77094b65a3bacbc72ac33f32b38c71fb63d94
- SHA512 a5d9b9f8dd936a3494c79305d6c943cd6fe288f3bf2265d5ae609f5b5e0988fc60ec33b2d5c8d5948c6483d8c0e8ba35cf8fb3984237535e8d2b200bc2ff0a63
- TLSH T187513A4C8EF4D957BA3CC6EF0E4AD4111352E3BDB47A012CB1A0E1B4512BE0A1F4D2CA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 2KB
- SHA256 90ca309994518dc0bdde676e54ce48703ffe5cf6130676f6b7db26a159e5e76f
- MD5 7efca6531ec42c3fae165e3483e7ba11
- SHA1 66c33a8a636a5ea08b981a6553c615ae33d7e279
- SHA512 f76b32b3d4953142769e38c7978d8e55b025485ec5fabdcd4237babecd661663227876785aeaaac472d2ccb982208d511390b0da6da6063fcf29aab080231e02
- TLSH T147513C19738041A2E74BA8782FD911B1F7C98A3C2538DAE73BD544C4135DFA0719B6BC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 2KB
- SHA256 4173848fd521d76f2bc876b20237f35b406810043c49f2d3b67d41b2e69e00e4
- MD5 a779dc4cf95ce84bc917149805c78179
- SHA1 2237c20beec67858c317ff81b1d12e7e0b37ab63
- SHA512 b3e8072f7a11493aa41da516387f9ec50d29268ec5ab41e7ad4cda2203a644c853f5901d83877fc779fe53695bd4ae3dcaff360d217755e70d113df353f053c0
- TLSH T114513A34356D533EFD23F12E33B4EFAEF9DA426A82C618988281D099B1E42017C0E422
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 3KB
- SHA256 ddf321494251e91b62a499921f42025c0902a94183e9bed75b6fa3e31e94407c
- MD5 49b2ba9d8c7450e46ab29a8683d0d206
- SHA1 abc0906dc196147c5c28ddc7ba01658fc3004255
- SHA512 a8e3fedc127302f341e4255f099529f0b99a58fe97b2557f0fd052f2b2a005f13aabd43b3ed3a4a66b8f0aaea593df61914238ba8f9913751e018ee753e393bb
- TLSH T1F8616C12A306EBF683D3E727631A5C653C84CBB01F220EE58426A5C147AB8F415209BE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 4KB
- SHA256 3104bf23903196db2e9b7b18ca26388a282dd4e8660bd8542de912a99023e5a4
- MD5 602b94a1bc121b54d85774cbbe6bd755
- SHA1 ca5668abc61c54ecaad877e8e70d8fecbf5cbda4
- SHA512 825ddd64099afadc22389dbc5fffb75e0015163334a68b8f975b1b2c383e45c974de706317c46340c8b4e052ef8f5e12dc6b0c24a22a275b94dbc43920046c75
- SSDEEP 96:peWA+KutYcJzZNbN0LGxOFIqreJSWNUDt0kXfMPL43kXI:peWA+HYctr3xOFI8eJSAsRXQLJ4
- TLSH T1BF819E70866742986509535196239A5B3C932B5FB4B231ABF82E2D5E0C8DF3F1C48C2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 8c3766486f10da8e36bf9207e0b2c5bd7d1e8d0c9c5468e39719f67c2d1ceda2
- MD5 9974894d58e6af8d56074749751894a0
- SHA1 57afafc31d34054b88d7cd46db66555fa456a2d8
- SHA512 9931873e97da709ea2196b0f02a72247c5a176845355749899a5d8446cd6a5e557806e180a02e21f1afd682074762caf89791e686ec67fe8ea93c1ca483d957d
- SSDEEP 192:OKz8Jukl0Bdy1ciD8jvSmekFXNnbdY8iO+omi1sW8Opgy2Jb4L:OKz0ueAHXv9eU5ZY8iOCiSW8Opgy2JA
- TLSH T19932B0F26528B4E31123C9193EC75808EB121FF33196F446BB90B44A5C35ECD6A3ED9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 9e5451620d52438e73e387f50876ebd13c4a9584ef76ed6e5961483b50970e6c
- MD5 680290523d20511fe3d2e213198bb910
- SHA1 3757c01a29a25fd06d0b74b696cd9ff62a913d03
- SHA512 2de2e74d8dbcfc1fcac49a5ae0de95e993e8eb89e0cf37601ea781754f3f3da7217b6c60434688be919dea1e7e2d06e09093285db400302841564066e348a269
- SSDEEP 192:XLGgRFyaeXZU0tAmuA6g7xY4X6DCZlDqYAHt6pn6Iad/uh7bjf9uqMHjI:XjvyaKZbtAmulExZX6DC3nAN6pxg/uln
- TLSH T13132BF54944D238ACEF7ECF10ACA8825977789A0E22A4A0F1D2CB0D35ED4CD6DD161FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 289066cb9f6cbc1a0b60497d88e601b2d7e1e43b636b15bc78af6fd660caa7b4
- MD5 d0c3456a83697ce8d129895a9cb8d9f6
- SHA1 618bd467d7c21b15e1d9799242855657f7799dcc
- SHA512 483dd0dc9293786c5a5727e6354979393b7750b9469f03a12688b6ddeb58507a191db0d22f4e5eebdf27d6d1901448871b6aecc242d81f031e11e291adac51a9
- SSDEEP 192:QpwLr0sMKLReoDHxqeBRgO1upzwj0awrTkHaosid/ke9tQ3rRINFbIOGVa:QEkcIoDHoQajpzg0aw0Hv9d8eTcIUOGQ
- TLSH T15132BEDF2B6948B0ADB40E1C6B6ECF6D725E0A2AF8EC6E260831F701115287E91D0D34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 c67606529901047a5bf38dedc28a20ac354979e217aeb8926ec2e27ebbed9d9f
- MD5 539f60503a6f94dbed844e6a62576892
- SHA1 ea70d684e84ebe3bf5effa2255c06598140e0d57
- SHA512 752c6108c9b19d523ae1d56fa183d770649e402157b6305e527b0d3ffeffd54e5a3e8512b9e2e8af6d0f1537c54209a04949e12b6f110ca81ecbe10cb3ea5be1
- SSDEEP 192:/FYP7vmHpD0eqtP0H7ftv2i6JctrMgk/hS6OtPVaXCZF2PU:/eTUD0ptPa2lJct7kY66NdP2c
- TLSH T12732C0B8891C8F06AD223D79E28169CB4D2CDC7E3418A963A1C6F6023561599BC35CBB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 11KB
- SHA256 8c101846076adc71f803ef2510e98bf63f342e1e0aef9a390fb4b39cab36126f
- MD5 5c5121f58a3ed629a62bfbc26cb87e34
- SHA1 ca5e271c3dd14c7353a1665809ed435c5ca88eb5
- SHA512 8342844052ff7d434d4fcf2e30b95e59670cb8197558b1f0d00dfbf17b25b874716567e36a2ad941a8078e91c1c59d847a534a51a9426775805b1d5ce462857a
- SSDEEP 192:kMTuyZ1A5aodpcALFku0pPwjYJNzQEFMJnSFlFshqdofQ8Mb4YWKACLNjW243:kM1AbYoI0YPEEiJkkh5OkYhAiNH2
- TLSH T17332CFB5686B99DC7945622C1EE80CE981FDFF0C32633F8407824AA624F084F89FB006
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 488a7318b760abdf17724caff26a26886c0dc15c3dc2f7fb22b1d2db1008ea00
- MD5 9e2cd667b152b914dcad575467778f38
- SHA1 36f551b14a5a9c2170e03929d45d91de20841328
- SHA512 2dddfd3352024c0bbd8b38a16bb01e7e4f133523c0d279704a476a48562a6b3666cb4ba6f9ce3be82e4adecee91908ad9098732bc0a8be42d7b6c116a50398f1
- SSDEEP 192:/NNbeVunHDc9OuGvsqnpeZi6txjG3GMSwWFa3Zi50q3Dt9mG1H2H768+ZAWFyV:F1eVb9BZftxa3GMNWFUZiKK6HIZAj
- TLSH T12D42C0933E1C947D49E159DE002B6E7F5D20F559611F0B806EB3954BB11C273741C4D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 45e83941138276ea9280c06aef152a434370c6375ba6474300f0f38c91b5fb46
- MD5 36db1b04112e6ec2387543636b377d3e
- SHA1 9656a66aa6c386c87b0ed03a74efca6d2cded285
- SHA512 fe9e15bb56ec310a4ccacfe6f172abc38ac2a736cb472f766b18fa5e1568a1381fb0c4f5122dfa4a17a06ea5f4d3b3219540d4235af5c839334221abb93a0f3d
- SSDEEP 384:ZBOUz8ilC/VkOithNaJ5oN+AyqNgECuv3PCOnpRu+uorO5Xk:ZBOsI/gt6Q/bCuvf4NoIXk
- TLSH T1DD42D0CD21F1A754FAE1CBE4314DB8E954BF8609AF8DB322344740591E5249BB3CA873
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 e46a3ad16254baf70089b4f6511fb43056bc937deb1979801fe4afca50ed3fea
- MD5 ca6e4bb342e13a86ff52feaf71309ad9
- SHA1 a6182acef575496c4fde26663110b4fbf3264a6c
- SHA512 06643f3b1b828e62ff6f8b0566b118d5b6db745582cb054519913921c8167855fdbf02fbf6564bf3984ff99af0a224eef8c5c42dc149e486d9a41ce6b521d303
- SSDEEP 384:jdOTfsB/p5O20zheNIY3xlBw7Bjies8kZ:5OzstO20zheu4DCieM
- TLSH T10D42CF4B66248F32C2227E50EA20CCF9424FD9C11BC7DADE662315EED39157D0DB72A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 6a8bef8ea4bbcbd3438d3d80b844615afc8ef7b3c54cd2c1a7ff9e7b2eb8be91
- MD5 aa1b6d34da6bea907fd5463f3fbad8c6
- SHA1 ca15e8281dd7cdba24a925d8a7e9a2faad97778c
- SHA512 9276489cc78b7fc9176155442926f4f59320102013dacbebf9aad59b7b104f04ca273f51ea8e6b78c6149cf739efeb4b1f0035c398ea39da805bbc09bb94d83b
- SSDEEP 192:0oK8HLT3XxhjPM2zgGiM/AIapMRmV6hPoj3+Kj0qWpKKUavNVyc2av3:XKa3Hf5AIaeRG6hPeP0q41vNBN3
- TLSH T1DD42CFDB506646BDDA3B665AEB8675F0005C405830C0329790BACE5B87AC1ED682FF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 31da03f4fec73112ca46936d32ce236f783b662edc8c1b4f03639c676c5af1ae
- MD5 f13338562d557513bf8f9d450042e3f3
- SHA1 0f15c82a8994b20459f0ecfc5de1c01e95a117e8
- SHA512 132c985e925ee37f0ec589a4b4ecfed54bddb5f2bd97c956caee2d7d518c497927dc1fa7dc2758adf8b1be6953cfe4360e6d24a2bcf99a79a9ee93ad73a953c7
- SSDEEP 384:yVghlBn8hrLuxlyZDdUD6C+0mMd3U/Ll8QGAeXT8:yODR81L5xKmC+m3EBTG7j8
- TLSH T1DA42CF3F07E6F9395FDC0B15B27D089B93549151A26286FB84069FC89CB8B8552201FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 1835d1994990b57e9c816c6ce8515853553b902527c53b2e21624063809a512a
- MD5 e6eda31373687e2f46d4e9069424a0a6
- SHA1 db53a6654facbce6dadd97977a69b9f7e077c153
- SHA512 379c6d5cf415af42654e100817a67cfb87fd3a5bf777318ac18a37564efa400c056704b5cd78c1df310d488155cc87285724f473056c3d799050ca3bcd7f9e75
- SSDEEP 384:bC5t+zdogOCOpwcG0LE1GSf0JYRmABE2UUhE/C:bC5IewcG0LE3+A7UDC
- TLSH T1A842BE8F38895477BC2D38FFE8395ED38874222125884F177673B0B068CE0E6266ADC5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 76fdc94f3da9cdd7e1d806588a9c28041171b4e6beef3895e0df4629d8e88b63
- MD5 8f2022eb16f476b1d741f579d08a495b
- SHA1 79a254ec329a3f0974c2fa65b35fecf2cbd3466c
- SHA512 288ed7f5a7d701e46930293a704ce5dc3cf8c1fc9edc40ab03d7d5736ad46df1d2e9aaa97a0c7afcd5ab8afd52511c8d5fa3f3504f0cc89cc9090f0901d06fe2
- SSDEEP 384:K+nC0pcP5RXzPgH3QXyNKu2HRukf/sGmm:K+5pcbMH3QiNKnHRuksGx
- TLSH T15C42B1798C74611063737423F06593F33D177A2580B90C7F02EAE997619A52A855EFCE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 65a79a0e0d8083cdc1f92c36c157df1018471de9e5dfe25106eff7268704a7c7
- MD5 ff42cef6bbd75b63ba16bad4f6fe3a92
- SHA1 123384f103108ab13d21bb330a4e8ecf169fb5e7
- SHA512 47cc7f1e9617e69744e1e7f458a8baf8274a504399bc1be1ca4d20930e01a61ca3dd303b5c5f9f32e570c36fd9541984d4edd379ad0477746bacedf928e9362d
- SSDEEP 192:9g7hXrMDdPSDRn1n0YuaLB+STnFPHAb3nuBXxYlXRQy2xz9qgE4uVDghTpMsRzsw:sprMUl1nwyBZPAix8KdmVD8OslsIWjCt
- TLSH T18D42D092ABE556A40180D9F79963257F4B93510C5AB573430807C3378BA8E0DFDB7427
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 e00728f788f4fd364cdc7cedfc686b0c8be04a12bc6710b707645dd769df49fa
- MD5 a4687dc1d40ed79fcac7bdec0308cf7a
- SHA1 d5b74d2ebbd3eddf9e2dcc0a6ed0d73f1d7c33da
- SHA512 fed38c03a3ec6f0f872b1f5f49f4c48606812847ad4922d3a6ba2e631b1eb084573470493bd7be025c1c36324055ff91a8a93772aa2ac871675fa4db27d93bb7
- SSDEEP 384:TEXwK7RuOuPnQ/96sl9/n5iDyOtg/1BDaV8rywMh8ww4:4F7RlAs5iDy71BDaVOywPJ4
- TLSH T1A942C03E275FAA3F68170ECA705E234DC13B89AD09F9A944798E2972C74E0FD4E00617
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 dabe5d053d5a5036146ba17df1c4a3bf2accf94fc852b624fb7a73e61f2f1db4
- MD5 f92a195be31575bd11501de80ab219eb
- SHA1 1ba90068b349f63cbba7e77c2bc58269875c3d65
- SHA512 896d2de97090a21cc18b3b815744dd465fbed13a02f7e738c71eaf68e534dc8e150554de38f59041e4cf9f756c29ec990cbf3070f08a91747e07cb7304362070
- SSDEEP 384:h3pGAf6UmpC4oWret/G1m9mZgI4ue4aTKwB9W/+MvfPwP3yUM:hZx7LhdG1MmZgHTDBs+MvHwP3yr
- TLSH T1B662E1D95F69E0B1A65AF10174BB291A6FB16C63D313876D9BE3C4AC83E902347D0C47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 e69a68326a22830e4217e2ed0a01530a68a3bac6faf68e436873b291635b6487
- MD5 2b086a54919dc33f4924f7261cecacb3
- SHA1 80cbc1a7c71115924a7d3d319d4f3aac6254a500
- SHA512 2de19be7eed9a2561242206fa04dcd5ededae73f94643892fbe3cd9df61c7b5da06e09ce5caa385007422a527aa698404b8948296876401846a6a504b6500dcf
- SSDEEP 384:aWD9fmk5RvRIhLJUOaJnRL/Wb34joLY95HvHOVx19vv1t1D:aWZf11sLKOa9l/oYHfiRv1t1D
- TLSH T1E362C0DC5E9B0AA6E527BC1AC729B7E9F138827EC6903381E518E709A135E357CE3044
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 2a22455957d1566c2d39c2198b1c1aaffc82d1600cdf370600f333e0d6b92ce2
- MD5 60e6004598d753b3156e5d4174dd28a3
- SHA1 4567ee005ad0b8927ee584c22d7755950d6fc7aa
- SHA512 99f01cefbe9851ef382977caa91fb953470523eda33f54067c89975f9e90e2fc6cf81cd677e2042fcfc2b24966c32b6542314a425cef758c0b13c39ee6a6b683
- SSDEEP 384:tI2CJ9Raq1UlEMk7lN0/vEpONSVh40M7ToLr+OiJ4l:tfCr1UlEMkhN2yhiQLsil
- TLSH T14782D078AAE034DF26419BDE6840FBDF12230FEF99921A87461E24427C974458E635CF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 dd580d854c3ef1d5c7f1d269a49c1d02264ab9f53b9a673e2d4f69c175ff97e2
- MD5 77c611356c42743554637c34971dfb9a
- SHA1 9dfb2159427ea381a6104a7b4f037f85decebc57
- SHA512 8746c18d91cbc250777fc2344afbe101a3048baa435242591a1a879d129f975336f3d7984f769a979ca735c1efa828d7ee34fbe5c6201bb128b6badb8ba41fac
- SSDEEP 384:gyr4pYketmzqfSQq0Rtdr7AfcPt34TOwlIB3YQl:gy0eketY9HM7PSTNlo7l
- TLSH T1A762CF5FE749C29E1409218071CA9384431BAD58BB278F9ED6CE23175882F7D9DE6D8C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 7128cbb8a58ac9afd03c508aac586a5a71078f78b9ae33a9dc18a7a6cc1c97c8
- MD5 39da8373623284ae199d7d1619377285
- SHA1 d66402ef970a373b906a3c5f1763ee47ffee17b7
- SHA512 3b65b18633baf91286dfcda1451729ae453d1a4389dc082e95426b0c4e58aebc38daa7d6964f9d361883d8741b8fc19aaa32f9e96da8e591e9bc2e1f7024716b
- SSDEEP 384:7c8obsNGdcU2xD2f8KMKnmRy+GTbWM1Af75EDePAs40lpUDo:nobcG6U+DyMFGTT1bDOAwCDo
- TLSH T1F462B03D4D0421AAC0EE6A174340A13CEDD3F61917B547F5879637E0BB8728616F25B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 17KB
- SHA256 c56b9bf3d8ee7f9a0ddab419830df8b2f14d220123881e2fa65f4fa6f197be4f
- MD5 5fddb23b5a30f3ea6407deb2460653e4
- SHA1 0a3f9c6e2d2355ab5ca044ab531ec8c137b94131
- SHA512 9e9e8c2c690c46e8940027817e95aed663dabe12548486fdbab13b747679a1faa4a088c2fa87ebf8407671f0375059543b530b060a5985de1e13ce635cf19c7b
- SSDEEP 384:l5RbDH6m/eJ1f76DXsBLcLD3pdovFRUeV6XeS1vtgT/j7ez+mZOQYhEa:lbF/eJSXLD3p2v3V6XY7ez+mghhEa
- TLSH T12782D0A5001A0C1CEC5AB762DABDDB70E8B7157CCBA27A2053508DB7A8E533060FE05C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 17KB
- SHA256 62a1fb04dbb3554a9c52debf6802e5f0652eee1056b691a468094f2e353c89d9
- MD5 f78e43124c07e12974c332532d6439bb
- SHA1 3e074462341c0d914ec1010efdcd370327c937b7
- SHA512 8034a2da173e7d12e3b46f4374a3a5a1d228980fd8cebf06f1c6752d6bbdc4660e44704c245284f7027f4970071edfc6f559a2f4caf976674d32b9681df291c2
- SSDEEP 384:E6lcbphhDkRApRlgvaQ9gMioZuP+lMQl5LQ1ahy7rBQiL:E6lKphYOlgvp9EeuP++A5LQ1acPBzL
- TLSH T11682E13E9D1762B5DF2E00399E0A9CE2421DB4FAE7464DA37A194C106837EF4E188C7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 16KB
- SHA256 25ac396da38f907ebe1765c6334efb5ffe8e4f43af3d6b84c0e2cbec04688245
- MD5 b1a0781c3fc043d955df8296da5ee0fe
- SHA1 052b6cb15bf142214c7b97a4daa9f6e12a3e92d1
- SHA512 ce03c2dc2fbc5363d85d13e9093efa3a27a5c4039b89e00c4652162d2d535b0cf4e87b05b21b1578c650feac7d76fccebb14b37ef09ec55e6e6fabdbdf30ce5f
- SSDEEP 384:DhxiOCoFN2ltSpQyGw4SU5cdzF2x61t3jD4qY+B8Auw8JComP:hVitmZjU5q2xUtT8AuZ8oK
- TLSH T1DD72D085C87F5B8F4C536076AB774C8650FD8273E0A5A2D28B93A62290F1E43DF59C26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 ec45af257a58708f05db38de80157e71946a6b2cbe63bdd2980ff64b0afced7a
- MD5 67f8121961e7832bfa71e45a408ada38
- SHA1 05664af75579cbda3a78d38d88a19731441f7b15
- SHA512 9509176ebc8dfa77dc1d5732fb01c51ccd741aee711015b232e6e4f74465396f79ccf0f7beffdde83b22f2dda0e5906f847f803f4b1a4773f11dd67d0ad50fbd
- SSDEEP 384:iGQO3u+MiqfC1NLV6PMpGhjQOed2TBJgRPwTJS/l:iGQO++MiqfC1SKgUldHPwlSd
- TLSH T14E82D06CE7A459DFF1B266487EA1E4A4A1FDFB023592866034E9F9BE5103808054747F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 f32a4dfee848965f918e5828004bf03f7bbea2085a4e6f44e853fcc0d13e3ce7
- MD5 6736de4e29a070492d3baa1475006062
- SHA1 c9bae46eb62313d976cc87b65214c6d6a7c62ffd
- SHA512 ae69366b0a0f5220adfda8110bcb1121e4c3de65278236e5a07fd1364e774681d6346cae93a80e65dbc79b20dfdb55a5b842f7ba950f7e206242233ec7845105
- SSDEEP 384:RIm/rdJ88pqWNH7JbHNkq+V7LdhKtlTHmjcB/T8aWjP+e2fGINVATcyB7I:6CIMHNUBhhGxTjiP+xFNe1I
- TLSH T1F982D05E57A41F2ECB2BEBF399D15565072B40A2C26ABA8A07336593312CE445A0BC29
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 19d9b598c66f02ab774897ed46a909c5fa944edcf9dff1d34e67efb6a31d887d
- MD5 268800713a30ef57f304e3ecc88d38f3
- SHA1 d2a6c8c1ab74ae1c44373f0acf90d46a6db64dbe
- SHA512 6722bfdd28e86f4908f12598b920856b14bcfc8aee979e13c72484266ad7acd81c5feb1a7413ce90e976253d3f6afe7884c7cca03fab05276e2ebf44683af251
- SSDEEP 384:cfjlQpcMNRpmK2Gdp4PnSXeepZPU2LspQ2qFs2rC9UiQOIhAKeQkjY:crlQpdHp57QnSXtZPUEspQ2Cs2C9Uirg
- TLSH T19B82E1677CA23D9BEDD96D98656AF6FE848CC361D20A31CF1090F7E07A538FA1C25118
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 6695c4591d494bf41982ef76f3166603c0d465047a89987039895de1e598a2f4
- MD5 d3a51d4d3707097ff96749dc3a481786
- SHA1 cd5c8ecc3b57680da06a6a478b89f0cd72acee46
- SHA512 3b6668cd1039e658213bc373b4ddb344484a4c340ac980687224771550c9601d8f548b7574fc02bbd4b97306fc0c1169686e753c16dde7262f0e25ad4ed0a2d1
- SSDEEP 384:k9p+6uDHyyBHBv8Rgo+lZ0XALSuO9coZRDv98wRAKF6YEIFzU6PlgmqlhXO6Wv8F:k9p+6uD/BqRz+z02SuAFJvGeAKYYi6Ni
- TLSH T1AEA2E1644148F4CF342B31B0A7DF5ADCBEBD4C9365D6B21156BCD6BC100C98A2A6E31A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 a396e97b0866de8bf36d3d9535e3631a1d72b28c4ebc12e841b76108aeacf9b2
- MD5 5ea841e6f6e7089bffcc753ee8ff2f6a
- SHA1 86eca936f6ed9128b804a8db7c64b117c4e3c55e
- SHA512 1cd96d0114b6ff33614498ce22706150ef568b6822b57e7231ac7906305a9a2ae8d82a903ac04ae06122220c9fe90432dc6d393d740382fa3c91bd06de178bfa
- SSDEEP 384:UecMovcsLu325trNhWh/ZGeP7bTOmbxoMy6fEXxv2UN7DpEah4AA8x6WI:lLiti325trNhwIejXWB6MXxftSanEWI
- TLSH T1DEA2E11C5FD55BC8DC4F2683014A57DF24027EB4D3AEE2CBA3167ADA71AD4346142AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 a72f0ab3bd674d1c28f96c7cda383ef994eabc90ce157de78e2c3d531e0c7a6e
- MD5 3545d6f336883a5aba2973909b9bd843
- SHA1 da1f06ae91e86aa6517dd306011576d7a756fea6
- SHA512 b728f6ba7c4006814d3c9710c27b879e1b3e99ca259f2de8910c76eff35df00f20c38323c1b7501422b1626b5b8b422ae4510d6eca187957a68b7ad91a75c35a
- SSDEEP 192:FZexUSJyIBQJ2I3dIFNmaLHrWaQUeWnx+kdBs2yXscwYPTdrduG/WffC4IDHZNp:FZe0PJ2I3dmmaLNeWnxg2Hcxs0WBY
- TLSH T14C52C0BA842D6334F6A9FF10F7D503605A08A21549B9D91C85B3D3274BA183DB2E7EC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 99a44f5a0f1c1235bbdb554b82614307faa4bffb4d499dff9cb5dd267ed08b63
- MD5 5c8d6f5ddf7b9a2fdc65f6b296b2a6a8
- SHA1 882ca94d68afdc203a8488af0dfb31cb396257da
- SHA512 401fb8fe17b19ce5e7f0629747888eae104960339b673a15a5ea9c9bae4208dc777599e450623f24d3962697e7be9e011e97385990ce3fc9e5e1eaa93ff36a60
- SSDEEP 384:L7mbsg3JuA7HOrZJwgKnNrDyHQq+ZxxjEexuc6rhdUxVjlyyoEuZdfpTXV:3mb7t7UwgKx+HaIexb6F+7QyF6fpbV
- TLSH T10582D192FECB461FF19F86F8736953820F20F669DA386CE14820882725A712D9DBF501
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 e2f454641c57e1cd379745d8819c3888b1437ca4a4ad2319c64c2ebd234fc0b7
- MD5 441bcdc941be943baa07aef149e7797c
- SHA1 d29f091aca7be1fe1811b46a1ea59ad6afd50307
- SHA512 3a21231918684172bd7ce1116b59a566baa3a5660a0e337c5775861b24588128e2c11b2f8e3074fb59f69e464e977388e8083a2ea0417b2007f71ecd03c58d79
- SSDEEP 192:hGLR3tqriYBE+EJs30xq69R0Gx7IQhsRMef0iB458SATbvEpQas0x1da1MBH/ii:hMR34rxbYs3Eb9R0GxkQhKO8fTgpfXxJ
- TLSH T1EF22C09FB96F7B7C461554F29041AAF0E4B11D9D4B8EF1B043E4B880196B75E601C93F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 5ab783096f357a362911692fa0768287bb744b03be90509fa493bdfec53a1e71
- MD5 54a1d167c1111904e3114ee0ffccb82a
- SHA1 253b8acb4c6d5a90ab8e60865e2e51cab033d5d5
- SHA512 c0df0c65efe809d246b207404d0df3057e05722e57f3ce4fbdf503334e714534cf4278040a23e3e2446180ea49c21d6b65460c9346adae0bc7fdd7b7311c9ba8
- SSDEEP 192:W9u6R/aPY7H+sIUL1THvF1Otk0eLxbUBizRHyTNav56ohT60XOiIoJ:yj/aQtNT+k0eLxbUBigsbN3Xv
- TLSH T18832CF9BEF7CFF08415A467A244293507D99F0C4E7BBA94696C363D9A07701A9C00CEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 11KB
- SHA256 f699ad4bb1b872ee07c9e39ea130d0645f12843b789b27b2f9eb3f18464d92ec
- MD5 17b5442f7bec7f0b742a5f34ab13b64c
- SHA1 89e29aaa1464fb16272fdda4111641658947bc97
- SHA512 a176ffa0864f884ec3eb7ebf7270222db039957171696daf041e7939d292f47629b1daec0a65c38b888c3a47853cb0f91c7170795c7c04719cea8d85d573c710
- SSDEEP 192:aM+O+Qprdu3ZyLZddGhu4fgL39Bmmu3XJ9f/JlwxcDDxAFdczcGAZE9SA2xZYXPm:ajcNkZyLf+03rmmuHJF/JlYcDFYGA6Sj
- TLSH T18132BFB3CA996D88BEDE475DB781C31A3A0BC99973594407FF349D62101D3B918F2029
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 f12844493f8c0bfa752d1056f3afe233c9d2fb100d36e17e49e5b3c038125fd0
- MD5 593c464e0bb0a9c96b2b38987ccd7f7f
- SHA1 f206c06ee9e6d6a29c89f5158d9faff7023a8f87
- SHA512 73b7399545f585a8a07d62a498a10d09d6a07736bab7df8a080221a758df91c7148a28f1dfa212fda89a2cfd85ec44a9b1bcb8f9e087165a1ae0f91e2342aeb2
- SSDEEP 192:GleDuUDpTNfLnKeyxzo0smtpsgF1pm11T9a06TGvu8VjKy6oPoLJANxNLRd/GZei:geDuUDpTMzt1s2pDP05FvT+yqqLRWeU1
- TLSH T1A842C0B3868DDA310AA0C1FE3859F21BE99F447CCBCB589C99C1DE6F04C25695B5024A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 6fbce2094c477391b18430ffd1e30f6bec7b84ac59480a395db10b983c8fb12c
- MD5 9f84a578f99d29b5888842c0fa51bfaf
- SHA1 b1f06fc37f2721cef290b39a6b3a328b1793f0c5
- SHA512 78d8a3a66fc6247658e4d67cc27055343f9fcfde875451f71dff166167ab19b1fa702fc5b86af95485d87e938f944168da27b7bb82cd5377267cf184535e0cdf
- SSDEEP 384:rkqFl6/u8h82nrQtUf4igBoxIsEvyboNPfX3keg87:7Qu8hqUwbaZNb4Pf/g8
- TLSH T16142C0628863410F5D80CAE4D666597FAF1F28766B089F622FD648BD7B047C89440CBE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 18c476869688d276f911948e6cab730f70422acb3e40cab68ce62efebfecb2b1
- MD5 40763397c3823f3bcc7c13c06a8a817b
- SHA1 f10c415cf9f718d8b3d930c03ae69e21153e3ed3
- SHA512 f56a5451872df8c90c6f2bd0b1d789b969c150449ccef74a4c98c469748f88bc6819d2b169c11c8cd3c3baaa9ab3910cc8344118f92ed5afe4dd8222b970c0fa
- SSDEEP 192:KeXkomkR2hGmkPxeUNLoL8f0viI9OW33m3a+S5IXTqNNC8SVvb//oqFFL:IthHCHNLovOIESCXu/C8SVvb/oqFFL
- TLSH T19242D06AEF1F0F803FD77AAA7B29A03A41118F974094425350FFBAF1C19C6A7C4A4478
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 bb4c23039e60a9b1b0ad3aef7b6408a6ad3be0c091049b31f0d87f68a10d1a58
- MD5 5a79892950aebbd06820f029047fd74f
- SHA1 b55a757cc52a02a7503c7dbe163c23758d79820d
- SHA512 880d32a11f7975244bf91ea1a542b16834a43b43846864360ee044d8a83946d7c0b6f7a07089610ee588ac3674894899ca1dee7e456b106d828b20d89bbd362c
- SSDEEP 384:aZOSqy/JiydxRxesXsRzdoTYSCn/dU+i1rNoI:aEYiydxREZO8SEy+i/
- TLSH T10C62D09810B0B051B4E3E4F23CF323EECE41AF754895FC2E2D09231528D97B89978575
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 5526ffc00d57554c9189c5b476662c1080e7eadb97a66ef45d8319a3c62fcad0
- MD5 a36faa19d856574c84d2e91ad7836702
- SHA1 cb9125740c40682db030aa90250e2623abcc8a78
- SHA512 3c3cfac98d16efd8b018f1f8f18c6850946ea90ff11cc2f14bdac3abb76e84d9d7a7f776adbe2d04ba1a0bb723610c97f076c60dc5430672d5585e3d7b8c3458
- SSDEEP 384:z1cq0pTg3SO3EtKHu6OLWy2u6NoKpsnQEjOD:xcq0pkCO3EyNOyKGDpshOD
- TLSH T15A62C0C09BA5755DD247F42F5F81A2D510603B4463FDA67A7F086C221AC7F7B8C52918
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 e41b6078f87a5f3c43f5d98c52325d643c5fd6ab82235e0fd57e638a3a50e4d8
- MD5 c77a413dea540d18fdd9637b7ba904ea
- SHA1 8299da9292d5a71cd61c1889883cef33a091ceac
- SHA512 64cc900db90ca6670b0656aab66bff29c368020928e7043065bc095bfd149a921443feacdc8cb07e14a033859d1bf9795c013e5bcb078bc25ef6fbd0b677e368
- SSDEEP 384:D+hB256mcWJ3KfQtEaJ8hExrm6045TdqVVk1zV0H+qR/:D+3jBWJ3vYhd45TdqVu1R0T/
- TLSH T1FC62C00EB16737C987827127B97E297B5695EF24C370781FB31C895537A2668E0DA202
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 5a78ef1d52def6dc72efd44cac4b98d6bcaaa705d93cf9c5453d0eec1e16e1e1
- MD5 342486d62ba8a868dc0410c04f974dae
- SHA1 c59414991da09d844a39b00ccde01e84de3ec01a
- SHA512 cb35a1371d124712e63b3784b8093bbd159db9b26dddec1ef0aeab58894d71b178aa071443e19a8b7b0da1a50d9fa4c45348c325a420cd3d9755a49977181a35
- SSDEEP 192:ja8kQjZjFidZvaxsFGuZA/DawP4V1oGoahDqOwzqrzG3ao2ZD7Eo1oxKEzdNXjDD:ja8XUvaxwGaA/mGCZ/VguzPu7elDa
- TLSH T14062C0F53BBAB5D0CC34DE606232539D57B79520F3A77A67B10256E8488D725062F02F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 dbc4bd478d544f1a7526e68c70b504c3a04dc63d2eef8b2df69bb4b967ec5fd9
- MD5 63d980453da487b59ee939bbed34b465
- SHA1 5f9de936b470b11fc155d2f3b4bfa4f96efd216c
- SHA512 f14add5da6885a5c78247a23a4b7c2ab4f44b42aa4c681ef2297e518554bf1f1d29a307008eff54c1d210fc55e9f64079eb3d6accd3778ef12e2a393cfb61be9
- SSDEEP 384:wYFmiwpoWsKSkz8wMXfp+xYHGc/Iih9/Gb2ViWEOXGoGLy:wBobJRwMXR+xYjAih9BIR+GG
- TLSH T14B62C03D93A9AAEE8F22A1D63D5F24F117974CC007E46A8A9CAA7E51034576634DC830
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 48bf43bca36ae1a499da3bcf92c25754f343d9c42e707e29b018bf362bc29a94
- MD5 91d0bda865854da07c6c0f027b81066e
- SHA1 29d2dba9ac97b0580f342f930e1973070f9878d4
- SHA512 1bb2c40380b0d41ea5fae6d07cdb6d83e429f8d7df347478f5a0d570b47e964409259416b12297229aa07509c3734b1f739a56713d0d1a503fc74e8cb1e1e4d7
- SSDEEP 384:ATLwdvrxo13DPjgLWItJaqi1Dgi9QmP46qxd7F:AoZ03ghuqiSmTqxv
- TLSH T19B62C00449F88DC7512A07A3D2F3564AD2C9F217A914CB4BDAED3FE9D1AA300452B07D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 d7b21b09817700b16a453e69eed9f1ad023e1df8d28122a444c3d10a85928502
- MD5 67d91f83bc93b33eef8c63fb8cd48b49
- SHA1 840f8c9ccf12161c781851e34b9803d8ab774a28
- SHA512 3cf1a5a05ab7d2c024282095e0573a323aad577f5717f8da2121f82af321209f36559796a7b32ce4e889c748e0d5375e4a2f82aee0f112625153ed06bda0186b
- SSDEEP 384:ER1QPQ9RfbhwdCjRNN9Vdg7e8zAUmO9ciDhdKD:O1QyRzh/mecAUmO9ciDhsD
- TLSH T1FB62E1D920ECDD2CAD18D1D193037BD852B804BFA26BDAD669325D5E89CCFD52520B38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 40df6a8f1e99275c9afdae282179706d2c403863ac40f6e4bdca9cbaef680205
- MD5 bfeb01dbd7857c5b59de17fff1bb814b
- SHA1 f5a4a26785f93b2a47e77af4d310d5e8725f36e4
- SHA512 3056ad12ac95b285cbd6d4918f72a76a5cf0baf88686192c35110e7b840ee61557fca3f1ca391417d1c951d2ccb3b8e1f91db14206cbff689872820852567d42
- SSDEEP 384:0Tm9Lq365h3mWzvkeDmnawTeLMaGiIDBoPPS5yTAq:Ambh3mMkeDdaeLdGiID0mIAq
- TLSH T12B72D000EF48E626E84C7CB392F1BDC756A875289CD30CDA596A5F95DD3C80138662A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 16KB
- SHA256 2ba2fdec555cb24cc5247e7396e7833cfffb65ed3f497178a7b6159ed83e0ac7
- MD5 d560da0defeaaa6e9f1b1094b680a19b
- SHA1 f5402a330f09cc41e2c4e51ea98cccddd4f0c4f0
- SHA512 18a4eca4ae7bba35bca6e0ceb464446bd4133391eeb5ecdcf9aae0021240ad56296e90aeea4944e7451a6052c156a82f80e58de0da04dbbcd4a4c7a863f7bc6f
- SSDEEP 384:gxir3QL5uDytkc8hrjEGGqpQeaAI6wAGVs:rr3aAy8NIGGqpQeaAILve
- TLSH T17E72E05A91F0B3F7A2ABC891B50168B1BD7D64D6590805BF0980E9F151A13094FF2E7B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 17KB
- SHA256 aedfc9a460ff88ddef58871513acc2ca1e042cb7e56d34c462a0f75356fdc09a
- MD5 d44734ecfbe56ddd2b2475b38ad01681
- SHA1 61125ee8026f6a983fd581ffc4b9967fbd69fb64
- SHA512 004f9a36c77005b1301db8f73e22cc8836f7c2cadf3624cf10e45666fcf26c88fa23e26f28e102e37dfb9b8d9b509ad574ce161aec6c1613668888f4f3c6ec2b
- SSDEEP 384:8qVEVGVJcKxybMOerH7QirLC8SV4uy6boxl:8nVcJcKQbMdrHbrLYCwbol
- TLSH T17182D1F9FA4A097A841861CF8C9E2D193C76ED149D865C08E9482F3C191D1F7697F308
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 751a4ff4f9b00fb23d2917dfb9fc03dc879e894731de0f8fed2b2a1be0da7f5a
- MD5 d2a58ebbc180b3b82c1e990fb8b897c0
- SHA1 ba75ca3a36836b08c91d87c3308ba2c01b718e9e
- SHA512 b64d88106056f1a2034f5a5c2856c65166de771b2f39c04ef912503ce0c3b56bcdcce707387b175aad3468147ee539d370c0e32621a8b912d265f4c68df75cd3
- SSDEEP 384:mepB5bTcNMqgeFx/a1jnMtkb7d+SM5bLruasDTJ9r67:tD5Rqger/a1jnMtkwSAU7Q
- TLSH T1D582E0453306162056D85ED6FA0DCBDF661F2282D3DC87A49E0F8502EC63A5B5B6622E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 9594729909a84cbc7872ca3a989e2b8f49be024c6c834a3ea2a6491907e079a0
- MD5 72b94fad48b67e9f73adad8177acb490
- SHA1 bea616db8c62756a7644bad32a556ba0f80d62cc
- SHA512 e4bede257d6bb4c27c9ade25ad84e39b288b79a5455717a81eb642930f582cb5404b9be2eec05b2870ea2f4f3a216c871b0f2ccb5aee1f0a10c82e563f3e1347
- SSDEEP 384:nJIVvTOpx9VxuF7Ml6QkN/XS/CEdKi/QyXfnm4ab:CvEpEF7MoQkNXSqE+yvnmLb
- TLSH T10A82E121742D99FCBDBEC7C4522A546818737B993105233BF107FA825E4E556CFB10D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 f7360a09b5be9cb4e8537b9f38998b9826f9bf0918100e169cd1efc17d4b1a29
- MD5 cd944f61895288b18f205be7327f4137
- SHA1 c96b0f91626567ec41ff295f34205d69f5b2c682
- SHA512 ea6f69e77ec1261ee11cac38e085de657680caf4557cfd41579115dbeaf1f5065a93b954240a94cae8aad37e1b4139f7a86d2cf97539751f66ceda6bc0e16f8e
- SSDEEP 384:Yggc2A8c0LWVnEyMQ5l7JKN9NYSqM3tUcDNwvQve2nAiWGOsvH58tvlZ:YggcJqaEPQT746MdU+wkedUjvYZ
- TLSH T1A5A2E0C3EA21049B808D1935D08FBA4D569C124E0F83FA0665A5E3AD51EF13E7F30A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 605B
- SHA256 22d0ad2469d50dd0d9ffc65881bfbb0216bab96658815a54f8552c71b2d82263
- MD5 cefc85fdff06f8c03561574e08cc78e4
- SHA1 a38eec3af1e45a364b69b1a05fb60250a2201073
- SHA512 999347829c2f6f758d743337248acc6a5e5089dfe11cd68fdc4198afd5bdab2315657f1227b705dd0449865d329d24a9036a1fcfcf127276b36e40da4afd83ad
- TLSH T1F8F0029580113E796E1E01573F24A1A4DED54624E417D5BFF3C31469E87A404517E081
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 1790d773345c38a18155f93fc51e36bc9a96e5c4e91e92edd846f23eb44f7714
- MD5 77d537f7207be35ee1e7fb618bd20def
- SHA1 cb6988bafba2190bd8e6403a2af64ba5a4bcacd6
- SHA512 17b25f893756f3e580c3e44751892fe5aa039e77c1ac3b41ab98dbf2455e0a807037674f5563cc55be10a65bb4e10b4ea7d69bd2f95262919be8d74dceacb392
- SSDEEP 384:dM2kOkd8vRnd3x+CISLsOsRoel2PWPsPk27/eKGiu+/c:dM29kd8vRnd31IBOsRoi2yWOqJc
- TLSH T1BB52C0B16B93B7EE4301D7421F0066738C9C2092EE5874A17951EDA92BDB14AECE3487
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 463a043f8e0506def57bc6afb32c5e823d593dec2b6e05c143e8ede8a5bc9224
- MD5 56c4d418659f030206f8d27b8db6a838
- SHA1 5e70a4e45c4f5bd862c6dbac158699f15c8ae032
- SHA512 194709ded63217717420c072eb7753ca997fdc92b7687f7e336122c9aa5543d2b6addefc73587bdb9fce536fc9d8b45ae8432a3f9374694a4dc086bf38c1279a
- SSDEEP 384:r4P3tGYj5vnKKNGAZVLMfBS7CdXh2WSMQO41la8gV1kC4E:r4P3tGY1vnKyZVLwBSO2NxnVc1khE
- TLSH T1D182D0A0EB9324074B41E4D17A98086B6E516B5CA8EC8E1FCAF5C5E8E0A4363CD1358F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 9KB
- SHA256 40c709ef0d171b57e121109abfbe4411db065605249a021ea341444a18fb5426
- MD5 eaad88f83ec7af299b7f51bc1a80df68
- SHA1 59f5bd8bcbbaf8263fd8b3a026b9459f74d048a6
- SHA512 4d3f77b67a23178b9c4020e477c0207d36a17b8f0e185db53656a4015a08151d1f15192198745169bc3a2c3d383e160f45919d32a90e62b6bd7dffa1a18cbc34
- SSDEEP 96:UgKCVq8uewRg2UuBIcWuUpnDP/7mObSbsC6VNl8yKBMY+5I10vRMCncpI+x22zKx:Ug2gZuELu6VT4+5Q0vTE22zt/LXxDPdI
- TLSH T16522BF6A4D42FA1B1DE8409668A4D7E9C342B75808E578071F2EEC6F01D07B40D2E8C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 4KB
- SHA256 8512d0d7eb7e31f8c4ea546af005a9af62b9f1ab889cbb8f6fe81706d06179f7
- MD5 c70b48377dd5290220a869460ad2328e
- SHA1 84848ad8bc2e7e007b617b8bf4d888a3efc1482a
- SHA512 925785f9704dde18b6e80145d9968b10fd4a174ba846d201c0cf4b66bc7bfe4b82e314d8693086319802764284558ba2a58b6fc2520f17e1344335be06f6beeb
- SSDEEP 96:nbRhqM1nQIuTzkL4830Evxr5k95ny7oQPhXb37r8vzaH728nqv:ntVNkT2kEvx1bJbTqv
- TLSH T193915B972678F3A998611B0E1E4A00F9C92C202D61DD516C635AE9C70C4FA891EDE162
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 9KB
- SHA256 65fc88f4f385d2a226b3677fa5da1980eb5897851a04e49d9f8206bb80cf40b4
- MD5 cf50122025a0a5cbb29c9d8da48f56a9
- SHA1 d421324e53f61b130f263cb3c8d4b57e0c4d2e43
- SHA512 a797a29858c26ef0ba9c883623ac617ff088cc43fe5b5f42d6c901f906dd6524fe469f42a9f7c7a08cad3c3ffac68b7c47621a2a49ac60b92a403421d814e834
- SSDEEP 192:2drd8wNbuJiwAknd+wxG2Y4fDIzxX0gGksIdpD6x0BdA1MQPu:2RdLu1d+wGGLItE13IdpGx0B66QPu
- TLSH T14612C0DA7037B252A441372AA4E95F5B8906397C1BAB3230F34E3433564414B7E0E53A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 7b9c0e6b634d2e8e985aabe1d62d8334025ccb24ad408ff0138f051fdfb908b4
- MD5 40f748d8198dab31ae2e116e86ea2fde
- SHA1 d077b18d9c7a010cebbef248d95f05ad4a99f406
- SHA512 d0bdb26b4a63a9504607f931b0a1e47c1ed1e097f899762f3a4c405132ef151a119d4e430090fabad384c9aef0f3a73c9fcd1dd4a6494df08856577a829a43d0
- SSDEEP 192:kSdF2LYiGO9YON/A463JhLaPxW8XYj0yRsBqUpPlKQbGXwLSyr:j6Yif9YONIhZJGxPXYYyiUmKbwSA
- TLSH T17422BF0DA65C823E5F9999DA145C488B7EC91DE3796C01EC99E0CDB0EBFFA99201D443
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 91bdb9f2f1d83b76b966020391f16cec43fcb68d7b779871ecb4ab408fedce18
- MD5 6cd68b61213b9422b32ee53983284ee5
- SHA1 a0c43f75d1624750811a8baa9344b60b0a85552c
- SHA512 65420156ca9d02f7f9a41b9ad12fb09278aed4d592bb0ce5f7a074129331efd59febafadccf29be7a473124cf5c4a4bebffd677e672d9abfb7090282400b6abc
- SSDEEP 192:2p31zYrE8UpWC7HFW3DlnrGSZxBwS9KSX6XPIcJpOFqk75+9TFfC+UhkMO/:2fz2EpPFuDlrGM7DcfOok75wqM
- TLSH T19422BED453EEDE297DDB69277A4B8D8144804C58D5A3F0B94CA0F09A3AC6336BB01277
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 090e59e3be8250b26d9443716638bc773ac0ef939b42597abc892d5fb4208310
- MD5 1d5b30659580cd85b6ac2a8ead41a652
- SHA1 48144d6ff042a2c450bed2c71615784c18d2ec14
- SHA512 7ea8aaa819716af05ad65d7b9481e73bf1569dac27b80b0995609c073141d0fb3373a8e880c54dc2041d923bba7682144c5fd15d7c33c184f71afd30f034e8cb
- SSDEEP 192:ERgjzVy1h2wx7F0xLJMNRoDaqsxqsI/u+nBOwDFg5TiNDBTfG6JSV1aV05Bu973:rjy2F3D9S+nH5BDlJwBq
- TLSH T1E822BE02A9DF11E251A9848063B70F511A6B6639B112D3B6ACDE3F024F97090D7ED9E4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 f50870b291aeefb29e9059f559ee1604dbd1aed06c7d483a49da9d341f7a2a3c
- MD5 34c514753624d62ac2e710fafd79ae90
- SHA1 f722cf4072da30dd88129dcc1ad33fff788b1147
- SHA512 afbcaa7d9772945b870a3285c3d2daa80801b434f5d2c14e452850bdabb40bd2efdd80f1dc5f4c7defd1d4b8591119320acd99a3526693d77465c6c7aa5f8dc2
- SSDEEP 192:NvK7h7CmrWEacimdr9H7N2pv3NyK+i79+MV2Gm4qsD79BXp86leZ5AAb:NvS9Cejd5H7NW3sC9+yR8s586lez
- TLSH T1D6229E374EC52C22765492DE882D314C6E29D5A61E4C1A84DE47B5EA8875318D3CFF3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 2a5c740eeaf5967219dd9d6db8fbba02808298dea73100996e7283bdc718bcc5
- MD5 815780ac298f3fecc5e6359819e07884
- SHA1 051f2c3d19acb285778d50c612e2f63004fe501a
- SHA512 6d8d6985e919a19a104eb085952507ae20392871122d9da702967d6365109decae9be26718cc0c354b48a1090adbfee81d192912e014822b544ce8969920df96
- SSDEEP 192:ToA6uWxhZT4KCBAjo/FCQbAbEeptImaDth/4uns55R8r9fVB2a:ToA6PxfT4KCBkQb0Vtut5ls55cfVsa
- TLSH T14822C0F319D30D0D386AEF38D22CE0FD1107E77500A596BA279559D4E40BAE46233167
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 fdbae47f87b701ff51df048b48cb598275dfaa78d005be570b35dcff91e96b22
- MD5 6d2c442f6b875242a3aae7f229debd4c
- SHA1 3bf0c9b59c5d6e7b552c5f43a517c9475e558be3
- SHA512 28216eb95c9510802a07cd0145fbcea4f768e1cdade882c4a8b49295076c7bf511ea587b7fd4b9419ec51646d4308f055b3d26112e27ba1dc0983574de37b14d
- SSDEEP 192:F2NyeaoYFF6mns1oD6Vo/Rac24rmaPgB5fD28YlKwAXL8lHyX4:F20ZTFbxD6xfxaPyVY4jX4
- TLSH T17322C0B12AF3152C4290BBAC0D61F2B725F7D78D0FF5A818A49D38A714E3444EB55A3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 1cfd53951abea19303669962a5c52864c6576f2b525c28b4067affc87df6e293
- MD5 536d8a6ca06e7cd88592595ae903e009
- SHA1 5706c140fb54494c8738c0f51afca56625e0e64a
- SHA512 fa6c16dd417bbfe6a4e8c774a97c94d357fa58045e586bdac0306ca76d6c1eaf8b951d6edc828956cfa63f205fa25abf69ad26336098452ef1b74939690220a6
- SSDEEP 192:ECusYWrtz5cqSK0p/T4j9m3KR1uojNqF6nc7dkNNE92UUiihJ/3l/ypY49J:FY66V9sTRhCjdkN29OicJ/Xq
- TLSH T15B22B094DE5FD9DED60F5372888D615C8666B223ABE99054E85A0CE2CCB350B34C39D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 e8eaa9fa88dbc36dd5d7d3f9a4bd68045e408829a2ac7fe58c6fb0483805c631
- MD5 7d37f9054a2a68a980ca3c3ca43c5858
- SHA1 46736fa20fc2b5f395578c5c38efced27adeb7f8
- SHA512 1f24832ea669712d36a2d5fd669bc360ccc97670640c0eaf8d7d9e4164d8dc5f1130210f81e0ce01e90f914a34099d4f2dac92e834801290015107085910de9b
- SSDEEP 192:YlE0NoQksifIOPuvfmkDNPHuV/STT4gezCSYtVW4B6YY+kAKccDjy2ncd0F:OTkDg5tZPHA/SVTwYQcK7n40F
- TLSH T18D22BF494D79308AD05586D4A2BF7054EF423C5ECFE63A8C987D3F22A6A3A718782CD0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 f20864ca0caf3c8dd220a7f8841f3f86d60d0fe5f7ab18afba3af3d79f53760c
- MD5 0182672664f63d17be377d45c1cc7216
- SHA1 6e851a983b9ba6c70a728f24176fc6c373451590
- SHA512 a2e3c2c4411d500490af13a90ee53d1ed809cf442763a6076b57337ec4c2f112431a36f18813fd492c0ac5ba9834bb2813b7a2396a766bd29ae127fef05b3236
- SSDEEP 192:BFSJW21urqMVVVcPkJrhmSmWx7Fo8GyvKDy2F3DXV9tTEetxz6jPDAdSb:BFsWmmq27gomEAMgzXjee7Gj0dm
- TLSH T1B022BF62923B4A3F584A3E776315F98BDDB481919793A0197ECDF09FA03F035372A094
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 fbe6a8f256d68347fb181db17ca95ad4422d015addca0573812de89f5406d756
- MD5 0f869a93f1920b1b7c7290f7c675ee7e
- SHA1 21941c32e715cd7828fd7ac93b8fcb3f6c8a8d96
- SHA512 10444f9a50e7718a3e528cde5c63ec6f1b00972a5915988d2306336537501db70601d732bcd1bf408ad161857fb0524d4896971a44ef49262b1c0c601f2d53f3
- SSDEEP 192:a9QWjQiDam35xzDF9GWm+nm+o5LgeXrSnRjRnkMnRDdvIHslgI/UxYxS80+y/9Nf:atcm3vDyWrm+mA7TwHslgI/UxYdhY9ft
- TLSH T10F22BF4CD59DF0AD9ACD52A1ECAE022E22F887E4F8CF07E69313942BC6256325511EA1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 0730d23c5f2f752ce5791b7debeec3837c860f0cf8e3a0717907ace91bc3f02a
- MD5 f463a9a207f3465509b770448a5019c9
- SHA1 8a256c983adc1d098724342d7a0a476377a0d28c
- SHA512 133b3298c8c4ddb20a0d96ed6222c53ccc96a8cabbc7f22fffd67c2eb80476786580ee34598abe49dc808388aa78f60c0624d0c1afe0cb2d57bed73e6aa7cfb9
- SSDEEP 192:84q9+i/afjZxP6JSrIfD/lOWLG+JXWUQWJNH4FrFeE1DB9OrAAWdN:Xqwi/WxP6wA/lO6xJGUQyJ4FYEL9Or7W
- TLSH T12722BFDCD9C848474BA1915342A3C0166CC36A6919EADF3D132F9E6B9B2818C95B4937
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 0bc6056cb3f57905ad588ed3f38757c2e4ae90690b3e6f2907736dafd41ab981
- MD5 a1de5e6954d3588d626fc97565a483e9
- SHA1 c34cece3e4f62f7485b424200990063be6d3d16b
- SHA512 1cc29eb617adb70807c998470fb6224c2f941c4348f5b08fca2cdfb562e25abf4637df63ee0a459454c7f0c62c8bc41cfde43ef5dedf76ac038401fd7349475e
- SSDEEP 192:oHJVMxWhwmQsNEJbjgPGmXozxhjH9vYTtI6xapkj2E5d34wBFqDuOZOnTyWgg1:opV/lxNX5XozxhmhjCkj2w4PQmWx
- TLSH T1B922CFA2B581AA604F4B1F5983058CF9006E6A66804B7FC7DF80C654E6D8E82DD98CF2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 2f5e9074ddfb772238d9ff17e92bdef23b138d29b58f5b0b0dbd6b65840d9f5a
- MD5 7875dd68138f1a9914356dbd8ed7d4ba
- SHA1 d721e414ee7c6e80de27194eaeab84d326fa9fea
- SHA512 92cdcc25f739ea5752c704bd52d6c31b0b1599603d86b7418052d570a78822b2cabba7e93288c566f04b83f0c3747cce363351c1a047fda667bfd95d31662f9b
- SSDEEP 192:bUli62xkHe7qhkgEAVEqv5dscC6iXUsD+p3q+rUmgPeyvnKA+ThVp9E:bUE6kCN+mpv5dscpsap6t3vt+THE
- TLSH T1AC32BF7DD024C6096E5313A274D7BB01AD708C94F5E7F1764B6C2C8B423A7295FA38B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 701c9871719a3c4383e611c56cfd5feb8af4e9d666ec4bf2052f8587cfc5dc7e
- MD5 c3208042394fdce9644fd1ce6e4060ec
- SHA1 850b77f2805d310a4e8fea2044e24cf2b3b93ec6
- SHA512 067940d0a53d6e14e7136480a690030d55d25d2d5f311993b1dc1b8e12d1e25bbb3854c413f0a5f07cc44707a3b1f5c61f4b5674fd15b9e49f72c171acbb97cd
- SSDEEP 192:5kclqtC6Evmas8cDFrqc53DsfG1ExESejsF03P1qL5soHRGg8t:5kMqovmas8yuG3sEgKEL5soHf8t
- TLSH T17832BFD4A3358315D62EE8412AB1BEEC9F30E7D0EE4134E390C6B65E05DE4F28886348
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 11KB
- SHA256 93b9d906a448d3ab4346e4c49f955a6f9a56fd0a702498857cff623fc5a14dde
- MD5 30d328b9ef091965397abc8f8a18853c
- SHA1 da6e5464de92f34a752d3b605b296dee8728bb36
- SHA512 b7d93843963da287b4790c3b6f87dfe709cd8304af890904b89fc6ff50c0b0466a33f923762a3d1a299a24e86004254eaaea08f6c0280e6d8bb28d6f5f639f89
- SSDEEP 192:M3V4HA3AxPuFCK2cfZlEAaXpb7x4niDKrhmqGA8enX8ijKl12+XaosmNSZoun0Wv:1yA3ivEAKb7OMIm3A84shTqo7NDW9V
- TLSH T1D232BFE8706E86DCF0C463D152F20BC9680B608A248E73597D3D19AE28FD803ED6257C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 3bc838d59a994dda6e8941140da4af099fd8ca40755f253a5fd2e62ba8b01253
- MD5 6ee359a591b504526d444aa99e4658ea
- SHA1 3cd53857da7dcdc424c06303537451f52bebbb77
- SHA512 fcf5e2a6d4bc56ad72cbf3996a77a330b4f6133c94cca35558362e6ac1825751da1a050863eeddf6b8693b968fe77f7f98fdae487676a59397d574d47bb2235b
- SSDEEP 384:p05Zn0DaDewmjiHK5r3P0/4HGpsdyHr4C:p0bn0pjyKRs/4HGyI
- TLSH T1E142C05AE3B8AF32B38216C550B19EC2EF62DEB04A622F5CE3D0175B62D0DC15F06140
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 19af85e5f4e4572b9331a5c6b61a726613656fbbf8807d4a1753dcd62ac1d3ae
- MD5 e778aff2d8cf31038e0790a71c118b7c
- SHA1 d93c08311363cd570142299b0fbf5712221505d2
- SHA512 72c9b9033334cb106b7f53fbce5d482961e73ddf0a2c69974a143b060b0c27c45bcc0ef10441eb380ac6d02a910b332dd614a79e0e59d1e3ce1f3323b10b9167
- SSDEEP 384:UoMkVvS+iT5dzNKMAlB5jYDUSQFcD0NOUc0sNxnXI3nil:vMIPiTrZKflB5LlPIBN5Snil
- TLSH T12542C08242F6DF40B1C6BB132BB82FB3BB4B53359A725452906AB1E1BB6D720159C291
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 cca843c3a80cd8608fe7dc42080b72162e5bb7a8c876b35f4bb2f181872cbd86
- MD5 a7e40394e98f435740e128fcc6033b81
- SHA1 0f1222d7cf0bee5523472cb23934aa90dfb8064e
- SHA512 bf91e9f318df73bf8c93830a1fff2ad84bc70bf90f43916a4a3a9621d99c0fceb271aad491e9bd851cade34b8814e75cee9bc39d3a752f7a16be00a95cef8ce1
- SSDEEP 192:arDQEm23l2faCzXns+rpHDVAJ4NwDXyUC8Hl4aq+Plr/Tf449fE0vWE:aQg3lqaCI+rpHDVAJ/K84PSlrbLc0+E
- TLSH T18142C0E2299AD3001BB9810F6B4E3D78C32762694B6DD5C98B44C1EED7684FACA51F41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 60c815f5eba9a8c60ed64a9f1cab363eb3a558b597ef64983d99d4f7e79eeac2
- MD5 69159b87595ef8cc95aa76bb394b03e7
- SHA1 fbda4f2612f8c18cc1da3f5afabfc7612c8b19db
- SHA512 ef2709fdc3d0b8efde1741d7eb54634ed912e21191a540b0da90c4a4c40957110a3e334e57238f0e3adc11cbf0a30141a05d7aaa42419319e4a2f55a73f00cfa
- SSDEEP 384:Yxe/BndN4eXhgZ/C8k/St5sfvfOU24P2Wr:J/Bda2QqV/StS3WV4eM
- TLSH T18062E0DBFF0752C72740A36515A0DCA408AC10ECAD612C1712A597CF7E2AF75E90DE9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 2e23d4bc00d10d880ccfff606e6e18b3c0aea79414749736cc63bd774669b90e
- MD5 71ba5d7d99d90fe07310930e13b06c81
- SHA1 af7b09fcacda528752cc5fa53b225f52b84d09b8
- SHA512 88fa0c0be2243380fc09b2c23e883017da8dd63371913f639674440b3ccdccba0a8b3d951c02dc684e966c408cb442dbc60da1be8b3325c4faf49bb3e1acd2a0
- SSDEEP 384:Ps3UeYfxqQHR0PN2L2h7rVK8JEIyhTFJd+ScDCD5G0Zr:P3aP0L2hXU2yXT+ScDMbZr
- TLSH T19662D10F57D88CB09DE87A48069843A458CEDEF33D5BDDE5B8652030E7357719274E12
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 e2773779e9f9c2e71de4401924f3638247669a0bd839a36ce2e03943ba0927d2
- MD5 5847d7bd3499156ce398e87d3196cf51
- SHA1 9236216ecc337d4b6aec224f4bfacbc15a152966
- SHA512 b893037d591368b54fbcca8345b088ab2e8dcb701f9a8cca521f2cf7b0138e8c8810e3c53755b17db17026210cf1864e24fc41a6b9a38f9a400e78c8f7d440ae
- SSDEEP 384:0MQff02xPBodugo0cxpIeU/LoOcvlv10+aTN943dl7s:gn3Oi0cHIel7oOdl7s
- TLSH T1F662C0E8D26C68E59A13BE4C17298C5D349F0DADD34917334A886C75360FA8D7706879
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 54f4f16e6eefd618d0e4e0ffe28977c5f34d010370429f522276652ed91cd8f4
- MD5 08fce58fed039350310b99c3f662c134
- SHA1 df04cc9b8bed3744feb07519acb1f867f763604e
- SHA512 1c59940fb58088b7331da5d494b03f643079c6e50f9c84fc58c5e5b85d9ff9b2b6033242c281c72e20c7483473f27df96d204754e3e832504f1c8a6400e44015
- SSDEEP 384:oDTTXro5x5IyUcw2LZIZmeLftFy64k89cFRZQRyImh63VzXa:Y8NscwDmcVFlXZvhiVzK
- TLSH T1FA72D01C8E1A9A049C487D20D46963B06E89423560DD068FC8B6B0DEB1DF97363CFA60
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 17KB
- SHA256 91f296507cac09824c44ec7b4ed312d6e1567988e643fe3cf9f0feba401de6b2
- MD5 6ab5f95a756913234c4d4a61ae1541b9
- SHA1 d6957521aaccadcab0476632661c6760ebc94850
- SHA512 5a04d1617f343821a85d79e0cc123a006c9114abc57045a3872a2ea503fd19bd4dc66b4195022c477cd8089dc7df6ef56b7119ea7691c5f4f865952dd168f74f
- SSDEEP 384:szNboELYnMW/SKoGv6HK5rG+G7DufnnSkrIpqbNYR/6HxFHu6Wr0nWVv:wNbEDboGv6HKOOVpuR/gvn0
- TLSH T1C972D076A0E0EEACA38500AF5D6F51BE7E0A0C9A76B45335FADE6E74014635CC40C1AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 20KB
- SHA256 19c65ec8e0baf1ad2bacb400083efee3d5137bd295838d4e1d8d994ec38a8798
- MD5 42d917f7400cbe299968cc73687af5a7
- SHA1 921e4628b63edb1d97c744ff5be63f64b21a682c
- SHA512 5c9740e3d770f938c7870b1c1af8b235b2347d4d9a2605be7080cd01213bd8b480a6a46ba23a72493871052c9f6a7038915481c4b056e741c629699fe9009e57
- SSDEEP 384:ti1U1jaY4COqChSHPIOKhhizT3Yfn7TBBRyVV7BoNKwVSep5Y22UI:5jambDwOKY7Dn7BoVSnUI
- TLSH T17092D0BDE5B3E83E987C0B1EC6FF588EC5D25616970B90DE01707E4660991C9BD0AC63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 2272b3e9862131eef3e0c44d61f772bdfdaad2d7f4ffb655bde063e09e6ced7f
- MD5 f231abb31f8138f495ba90e1de4e6dd2
- SHA1 0747d946c631e41197100fae1df9f1378435cadc
- SHA512 aa6f543e9954bc4ede2c1fbe5e768d5fef90f54ae3d693b49bf0f11d6b96c654ed44880e0c65bfdea621fa7a97eeb55259259418f0ffd1c2f140a72a57c5d8b9
- SSDEEP 384:i57W0194UOFHaBY1d4PZ49f/ZwzuK+9aj5TpMx9Jznu4Vw44:DgOFHpePZ+xdwjFpQ9JznnS44
- TLSH T1D582E15161DFF668F6DE316B5F3E18835C2978F028A78E501C9A27D60B2D10F42ABEC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 05445568a7a531a4bb9cfbb67bbea60c77909c8ecac4652af0232bea88331bc8
- MD5 59abc445c09ad5de9f3a8707c46484f1
- SHA1 1227b3e39034872744aa01b4afd43b426dea8cff
- SHA512 3167ee173cc570edb4cee540933ab098dc82a314349c74620a168567d73f87d377510c01823941d3c6de5465ba499a3970fc91d6cd24c6bf849fa2912131924f
- SSDEEP 384:1dLSRCUrWLt2H8p3V08tjLkWkBPeS/fiSgnoK/TuxFsFmzkoGSg0sq:1dqC+HqF0yAWkMSHiu/bsFmzHGSg0
- TLSH T19982E1DF309FA7513D0A09AC6825FDD79CF4BF955A8BE040ACDB564253A39218EACCD0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 19KB
- SHA256 88a195e04ab55ab1d730091f0fc88203c8edb3f986be0e358f17a64252bc127e
- MD5 ec89750c3d69152b21baa1b6c2466bf7
- SHA1 d6a7e2afe526481e0109119e8646707ceb0f3cec
- SHA512 f314584a4e853656d3af1a0fe76f5be2c9a8a69214dc99cf4bc35f91c8d921f8b35f0a6973534e99b604c38a89559114befde11f802300229e17bd786aead331
- SSDEEP 384:HPXMZSUdfFNuyvhKMcOneRjwkLXTVibLR8abn3ufvJoRdLEt12ZI/83f:HPXMZzfFN50Mc2eRnTVibGMkvJEdE/8v
- TLSH T1D092F149D387B4E157429B2BEC6191002E1CBAF593F1C299BFF7660E42502EADCDE801
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 c260287c8fe078d8a139949865ab2c416eb3a7714fdac70c4fe39845ea965e6b
- MD5 754d4d0cd85becc697294e40a60e7a53
- SHA1 27043816f672cd834b40dd079d55a691e9420a11
- SHA512 12ccf006c6aa7d38af9b37e3337940faba7bef0286e081604dccf741f34eaf4374a4d313c68fab6e1034dbef1b63caf5c7a21953aad635c767bd951db268eebb
- SSDEEP 384:eBFmJ5OSQENluvkfy29TdQqGPLqlwatU2KfFvmLPhlYrh6R6PBoT:eBFlEfukK2rsGY1fsVq66PBM
- TLSH T18E82D0C48E847C370FD6719BAC9D31E64B6D60A67670AED5272B3382137B1F4A496323
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 6b5e7497736553c4f66881ef0bf325663db5441b75549ce4e715b8d4ee79766d
- MD5 5a58f9fd2b0af61b3563d0f217a2f7a3
- SHA1 1206f011fe0a6dbbb5d9811861a4fbf5adb018d4
- SHA512 8997021836c7fcf43b6d054bcb156aa51cfa7cb122cda93f493acd29599abb84b2d97842847c036c20ad6a43acad0f36887e0eb4379c93ed56ae5b772816fde5
- SSDEEP 384:QZNXUg5lFQWGYB8RzUMiXoHNlFvW7yMNc3m+ujPxzzoA3DDkOjTAt2lU3K:QbUElGOcXjFj51ujdzoAzhjTASU3K
- TLSH T122B2E04C96728F38DA49788EE5189F8A18CBD8A21A294B41D1B2133CDF9EC410FBC725
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 2f85736f4f42ffe32a2d534662a980fa40ccc781de3152733b68f18dd7b09f17
- MD5 b3f397921988cd4eadef09a7c5928205
- SHA1 c07f4b28e98b753b2aa34194b1b7e8c823bd704a
- SHA512 5411f83f022e928cdcdb0942f36fcf57d4ea84dea59b91afbfba063df8510ada14222db8789c46680684a4f3fa50eebb6049ac9c32068005fbaea244cb75c022
- SSDEEP 384:3Vr/Vp3ijxWuhI0rq8v1tqixkn44tjOyuH5h3BAtg4D9mj7i0oLN1SWpA4:3pn3ijxWEIkfVa2ZijpmnMLNhA4
- TLSH T128A2E16022CBCA4EFBAA54484690C4E4717F474F0BBE96758489C3ACD8675F2B958863
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 0f6d9807f7a33900b903faa9401476c5032fbb43b96c1a7be48ae8736c29c4f3
- MD5 3eae8574379cd6cf7a5b2efd24411dca
- SHA1 2d61e3729b48a6c0505f6b40da209830e0288ef2
- SHA512 f791d7b798b8fc76f3e0127cff6bcc247d3051efa07ae14c287059bbc0e9beff61f3b402a0e87fda1b84b174d4d00ed8d24c16fbb3ba57eb046ffd3751aa2c6f
- SSDEEP 384:4kDNcMzcgW5/qXsi/RbL7yysaIxd0QQwms18x0+keLHKLOKTUnTu0CLRT92BA1b5:4pecNe53saIb0QejbLHbTufvN1/Pa5pC
- TLSH T180A2E0C84A12B3AD1531BA9B1DE65411C963967BE783CBF3123E41220F88245C86E1BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 0ffe6b796a748af16202169e3dead46237bbcbaf53aacbe71d3b8423b5224831
- MD5 b3087d98f60b690865d76cbf90d0c89e
- SHA1 c6a32be7395081abef2d2f28aa48e117ba9d6db5
- SHA512 82063aec18b13393637dc39d2ec606c799a27885e91198f376c667a7c281d25c80a0812730a00a4578d58f1eec125c95ca40aa4dcba072e3bf486c10826fb5db
- SSDEEP 384:yvawbiW8sd2aYSPds0Nxw1Gz3nJCaj3coBmbZAKjKZRH/rmnJ6Gua7N+y:yvHGsd2arBPnJCaTUbWKjKDDmJ6Gt7NF
- TLSH T184A2D0F18281C5E274442620AE7F360916B093767E70BECD6E75841F1B618DEFC527BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 9KB
- SHA256 0fb66c397845ae9923d99fe28e2f5257bf0f00225be12bcb9ecee9ff8917da2e
- MD5 f539b3531f3a4b6e60955e5a12461ccf
- SHA1 eac46506f5d09e97c0928f2eb46b3ff4684778af
- SHA512 f9a24f0e2f3bf174949568c116f612d40c472a05f26b67bf4d9c2204b233224f569c256835afeb18aa54359f692425b24e51e399b487f22c66f347c548dabcb6
- SSDEEP 192:xL6MJdEBJT12FicTo4lOqUxLhJcp8aBaE1ZytsaWpmB6rHIaYcY:xL6gK1114uJcp8wzytmpmIjNY
- TLSH T1CE22B058F144EAC090C66F8779A80E3328D2D56DB75089CB34D28585A6356B89B82F9F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 3546a25e1f1513debca7c3431caed17563ea7d9c3d1bddfe126c10f6a2d4edfc
- MD5 41712d274f02ff29079f3722cdefdb45
- SHA1 97c5a786e82d6cb4d678da689c79e547ca035b6a
- SHA512 71f4d296c7228998ef0368eb00d4aa134e045d02780a2029671b6a489d90b7a81efd9fae59b605cffda6cb295245b264bdcbd0e8f843a764dd8923b392a3f684
- SSDEEP 192:Y0dgcBls3F8lUL+okxD6JcBH9JUYYlHZyh9rmFYdPOnvaGdqu3X5A58z:9BlsGHokxx96YYlHZyh8qEnXqj8z
- TLSH T11C22AF16BD582721E87306659FBF9423CDBDA24B9A3E790938B7E30412E39D746C281D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 11KB
- SHA256 97b11801aab7636f3f7a4055001c447fe1de4fabcdca383020861a60f6d09266
- MD5 02d9d71d9dfcd8a85758f6f3db7a7cd8
- SHA1 a6c11e6d04e73fc6c4a66691cd8fd443df01de98
- SHA512 ae15f17960ba9ffd23b0d0746db673afb1d0356f978d24957b2b64c1a44e160d675cf05437fd704fda498a2f97b08155e011f46a1c126d9ea20425ad54c3384b
- SSDEEP 192:HTUbdroVX/C0HFQZ4/r6kflkqIsrZFexmEJy2XGiHQ+p2VtbMjEgOVmgKGpHK:edUVvH6Z3G+q1ZNEdXGiHQ+p2VtbOV4+
- TLSH T15F32C084B726A78C01F2703B17748AE22ED0744AFF455AFA6FC8CB85044277AF740475
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 63223848bc1386d12801e4511e789ac3741372ebae832a66dc2040c8d6deb487
- MD5 993552c3c0923ebb683ed90ff4d4a5e7
- SHA1 fe50c33f6e88e8643f38a8f2a3d876eef1b33f66
- SHA512 6da876f26195831935748060c61085f8e16f02449b66e21772305f60bfcad0915caef47a49f302dde725aa17ccadec3453232399a144c155776a9014193a1b4c
- SSDEEP 192:VdwwQR9HYjwEXkHV50/+oQcU8Uj8jUYfMXii9ES2GIKHO4xqG9pDKWLlKh:nwVRE0FRjSfo5+H2HJqWtxKh
- TLSH T10642C025C6DBC228359B653F595F630063446E51E419EBBE04133F16C92E71CBE6F487
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 c37798268ab0445ee923ab2a648e8c39fe50a0b4c425503441721522f9f12717
- MD5 b999c52ccd708df5a56ccdddc063945c
- SHA1 3f16f079d9e46b45aed64eff7b6ae8cea31654ad
- SHA512 3642286d4b78dccae1a0d583d6f9ed4514035f4ddc2ce153f0d5a4754418cb57cfe88c15bc0ee817aee3dbf29fc0901bab44130d59dc9fb6c46c8c5b6db98232
- SSDEEP 384:RGaZ64TE4m+HJXnSk/l5VVmYQI9kpEqV9V:3Z64o/+pXnJ/jVVLlKpP
- TLSH T14242C056DB0A69F2F7F009C197F0261E941BF8869DD09E952F3041F99FDDA1B6062C48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 07677e691fbbe5bd65055b2aabfa25c7440850df3d75635dcf2ff15123cd7407
- MD5 3b45496a4675ca5c54f6e482fcea4b75
- SHA1 20f6d51262051913d57ef65ffd187f016a2971ad
- SHA512 3e46af74a3775f5bbf889c6dd15838f3b0cf31de73c2d440d1ebc0ad13d8ec5b94e2336ce91706da310f828b5f7571f77a5922bf3b0701c2ecfa08c1bab03991
- SSDEEP 384:uHe+BlJR8qGPZ6QiJzgXZN89BVjuWTEpK9uQvA9KWBe:QZZFJEpN8VuWaY4Q
- TLSH T1BA62D06CEA1E178325EA8F0D5A76B7E8152F15351E21F933D8C3018E8491D94BF361F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 2895e23df93af46161371d58a1f2089b6ea07613f57343d7f8945bbd38677cdf
- MD5 b04264f2fb3118a1665530170c869052
- SHA1 40d6dcbb6b2fd1c97dca1cd5c7a5f034b94ff447
- SHA512 6febc06919ff09ee961c895f3ab94c37409e4b3a891316c2ce0dc53e157cc453f13c55607c3816c487490ac0133d2adf05c04c543feab911acc6b8ca4ef6882b
- SSDEEP 384:BIHbyp+vb34khi0NVbdo+E3gm8yKR7zPE9S0gcgEI:I10EsghyKRX89S0gcvI
- TLSH T11862B011E0F1131BA052A68F4FEBDB9A360D0D5895DB5DD428F319CBA740EEF1249177
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 e5b621a624f04ec17a302a7795a4ee36396b190fc6d46e792c07263bf0460a54
- MD5 0723755b3e9fdba8569aa2eb7c37e271
- SHA1 4ab95c009608c85ef3c642f516d1b5ad86ad8532
- SHA512 b765cf9e7171d791b1d469d8097a8650c33b95d3cdab08975c67a4a14c47531d2ffa7f23cef6ab62117b5a5969f297ea929fd2ec1b2e87206d234a56ea79042e
- SSDEEP 384:G8p+R3qzAEH6drjhTdaPRnqWXJ8GgjpkOS8aF4:5waCtTA5qyONkOSD2
- TLSH T1D462D08A58CD118A9F98FA2B60AB1B0FF94354C4E5A0654DECF29BF48DCCD6E4389071
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 3d3e8527d6dfb466ac19917a9bdcc0a121eb92e28e7046b3cf9e26ef98363151
- MD5 3fcab60570f541561b8db3fa8cfc7669
- SHA1 c70e6fb104efd9b9688de090e5d3f41be760b2eb
- SHA512 9bbf7f98b138eac95a2b1e3253b8649f3574f9d7dce531d0525bfc614cf51ea7137fc21655100c6fb5666597a372564b29351f14542ed3741bb9d5357e0d98e2
- SSDEEP 384:yp4GRYvVLNMK2BNLjLFjF6iqJBWAPXoRn0U508gO7:GzmSKURjFRoA0e7
- TLSH T14862DF5CCFAE6F08A721260B9B016F3CA7114836A9C4C8E16DDC9F37585B999E46A0B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 48f0dee51ff6229c796bab9d20d34abb06d29a41e48db41402c52102bdd2a6c9
- MD5 76c18e5ca9803537f6f311c6f3f45d8d
- SHA1 a4e0ec77485702fc62855bbec40bdf75c732b9a4
- SHA512 1785dc46e4936c1a731cef6b889c7b3ee581eafd2c362bb01180a5bbe62802f26e8a7f1e056aab0b8de3b7ba43c9b87b246b8bec130bbd361c2793f701edadef
- SSDEEP 384:Gdr7AP0OWSx+HmsDtCSWzJqxNKScbgBFICZaCYS2McP8NDosIX:u3uW6+GsISoJ0NKLqICJYSk
- TLSH T1EE82D0A64270F1F07C9E4E2BD2407D3A653D28664AA56C4136F0E36D0E6BB5FCCA158C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 17KB
- SHA256 13215239c3945b28e4343139531d17f243ef8b09c6c7535bf799c646362d54c7
- MD5 ba5128c75fd56910c684cb30efde0874
- SHA1 566d3b4c491b5087ea9a1a8eabd418726855fdd4
- SHA512 f0587fe83a8f90376bc0ca703fa2ef231e951add0572ef625726b1621dd8a948db34e207117f689a2c2a208bd27634e62520dc8e31109b0dbf892309147037b9
- SSDEEP 384:HDCoympyDQcOMjZOj5a28Vm8purH2/d9gJNP0QnwsoxToV9GgKc+IKmrq:HWoRpyDQc/7orWkfPDn3R6OLKm+
- TLSH T16A82D16C86D183454BB6879DDF9CA81774C8B587A3273851C0E7CA8F371A30D4899DB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 834c219aa2036c701558e942acd8f47afe6eff6ac7d4f2101e3e2c39e49dab48
- MD5 842124281daa37d1e8a6bf7367ff5e35
- SHA1 e040c7d8cbf0c992c9d92132b2c79e911a5e5779
- SHA512 8bb3cd71aedc5fff3cb57c66a17f2ac5a37ef083452fcc6c6b17baab117f95cc8a161d6ca6cd01deb87f011044efa3a63b3283361e102eab596ed1248df40831
- SSDEEP 384:M1GGppwmwz2wYNe+ogCqOh9kqs36fuyuynRuJQcnfGq88/AdYczxs99haJd:M1G6K2zN5rohC4G2nRuJQIfGq8Yc9sXG
- TLSH T1F082D05F040BFFBD86CE6886DA2A4B54146BC2E4ED13D46B6A84BC0601495409ED7AA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 2d5bb1685ecec01324450fd24be07722670c5b1e8a41ee5b0bd0f88b6317bc1d
- MD5 0e762fad99d448b1a9068847dc685b0a
- SHA1 f8671fe8e6dd1e7eb78ebcd6e931c48446f9190e
- SHA512 aab00469c9f94675fb4681a9c06ee1b5858228da9f0bccc3fd432f6d7f1e9edfca62f815167a3f3e00d683aef90e93b24b132e0f3c4271e36f9efcdd66146ca9
- SSDEEP 384:4KgmQ7+4rq5C4GcvZe0R6P3tcTtCV0SS/BXDnWjZEpZULsuZ:Cm8+yMTR6lcTIV0SsnmEpZULsS
- TLSH T13882E10C18B919BEF31C0DD3F1D1AF41868629CA61E617C8D744F1A4ECE582523F29DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 19KB
- SHA256 055a1326ed52299834a24211fd139aa0e4e4efea00ef93b76c6e66959a0d3d8e
- MD5 254c1508196ffa468ed9d90a4640de14
- SHA1 d55a0f9de67bbb735926f811c59dc354650b9c99
- SHA512 5fd26715250b200734cee97e9adcac4256eb7cfc7bd52042cc03d9edda4ee4522f7d083f4a387b52c1ba2cf2c4dc979d14a876ef11845cdd9e0d1888c14e8248
- SSDEEP 384:mkOSuZ+eH/eqKjIUPJUol7LgZw5agfIjyMGc/bHglnpY8jRvEle:rOzIemqKJvi67IjyMGoCGaJ0e
- TLSH T1A192E175F44FAB2CC60A7C9FB343E07B909E56AE3DF948D0ACAC9E04D00C493094A466
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 21KB
- SHA256 8767e9fccc7703b89f4b4346ad7afea92b5793489755043ef20de6b939dcca3e
- MD5 641314d0d7c1f360de5037c2905d0372
- SHA1 7adcbea42cc9dd7039b0f022f941153bd6230838
- SHA512 9ce297393e866f3d499edf118346c020b62adbb1223299913c7ef53ef9a7eb953b2b75f2ef6654f5c972e5977390b9695c69b9a7739891aee963f2ccb6039afc
- SSDEEP 384:YLFptAPZCRf+hWRxpEJDEvEJYb558CDyXrCLMNfUPJV5rRILAwcZf:YpzaCQhWOJwvTN58CDSrCA1UPL54Awmf
- TLSH T166A2E1101DC3F9E8C00AD5D667879DEFFDF5DEADA116016AAC4A680F31514EB213AE1C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 20KB
- SHA256 c0ab906c0f99b53d6c4d43e42e6e3388d1fde0fe06556ee3b199c692c252d438
- MD5 acdbcf9eb9d92941db6e9673836a4f8d
- SHA1 6b9d47cbd38a6164237175546664f740bf92be33
- SHA512 c40b71ab3ac51658716d24b1f1c91e21a959c63ca3767ca1336a55351ac5675dbc8c2d3d7a078885fc4b0b10b5484386ae5cc3bae5a02ea42c11793d9847bad8
- SSDEEP 384:2pS2U01sdLlyQ2ZNUsU6J8ACSDe1P0d4hU4u+fy8rCxA4GmyEHIo+7YRnjBAIBf2:QSSs52Z4zSDH4Tumy8rCxA4GmyFZQjlo
- TLSH T177A2E1D78E890E647D44D4B97281515CEF15C8CDF289BBCD265D01A0EDB6FADCDD2006
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 4KB
- SHA256 91e2b734d84ad86c3a2f575d0b7ead0574a10b7e8716bb127f624fd6a07972e6
- MD5 56fd5fef6d7e75777c088679d579ef4c
- SHA1 cec1c5f7b0d571b5a733dcb4ed03f11902919f4f
- SHA512 b5b0dfd87f65cdb05733a3491af9f7823c38e7545268e5305e93703d5ca7278667725527e09ef61136e7edd02e2c8f664a98c5aaf83603984265362a8af9214a
- SSDEEP 96:aFdKCqN4enD87HNgNUY7uLcYeVHhsAwAGhlJP+wZtp31yyeHM1:NRD8JgNlGshwAGhlJPLjReHM1
- TLSH T1F2917E34E5A1459C6FCB601C144335749497708C3FCA825C270393BB9C8B7A76A2A2E1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 72e7a75ba4de1d8cb97ad4c67da00ed0b049ec10d3874e76ad3ac98763923bcd
- MD5 1557bcf329e537752da88463e8e6a232
- SHA1 cd2b694231d7a9c6300b5d2fecfc1acf091d905f
- SHA512 b6ec598272d94aaa028a819ddb04a2c7ba2a7bcb562afecd397ea231980b5abcae62861cd903155797bea628f672dea99463a3279608371414906499e3fb6d70
- SSDEEP 384:8NWmmhElaPXwYRBUZmUSGhtmA3nDIZSiGkLk+W5waBP836lpUWu:rZnUGA3nDIZS91J8Y+t
- TLSH T15E52C047927A47E6671EE5EB14B823608F9F1457F0C8C18A265621F13F0608DAD31ECD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 21KB
- SHA256 cfd269140a1ef505f0bd60e5b08e842485c8368e5bda2b5ae7d29c66c8e174f0
- MD5 7e8d1b7b162f98db135f6885479b8f9f
- SHA1 ddbdbcfa8101e9b90bfd4a0136cdd0542ed122f5
- SHA512 ca6e0c7e6bfb0ae559a937959bcc70aa82f07a3b129b166d64449e5c54897ef974d335812dc1bd3c66f621900297507c8893aadc4ab2c5c991be3fc53ae16747
- SSDEEP 384:YmqzQdxNCUqNsEddIF46CSp2CPYN4MAMYQrr1okuiS5oBdx6AxzcJJOZ/oLncE8H:pqzQnI5Njox5PYyCJ6kui4Qdsw+JOZ/L
- TLSH T1E8A2E1E6002ED26E565A23FCDD6BBE8812FBF1F41D08AD7489960426DF7B51C1B710E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 11KB
- SHA256 369ae9ccadcd5e06ca7999138ee03dc8213c40fa5cad4776483a885db072f09b
- MD5 8ec036d7e90115132635aa8bf13256ba
- SHA1 04b042b5e83b72bbb9e8d90bed620be701f02f72
- SHA512 cc39e7443a9a3dc6f584207e189f9ada93738c737b58fa4f20fb9a0e179fdd8d9f250a5ab84e3fdec271d0d69bc8ca6db7d7fe8d83be42c9ccdb2ba196179988
- SSDEEP 192:xmyNfLLH3Ym2BrNHCFWWoopFusRnVr+Y0WjvzdEo7rkUD1h5GNdguDNX8rqJRaJf:xmyxHe3HgWWo+nViWjJJhCgiTd9in
- TLSH T13642C00B7981B9A8733A567A1B4D1170216CCB3DF1891C2C3C5CBF7222ED0DED6A14E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 5b2ef1ba1e5d11d7ccbe77d76c76cdaedd1d03aeb09b9378241af322199708e0
- MD5 91afdeb7c8606de06df7e1719326d88c
- SHA1 901d6f06c2b39ff2b0c6925e167f5c7827071eb5
- SHA512 087abac8df3ccfeb8b82a42793677b0afbf25373e37dee86be79551622e1583e3acc2e4f940471be98746bebc8a815055c1798464f3cda44ca3aac56eb4e11f6
- SSDEEP 384:NFq8qeUWi32wp2z9eLoFd85qns5XZJaDgsykSve:NFJP1NJYYd8Ys/w8sdv
- TLSH T1E242C0A0FC22210DB4724EC90EB1D8B908B0568FAAE251B06F7A79E476575B2E057B91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 d78af9232460b679d6799b7e58bf89312d520b248ab5d3a7562fab1966b7a509
- MD5 37ac57131ad4752e584087e6c8fdd231
- SHA1 ebfe6093b14390039cfe5159c440f21f94ae4775
- SHA512 48d5d0b829390af02e0f70d4717d40ff3c8286402f8cf786fa4103e4cb2aab112d348399e01bdecd0e2ee159b12a20e47f6900ec39d8eefe41c98b400a3de19a
- SSDEEP 384:13o8xNQQAR0Fh+rYbIK5AmHhc9yLRXbhKXwLVJz:O87ARmhJhLHhc9CHKXOVJz
- TLSH T14A52C003562D88C2C9096BE59FE55104AA8F4217B2A771253ABF5B6F5377B027EF3400
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 eecc46e5f64cdea897c4c34cbec3ca58827f82d3947cd7d5e8ad4496d09cf263
- MD5 d202fa8017119171bb0b29e4db12ed38
- SHA1 29dd08d36303a14cd93c1fc7a4e23b4de3c0c59d
- SHA512 cdb3ffbb26a28b603aedd656bd6228474e2ed218ee96d847101523a1ccd1285925d70d90d3cd5a62abee1e4a1681a7ab5ed3ffff4d6f3de42831a884935b1067
- SSDEEP 384:gxbS7AX962A8IKMyLd0sOfvH7tDWQBE+EbJcBT:GWEXE23Fd0sOnHBD1ETaT
- TLSH T15862E157E743FBEDA082CB8C5007F58D0423D113B76C97D197A1660EE04E6BEA752D10
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 17KB
- SHA256 1e249824f5907d1537fa7fa0985405a2ae1e53bf67a147efffaada90a51f2a75
- MD5 2c6bb6d808a7f898324a3d177444aa38
- SHA1 1046f1593e4aab12b8a432aa4bf035802364e0e4
- SHA512 f6136a71f5701067360a6bc6a05250541264b5ff13684697f9f43922ac35f57d23d657b83aa9d3839331fd1ebd905e4ca08c7d7987a80cdf9ab97681e6d8eab0
- SSDEEP 384:SvOm8O2KzmYMHH7Wo8zrZDAZLT7qmZ1LcHFArA3K6Pn7OnFJAXT7lFT/v9w:hE2KCHahzdAlSmZ14CuKmn7OnfsTRt/W
- TLSH T10E82D07703D45AC95182579E39FAB624287B7B2B9FDC828D2C3F442B6A8CC173462D24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 36e06211c777e902139b6d60fa2c00f0f5014acf7369b1bfd57e77aaffe461ae
- MD5 00ac99dfeb704dc4d27b1a38027aee58
- SHA1 14754f4653c71d464a12c8d1d2b1417699195cfb
- SHA512 87155a36720d9eaeebe028609933877af7f4abffa4ae70ad0e845ac300924c717beefef829a25898835803e7d65fed6497ff87d75a96f644da9876493eead14e
- SSDEEP 384:mLObNap7UY18pq2myIc/dDauzNoiqb8C2gq32AENEidBf9:7w1a31vhdq83gq32ARY9
- TLSH T12F82E091F5543D30D07694F0299964D02F509929CE2C33EA24E3DBE27821BBF56ADCB8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 19KB
- SHA256 81ec1a7026a05576da0aa7311a257c4e533f7b941dbdf7567aa5722a5a3d2c61
- MD5 8d9e8a97e82f49a64cd7d5448db759f7
- SHA1 b88010b957b9a9ba52079d6b51a26fa37958d635
- SHA512 ab8ce81067adca4b8e34c7fdb498c8035f5c5bcd1724a95120607ee4c28009827ffed66e3d06c083767adaa0382de11a28586626ad5c2d80aab5192e08358a9d
- SSDEEP 384:oDu+TyUv78i2GHpwKEGO/uwt2FyiWD/bnMucsRrjMVV0NET2:+TyOoirw2WLiO/bnMUhjMVV0y2
- TLSH T1E192D1AD09EC9E69197DC04135F492F83AB6471B4EE3C3F9ACC07818E449D9DB886C30
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 23KB
- SHA256 daf695bb9868676986df527fdfd258222d0454e6e61c7f46bb324a67731b06f6
- MD5 12844215d85c610f65d64a94d98a7ca4
- SHA1 b9c9c91ad47b0eaca019f1130e40043a663cf763
- SHA512 7faee2a951c2acf62bc921ad3970858988f57dd410b50793de98362074274447560973636faa7b9310549e33356584d1d2ecefce18d27f2c65927d07215dda8e
- SSDEEP 384:Bv33o/aVfoBJpKociagRNNaDwgu3Zs2bcM0BF5/NybOu6GU5zOPTPKhQq:BvnpVwBJHa83aDwnXngVCE1OWQq
- TLSH T141B2E16B310EF116D45DAF49080090AD86F3CE0C52044EFF6DE066F9214EA78EAB8EB5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 9KB
- SHA256 394c99c799fcf550d6266b3996be6376c0dc025f67846d1a30066a5b9bad5533
- MD5 add25046be04ef53484e484aa80cb6cc
- SHA1 367079cee17300a15f6a73afde5f15406da32424
- SHA512 c5ed2685c3bde7c4c3a06c6c22024f09c8beeb53f7445a29a35ba60822ca4cafddc8e85b339af48edc82435bdb701385c3d618018c6a897e8850c4750ce370e1
- SSDEEP 192:H9pscy3TkiW2fXA89DFplwPIv+ToUfjtRFvsCpXZJ56MUzhrYjH:Ix3rW89BpKPI6oUfjrFjpXZzOz2j
- TLSH T152229F38347592B965CD278D5F9B80BC38E060C05616CAEA3F765DEBFD927D2A8053C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 16KB
- SHA256 99a26959da997a11ead52a20af1812089872eb79d79528e08bf9229a8afd7c6c
- MD5 bbed9d8ff618b5fa5a926c472d8312c0
- SHA1 8bff88ce63d0d8f056fb0fe5b3aaa621c651efd1
- SHA512 f30a6d8cc40838781afd7b21e93f024ea97c8931997ce4d3ee75482b8fcd9e2370f67265f493eed84447bca065cdec06d30b1388846a4cf2bd0eb5cd26d87eb7
- SSDEEP 384:KGO1Bw7ylCmHC1F91U5zslTftT1fop+yfrf:9O1G7QdHCNG4p1W+yfz
- TLSH T1B072E1CD05F088CC192A864FD9D9F84EAF9939F05BD522EB6722E122C8903C0F171E5B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 21KB
- SHA256 118dd63ce4a9d2dd2753a096c05895469b52fa86bf0fb5130b91763416d2bc46
- MD5 392e92142b62ff0c50e71fd25cb0205f
- SHA1 7a934a9de781f4764fa4e2d19fccade6c12f62e8
- SHA512 322b0d700e31773ac095cd38988d46b10f89764b5ad3add156620b91c8dfa6626dc8af367a1026d76b671f6f546687a1efd152c95f9885d663abc4dcc15e35b0
- SSDEEP 384:GuHN0JbBZL6FA3DDdJz+bjCKfI9xNXknC0ST9wKqPVk+MGbokf7e5:1HyJbv6YvICKA170w+xboV
- TLSH T1A9A2F12F6F08C5487ADA752216C93B57125542F17C036B03E71E6B368CC42ADB26BB1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 2f63758a45cf31a462dac7a087c3c7d3d142c709b5fae6d0bbb39d44767612b2
- MD5 caf1e4728463959fef59abf535038a9e
- SHA1 7ed419fc4c4d02631f583ee23439080f8b02947f
- SHA512 070c17363a96ed76c2234db14e16e5100178afcb09a4e78f7369a604ea550a04fdf32f800a5521a9414362d43297dfff037c20539ff407112cc5f616853c03ff
- SSDEEP 384:6fsetpmKPkpP/LdigtIwD7GzRIHkuxQUH4K2:6fsetpEpXh5t7QRNfUY9
- TLSH T1CF42D027170EE9C6715D532DFEC607679AB819DE8A80460E921C02EC36B91185E3E795
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 13KB
- SHA256 afb57c3eef9c3bf184d2e4a743cb2261d13c7bc42233dc9cdfe0e86f32c3f0d0
- MD5 0df7bf90aaaf1dcac87e144426a1c15e
- SHA1 dc561b87054dd9c5e33810c9a98f1c142a4b346a
- SHA512 be94678c03e2f063b3ddc85649b1b1771c210c5bc5a64942f72119adb25c389913e679018a4024328b998fb8aa5e7ce9ebd414f5d801bc3c158869ae749b44f8
- SSDEEP 384:M6nNCMGFDip8iqA73VXs4ugUty2/fmdLyw5EkMg:R5GhuZqcsSq075t9
- TLSH T17552D029CECCEC1C450F9908366F7EB2AEFB047E558B75A3D8288B92C414BDD4A35D15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 7d8aa6064b528cae67dfc27424afc7a546d9b2a314f9f3586dbcd5a375fcf14a
- MD5 c19eb6f30bb05d15258c490e5f19a084
- SHA1 163fb39a3bc6735512f1816fddcd22eb42f40a19
- SHA512 2d1c74ec19b2731888c8cd1218793a7321bcb52dd7355c85c678044ba35edc7e4daa1a24309d375daa7158bd545bcebfa81ec067a558bc48ebaed2b00ff239c5
- SSDEEP 192:9j9e7EQY/JSM2V8N1XZnF0sn/IxgmAdWRDziwcMq8CB/lLMGnJHYeTyQztpOKGLj:R9LYMcSdZnhnWiJwwlASNYeGQ5pOF2Bq
- TLSH T1AD62CFACA1E0335D3E183BB6453761CE3A34911B9515792ECC1423A129E731EA8148FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 ab52d90ad324f5a196882894881925ce0e7747502d4c3add46de6798f0629269
- MD5 802f32bb9d85a0603e2b9126f3dbfc6a
- SHA1 22563af26473a44e9467d77be4d42404a430f408
- SHA512 359da682b894e428669d9d5e0530a75976afac8e009e37560b64f33ccf7294aafcadc47ffb726076b73ab640786b33a4093357cd63fd3c9c6fb811f1dc728c6d
- SSDEEP 384:jzztD19R8yVjuAaCORZ91Yk8oFexnpwzAQ8a3Ga:jz59UAORRYkgQrhGa
- TLSH T18662C014C36835BC37CB574534E1796ADCA84DF00EA2EA47B5F269ABDC90DA1ECDC844
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 15KB
- SHA256 bc9a5f8bd0e003269fc99a5c656aa29830148e872665c9b85f9cae08d4b94ebd
- MD5 aa072efc39604b7b3d2a78a9c65f457c
- SHA1 c011f4b53dd62e22016c978d311dd32874c74c0b
- SHA512 1229c689b93c6822c7d4b7c43a28b7c0c5aa3ec77fe033160b9a8efcdb8e00330350a8f8718dd3aa4ab4fc9b39805dfa765077dcd65b8fbfe32ac80da691ae4d
- SSDEEP 384:vjnwCue9Da9ajUypM1swu271CFpI+UFqZbpnCfbUpBgg:kWKKM12iEuEdubUpBgg
- TLSH T11672F1247A62F209FFFE414C60D64E97414CE795D4B7882CB8A0844F7126CA43B54F33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 20KB
- SHA256 77c18525de05c23315fcb3b12ab42ee934d3042e84858227192e1b59726b8ccf
- MD5 d6248ce93deddfd9149f8aaeb238896e
- SHA1 a358250e8e710e2afd1057a2b57f84bec3ef2238
- SHA512 69ff6e516c2f9f9defb523e3783e76757a17b53c7f8daab6fe95380ac7acb41ec135f7dc9d7574be3715c625febaa61b678e1ac18fde5e27efe852516554798a
- SSDEEP 384:yLIeDSxI/CdnFOmIhX48w6TGGmpEJGe2RmF/T7VKiMGs08iW4LpxFN/G:ysXxIcFOnqQGGo0uRy/Fs0eo8
- TLSH T128A2F11D8FF193E8F1F06725EC39111AD76A0522CA3D0CD4A6349D2993B2B6DB8E864D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 19KB
- SHA256 13fe36e16a8a2535e2658620d4a2d8198baa67b5033bcf5a8810bc1c55ec7c37
- MD5 188f77a9404ac59e748ae1225bdad976
- SHA1 9bcdfcce26decdeab58d03371a541a8d231286ae
- SHA512 4304f72ddbfcaeaee702148fa2936d1689e8d19a1de997f1eda0fbe80f6e77ac44b768978c7cf11e1b4db1fa9971876b597b885c7a0f4efe88b46df2b813a660
- SSDEEP 384:47o9/Tx9bV/IDt9xyk3SpgZYg1URUKGe4F8lqMh2TSrB8N4Jpzxn+3:6oNVIDhLSpgvyUeFBBB8Opd+3
- TLSH T19292D1B7E9DAF8246806BD31FC6F4E99FF5B0D5414A4E602013F28B1D4A27670A794C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 768904af98cf6afd21e5c6378094e508e617f0d1fdc2879af8a61dff5bbcf893
- MD5 c78f01978e6e0f8a959b7073016f0410
- SHA1 d87c6efa5207a8f49f7e501b3e25731a64927791
- SHA512 7a461825abce96ff368d0f1eb37003b0f76488c485740807beba00b5ee3794ff0bb32f4ceeb26122566c8a594bec13655a419a8d2ad1b093b2d52326a4f3374c
- SSDEEP 384:a1EC+mjBYFu3/3VGuHiPY0V78fIm6nHC9XIW/OFqwj304vW3rd/:3C7jBoy/3VnCPY0V9mikmqwj3bs/
- TLSH T1A382D153ECE2439BD1D1ECAC372C2D7FD1DD8CAD0A8B907246DDE0512E8E14B9A84759
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 21KB
- SHA256 2d37e9ab38176818cdbbb048ab14c5caf232a09fb8b2a4e465b49f4034e89693
- MD5 00b9cdae2b40dcab5ae0823e998c9f07
- SHA1 e556c57f940e76b913ea07ad4b2437c72ade1d11
- SHA512 d3613a4c33be704c8ad6b7ae1467504e0fd3b808fdd4dcaa05afc9895a966f46764f44e530bda16b03d113beb6559ad5d3f0d3e177efe0524d4daefb412dc4c6
- SSDEEP 384:xFrR5NasOf3EtT1VYx8gXUWSsR0/a/0CnT6WeE8PjLZ6SCKpAv2:znNiUzVYLTGS9T6We7fZWL2
- TLSH T1FCA2D065F7BDAC3441D2036163C39C4EE352AEF3AB35B48F06105199E6F3CA095A2D93
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 16KB
- SHA256 4007478a9c08087056e65155397196f41b51ea9d261007c832e41069a817aafb
- MD5 4b30225f82276878f053338fb727ebbd
- SHA1 e6d5f081252eabdad60c2298be25250111fbe07f
- SHA512 a7da9045612346f8bf64348fb24d2596152f135d56222cbceb3c11172b55b23e795fe9c31fddf6c0e994398f3d20f11e1a66bd02a3c2b50828fc73a4353b2e24
- SSDEEP 384:VIQrYf5Or9VpwglHNmoHxkWHVkCkJKFnYNmIQcQ0uFa98+iO:VKfgr9Vpv2ohGCM81LVQl
- TLSH T19E72CFCC40B3AF760574022EACDE6E2ED94F18EAD7463BAC9A203CC55E95CD75C7406A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 b89e64f2a8237c65f482c4d982fdb64f19c3a004f338ee6bc17054d0a6c0be34
- MD5 9823532f29c8131ea6a1252a714d62a5
- SHA1 939bc609f8ef3f923fd65dfa9d726505ba55b2be
- SHA512 11a282c6497f9d75cba8b68bef3d6cd39befd6bd552d068b28d4996e645e6deeb5f3fb737cf309aafff1fcafc9568e75bc3d01a290df97e76b8cc6ab26ab0258
- SSDEEP 384:o7SIuE/NMlqsieLbs+1ha1/a24qtNaCgogmx0/vTwSPsQnJy:ouQNMl8eLX1ha1/pltcMx4fsQnJy
- TLSH T1F482D1101AC2096EFE92C39C7F0F1D13DF06C9A413535E25BD494ADF10B28A7DBE8688
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 f6afd8b48e18c1376d02f5f74422c0216a5e804bd9be4621cc6cd4f843e7a5f6
- MD5 cabcaecb1cca332a4ceaa9583f3947be
- SHA1 3f2f285747d6401dcb673722b8998dabca654c45
- SHA512 61c3171825efd51b807c7c54c31647573c8358b34d8f5fb37b3d81771978107164d5a1530946a141450919be2a8d68c2afde93578eecbc8237e153ea9b00daac
- SSDEEP 384:ly1MCWRZbXag7RjczKPMeXbMilR1iFXWvLuwefrBKnofsOoT:ly1PWnlj1ER4RkKc8pPT
- TLSH T1E882CF3DB15D959014BBF0F05DCAB8FBEA71C5DCFB9264609024ABB69057090EABD0F4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 20KB
- SHA256 a17802b0f61fd355688c1b5d5e3db21b059499a2035401b9e8d7f1bd7c3a76a3
- MD5 4d53a7a2fc86b999dd473825c27f0c96
- SHA1 b46c0b8d2db1eb2a5646c537e3bd224304b46685
- SHA512 4571339a28bb7d79827e1e2ce945a0a66d560c7c7cdc71677effaee65f57925dac089ba653414f4cdce18605bf493144c19491727c815e47e191b362ce9608ec
- SSDEEP 384:yp0gvNEnaQTDrDx36BIM0J8mALJTeE8BTmAQSh3Zgdixjk0PIK5vBwnn9V0YwfrZ:NgvNEnXTfNXM0ALFN8BTmEkiGWIKw9PC
- TLSH T14192D17967C9CD693319BDC69EC1EEB28A12D0DABA86C1F40319F8D41FE845B90B4146
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 10KB
- SHA256 440c3add59936e4e65a2c8bb9e60bdd3e9bca048a244ee06d1304aa5aca7cdfb
- MD5 23077b86b794f97d94018430c64e4283
- SHA1 dd3abafba562a231571f6f44b8d9c9640145daca
- SHA512 8d068068eab02fb2963766aa70de857ad3b46e0a374f7d409fdc385a8db5bcfd7104dd4a10a74bf85e37410ff85b62dfecb5d2d35b322188d0684e02693b5bcd
- SSDEEP 192:CHUF1fcUNdpq0XbX8VirjfKK+IB/L4d6i6JJkOmJTM7S4pNZ17dALmT6oEXkbglS:XVc8i0LPrjCKxBK6iukVTtG5SLmuvUbd
- TLSH T19232B0F9DB0FCE2A33B601EA25D251139544DAC253F5728CEC64BD03F6DAA166C88C54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 c37e400c6800be8c7e1e1df569a76a833de593bcc56ec1c993a18694df77bacd
- MD5 045de2b734f8331d33d7a8ce43e6fc73
- SHA1 173ec75a6acf0aa5a2462d6836ae4039a0e601c1
- SHA512 66561481af2bef08523a156e1f9cec5dfed526582d904c8279203a731545c8a19703d84cb267a52b0ce9005b7245a3879e1c1bab805df8b0036580819ccf5d65
- SSDEEP 384:M+fO8XZUGkoxXuIm71dp5VLl2GHf6W5igHJhhm7Yg:MMZUGkoxrm77pnz/6WPA
- TLSH T1E042C01F6240912455887B06D36FB915CAF277635EFB9945C83E142334CB723EDD2B14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 b373062e7e524cfcb260276474acdf5d091d5710e7d5f333935f6ecb7e3dcd54
- MD5 d1b4cf965f32ca9a0013b84fe4b8bdf2
- SHA1 8f87d503f11c76e58bf04df966106ceb3e474e5f
- SHA512 1d3d387a165fefeeddb225938225a1238f67857b4bd13160d95058e3cd04e5a98ef652c08b091217d72ce8b69dab270818433d55da986bf82250caac2227e2ec
- SSDEEP 192:UhYQINpy6DlS1tm6KAUs1Py1JMH4X5AWPL9OtznSOtFuZby7FvyXn+yeIczZkVoT:eYQILGalsKw4WWzSSOLEX+bIcFkV+d
- TLSH T1A962E1874E15AE2DE2C54DA1E450F913A4D2857C995C40D727E9C5B32AB60CE14CF3D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 14KB
- SHA256 0a54548b12b42b3be6528fc6566a42e9050df9a6d1efd06b019a754e4cb47154
- MD5 420b3e26b045e7ef0352cd5c8932b0e5
- SHA1 6eb94cc225b3649006045e5ec1e2b0b6724fe87f
- SHA512 1914259edc28c3c78a5210b011a2be406b4115603d2e66a526d5b1b11b50baf436b6a68e6ce89da158a5a631b624cb636e37545d7f56ec87f5ffcbd27688bfd7
- SSDEEP 384:oRScGx5B/e3ZylM5quekxVVmGf/QRNd71gjNA:og1LqP5queOVMKQRNv
- TLSH T1EC62D021D3E5D2D7A2A7ECD3D7A113484B859C8EDDACA9C322B54B10AF4374146BBC15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 cc4b746fe0cb7fae2da508c72ced83ce4df7ee9c5cd8118c07ebdefc3538fdd0
- MD5 0fafcd5cf397304f42868cf71a6348f5
- SHA1 efd7ea785b881a1986f3e546c6f8ac451705fcae
- SHA512 c3ad5c0c1841269b3d98c159832dc75ee1160cbf09fa9d1725b518119fd68e18428f0cf2988923afa7965d00d665210e23a2ac45b4b5fb54bfec114d2eb500bb
- SSDEEP 384:BkHtyTPvucOvO/L64dSZnY9KxPWK1s9ebwwCWrxA/x0OioYCHVAxwM25:B3PvLQ65SZnYAxPWb88wcLYUA5I
- TLSH T18882E18C28A2AE0291AD53ECDF1896951FF8CC1EC43AB15178035CD235167F8A4FBC06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 21KB
- SHA256 f08239aa0e99a3f4ec11d312864aa0061b05261142835b570e2134e80392747c
- MD5 6da2a7021d593c55536ef1ede0703966
- SHA1 9ff0be6f5f939b36a2b60a55e4e19bb53b19258d
- SHA512 8bf5efcfeab271cb57e7484b63f5bfd00406acce564652ac4022729501f4271d26c7f2db6008caa4aa59e168d9a6e2b8222332b8bf9d8516fec08faf0292627e
- SSDEEP 384:DpMv3viDiQuSaHO/lWtQ0M/h9OtFtjOvXOTtEgJkJO6K59caX4H5iLVRPNjUFd:DaviDuS8Kxh9otjOWTc34a5iLVVNjUf
- TLSH T1ACA2D06836FBC02E8168B77F425825A751E34C84A5DBBA3231010AF2499DC3BF777A49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 46a2e6d990ba05098c868a3fd26550e0193c5574a2f26562ab1073483d024fd6
- MD5 a698c0187f3e6e70ea0e9b5577b82a3e
- SHA1 a8a3a48347327a620c280ca4a3dca0dc4f00c0e1
- SHA512 76f4a99c5b741b44a3128ef33a3d4820f621f41bed2b7d8541f0e2dccb1312235c4c81943f7be759e9f80f3f3c337f2f6d71ecab14aff225e7e1d34d36caa135
- SSDEEP 384:bEHMaMD1I7Thvya1HweUTvQT7ls4jIMAxxS7/9ZYNZSxUNcTGJm3RqMwWYdE:uMaO1IJKerGQT7tQEgWUNQ0MidE
- TLSH T1D982D044E454623615EAC06F4D86A236C2651ABCF3DDD7F6EE4C3D9E6849F4708843C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 19KB
- SHA256 3ef008dc536aeb8620de69421410f762308949bb21a2d50efad0f3632631efcb
- MD5 4eaa90bcce5ba405c1920f466834934c
- SHA1 73358d2c9ef5a57a46a2103494741ead99105498
- SHA512 22b03f0b92106b093b757900aa139267660c0d98fe83708a9f871d9d4cc83059b4e8e6759cbde2c03feb8bc9f6adae0f84d0d3e8188c2f084b5ad6d938a35c41
- SSDEEP 384:HayA5w7t8b6ApcPnryTMCJ5T+HFe1btlSIs28t7aWRqHmpXQ4KI:U5wKb6ApcvYM85TkkZKIRi3Ak
- TLSH T10692E1507D7755404B12081E2EE3BF19513E8693FFE695FD48852CAE27CDD261172DC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 d8814285ce3580125bd3cf3f86af27c79f0b3e99a1f7cc339cad0950f88e3bdc
- MD5 cbe7a9024776112c03b01e4353088c94
- SHA1 f9ba5ebbfb2603ca129cfbd77c879a30323dcb2e
- SHA512 c756b47a3a0c7be824254f0caa782da90d64e55f60b05e18482a3ea6b2afcda5079f02c2a4bf2a018d14c0e9d4f4e0aea7af889485fd2cf94ce9c777611c06c6
- SSDEEP 384:rhSjZa71nAieBT4c02n9R7ceRianu8v15qbXJk9:rh04uikT4c02nsTt8vsXK
- TLSH T16F42D1F49DB096350CEAB620D221BD52CF9B639A3C9E2564E4FC2446CA540391DAEB19
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 6059c804b10111baa08880f1cf162a4fdebf1935f13bf29d8d5ae01cb1caaf70
- MD5 8ce0f64e1857a48ae899d65424176c4d
- SHA1 446cbe673f8c6a0f9263a5fff3d033df8e3f1702
- SHA512 933597567e62ee2af1a7826136160ea3ad71be74d3a032b05ebd0ba7b81cf801885a5f3efd6efb318423ab5b540dda9dda5e0dcf41373dd6bc591b5483864f39
- SSDEEP 192:aXZUp+XG9dUavhgOMflwesB7/uvZLEP/amcwOnnsTAk+yXNaZID9igqifVxGby56:aXqjv/gswvZLwJOyAkvNDDdTGbYZC
- TLSH T11D42C03AB196EE5488C1C3B5BC118E18B3C6195CEA4C214D2F3D627317A0D96BDF0BE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 ac943ad0648c9f055a5ce4bbe7436e1f6fb6ae32e6cc78246fa04520657fc3fd
- MD5 03bb0ab9ce803e286e8cb7e604d89b63
- SHA1 4702ba83dede7a8dc7ffa0cb32fc6b3470866c09
- SHA512 903672f7d3e21afee90a074cb276145a5362458b3ac19ba607b4b830614b1f036499626720764815af63bba8111e7a9e746ce55e382734e26eb49115ceb6acb7
- SSDEEP 192:7yviLz/rC6YjrolHnSVz7yh/tXDsEAVSZ2PfZQz0SKrPFne7iNIt/dMrA1icg8fm:7yviPznK6HS1etzs5L5ZSUNItSrbwTa
- TLSH T1DF42C029DD3A56BB42FF456CE788AD2154C2D3289304387EDE46B7F90496EB38605E8C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 19KB
- SHA256 89e719486b4f24e6ea7db59f6a87b8b2da51931eb72e2070dde1206a07777b68
- MD5 867317abd331988bb3fadcc0928404a5
- SHA1 dac319568b129fb138ae70d40d94eebacc40f6b9
- SHA512 7f1f6f81324deca11848626033a03fea1f4d316031d06c9dabb0401bf3528ad57105d771ee45311ea8da85f1ad3b8356bb46bf4accb4b6bf69fca7abb68594fa
- SSDEEP 384:gsgJxX214+uxpYZudETmOMZ/njLx27Vqf5VI6QFvK:gs22BuqTmOMZ/fQ7MoK
- TLSH T17092E1F83229CB63616C8E8119A5623EC14B2F1ED640A1765D49707F638ED7CF60F85B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 7347b3e0f3a37cafa9679b343ffb9bc425127e6a7db5d464661feb9e30d06965
- MD5 ff1973f1cc969fed026ee5dd11bb3725
- SHA1 f3ea09d73619ee004d8349b27b44789bf8f3f368
- SHA512 d7562cc54f6aadcf47ff9910119ab958f1104be7a4917c630a2665cbdfddd16b1c14b0510698cd5d365b5048dcd18e8cfa42ec3948d4f84877c90ccae1863e86
- SSDEEP 384:U2xGGYVgOwPuQuTTJNmdLDprAEF6Lcmfml0/gKGQ:hUGYVtbHzmxBAnwKgKb
- TLSH T1C242C0725C6041ECCD2E7709C77953A2F14145262667CA1A7C0C2F719DA4FAB4A361FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 8d13246fd0f342e27f64409ff820cb4144ee677c4bb2887996cc84e8d1308ec7
- MD5 dd77e8bf0610cbff921d120119e55533
- SHA1 f5036cd40a2d7235ea0357af920cc83d2a24c71e
- SHA512 b4e89db3876d0acd68f5fcfb626d838688bd1c758034660dba03f8514fd6a48fe8a8d51d3d2559669957e808252d53a8b972eb5161b1c15aa65cdd3ed5b2ebcb
- SSDEEP 192:vrx/p9cYPn+pnyQ6RGgEK+fK1V+NQ3ammHWmBdE4eCvbGpGM8ibyutiOxUhSfk:NpuY/kyMJK+0z36HNdE4NGp/8/utShP
- TLSH T1F142D1A9B242DA74547C46DD700F45DA375F090E067FDC97CEC261E1E8EB6928C55C0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 bc2894e41fe7126fb47b6ee48ef37a57fc04dc4674ec0c89e41e79355c4d1fa8
- MD5 da01487ab3579ca8c6e75bd49a87a6ad
- SHA1 872a408e2ddf1463be7b18b701dcf2716717aed4
- SHA512 4bd0176d0799356a876d54563c457b18edd1b111749ae52958ad115837dfd8ae0dbc7756c2657436ecf74b9cadd8904ac08eef57d0a73909c6338ac71e11ffd0
- SSDEEP 384:zNJ7TgOCtNH+27Bn58dbkMYVKMXWIHj9db:RRTgjk27Bn58JSXWW
- TLSH T1C442D015EEFAF25963E70B1016482FA5011BC08BA34A35EABE5039E737EB254330F15E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 60204ee68a8ec18f2ab39627732e4c5e03e88e2acf60da6eba18c4a1c51f015b
- MD5 1accf377036e9f093ccda87878795593
- SHA1 ad981f554a33cd607ac6047102dd49c786a9a3e6
- SHA512 9c5ddd879900aaec81089cd3c76beb69de50a106e7dab8a26fe265c0196e7e687fe4952770d696c0034c753fda9c53842bdbc375e7b872b6f24dc7136a76e990
- SSDEEP 384:Yvveh/eB+yb7s43Adpd27l/J3b5Jv6m99CTfxIwJ5Jhp8mw:f/eBH7sv4JYTfxIwbymw
- TLSH T1F282E1B036EB1D5EE0F3E9CA601EA1B3D501D22947695D1AF63FD330F70C2A09576182
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 6911dc1bc8e6489df0ebbe59f8c63ec1c2dbcf50542df896be547a226a25e5ce
- MD5 02173bd7b7cae458c8dace7f6cff675e
- SHA1 6d0fbb045e2530085415bdd56c59a3f76665319f
- SHA512 b4cd5f365d8d0879bdadfe6efeb519c0b90ec804097b088ab3392e31f16c281744b697a9ed613ba1e6a69c2848e22a1292b73eb10ba5957c334b3a050ba56bf0
- SSDEEP 384:nfUfavdcAHDNpydVBf3SFgYs4O/VmVsekLaeDRYAil7S4XM+8f0xILqMxZ:nKavb2f3SlslIVoaeGAc7S4nQqSZ
- TLSH T13AA2E19CA85A09216025738DC8A6DB035C0DBF2B453E3E67AB112B1D5CFA3BA4F0D781
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 19d26ac151a938963f3129deee745aabbed8269bde0d4b1bd66852e1a9952cfd
- MD5 50f34c417dfa569d281f6c69829f6f3e
- SHA1 4ac5e006dc52ad3cf32cf90eb32cce0d7ab2e0c1
- SHA512 d90e928c0b2fd4386e39d14b35fec8d86297accc8d180d0a78f5cf533f155a33adc775ddda43ffa1afc1f34352c42d4c93da84fe4f7dce5a2e5c0954abfa0a95
- SSDEEP 384:kdX8QWb9Vt6tAbWQ1FGyrNkFn5S84gVSIVOYfMt:kdX85b9T6tOWQzNGn54IVtq
- TLSH T17E82D1B5A3D06D029CAD5BEB3A394F0154600DA57EED3FB06A4B0C78A8A6500467FF45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 20KB
- SHA256 fe8f4807404e600e22753d1e29065962e9c5c9977ddd84244de9d6b8dc4eff1f
- MD5 8e0905c3eca3121103cb67f0f2e59d38
- SHA1 161f92c92564684367afe91d39cb8d89a129d676
- SHA512 b7ccb4d6886e3ec6db8d837a86e5f3a1f2b0d640e6aced0c7f7b2187f3c7494ebe593309194214d681608a06138ef4d360c7487a7a165de428415b6644e9e66b
- SSDEEP 384:1mJS7Yo/x8ejouXI3l3zzcoLhydbwr3QDErsVt5K1kdldPeJicKsrq5PXS:1xx8HeoLUFgoVtYkdPPRp5Pi
- TLSH T11292D0062214403B544B6D1AF5188C80A6E2B6C9F472CBF8AD99979B2738DCE489F0B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 21KB
- SHA256 6d1ec4f1667f42fa9ae978c8cd670a68bcee819b91eb31d63f8fa6409fad4ee7
- MD5 780cc45cde890197b4a8d1ece5dc1dff
- SHA1 5b09bf0da7bd6aad3d4118f2a51cc5f5b0171ef3
- SHA512 49012a5d84435d3adc5497db619bffb86ca0f8938b687ef1774c740ef967e802141fe3539fda97a19c75c5dfbc81b7d5dbbea66410ee45d780acf66b589eabe2
- SSDEEP 384:eCy59kPHqyMahvj4Yb8XhKNfk/47db4FrQicI8IH6ifb:KkyyMy4YgXIs/PFrQilVb
- TLSH T17BA2D1435F04BDD1F545E9DFEEBA2500A5A0AA00AF375CEE488055B2B3D04DA53EAAE4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 22KB
- SHA256 cc91ef85778fce2ce9a0b7498117c225b54e3553aa89255e60d6ff58776380ef
- MD5 8a6e2a1889b67a93a70aba5e3fe4dbf4
- SHA1 bc72f83b94c8511997b1ebb60ac89328cc8bb4f0
- SHA512 741b8219b36b43f3fe3787c36a6cb96142765dcaf4051032a8511447dcc496801453065ad1c42fd1cb13dc79cebcebd5814a4fd4a5beb4b4bb08a1f865938bdf
- SSDEEP 384:O/N05rJV3YR8bNvI8yHTAbb/URXnGuQG145XJmjH1D0XUK4ciBsuzRrVEY/hDN:XL3CghyHTAbLuDV1CXJmjVTXDb
- TLSH T15AA2E1E306E3721BB2D018D4C95C61C1DC42BBDDD744A2E870077E9994BA356A2CCF97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 fb8d949b3a1cff6a3624e15667f36c8d85626ee31b824b3656e44b9440a58c69
- MD5 be91aa7d62de5d58dea6d216b6e7b218
- SHA1 2b47fdfe27a0bf3c4c479267d69405235c89d4a2
- SHA512 7d13fc691235245639b811ea1852d3da8fe52b8e3b156bbf946c776ff181e72333cc0116c2e45eb1c20f759d6a931598cfbbccb27c1d999841a8d1ba787fb414
- SSDEEP 192:bEbqdiotnu0te2csbkv6pI1brmnm6PwevkHTaPra7bNKpbuoSPPqbg1:CKRtxTkv6pI1umv8kHeP5YPIe
- TLSH T1C342B04900F2A874FFDCDEB160B5C65C8D8A13CD563016D80A9637263FEA748195DEC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 94e9c3ce5f185caf64f777db629e712902857ff582f5d18ac939cc2f31f9d8c9
- MD5 718a2e388730abb7ce163f94e4b7c10d
- SHA1 8735384f336e47adb2444fd9ea2b252dfb1e484a
- SHA512 16d2c306d8465d06dcba30fcd2e3c12705819e7c032234570388cfa6528e00bf2fb2d7f8b6262a3b3aba2ebf712464a61b4f19cf8f8f713193866a81f922ac79
- SSDEEP 384:FD5kbOkn9UgywgAIsf+lR/Lce3hG0R+8WNtcInYG2Oc:95qOyU9GHA/L/F+8znGM
- TLSH T1B642D0A7DB5B2082E46521AEFB73B1176A63F8C82BC54022FBF14BCD319C95625B9244
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 4a42025026e3560d704c6230ef1cf23fede06c35d9cf3a2e26795a61eb3114ad
- MD5 bdb08d5d33706f7c711dbf008d34f333
- SHA1 24e63fd59bf12bc72c606a3ee8d410aea071c573
- SHA512 aa5d33cdc026c674b695aeabd02fed5a92a2c5cb0cdd8a14e2f5cb5337faa8c0868d7a800b19de0ec77fa2035057d76d3d6c7125a060f8c9e94766acbb8de34f
- SSDEEP 384:BtLzVHLfrkImkYF62HDCHpBLlcIHWAKrytPYyTGYdLm9cFX7RHgSg3wPqTtJXDp8:B7fY7P62uzlJKrglTBuim9HJJd8
- TLSH T18082E1E9E4A050A0E0BEA4817B64BA5D4550228362F2779D0C34B8F186AD99C9B0DF3F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 fe5ded7dab64626ffa8d146eb45877aacfca26c7d0e41ebf122aff5df9748b30
- MD5 918457d9b40af85ab27f70be53803a85
- SHA1 c805c51f41b9dbeb0a7be301268d9567a4bd8c88
- SHA512 a0ad1825b6e4a88da1b824444bb43cdf0e1f79635658e92b82b87f3c9e3bd60b5aef9004ad6206058bbfd2cf596b7989e66246580e4c265764398f1b2fc8ae12
- SSDEEP 384:NLB89YaYkj22h1URhicixt6tyjyzEQWC31GPqDOMX8TucDNQvuLD+7nmt:NllkKWUvic06YyzMC3YPqDOMsucD62Lr
- TLSH T17F82E16DCDAE8D19D2BC8B2705B8E6185AFF6F55D224A42E11828247C44FCC376E7D23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 19KB
- SHA256 1bd9fe07f11e16e8b79d42b905c1c14a6ad9602bf8448ae402489cc369e4d92b
- MD5 e3b94561f1df4c7c274409c11c6cc6e9
- SHA1 23283c32d219c9f352afcacdd26f64dd60eaf68d
- SHA512 54c6a8202cbfd54eb22d8ab9e161065249f973f35d65d302159a3ab1c466ac9bd20b27b256e50f9f2afad8ccb5290973e33a87f9775c2ea2b2a9f488322fe4c1
- SSDEEP 384:xRQZwOKgQzC9tyHwJzwYp5uwLHtzQuascntFc1jZ20Ikeb/lyVS:nowOKgQzC9tyHwJzw4NTIiIkeb/lyw
- TLSH T1B992D19C66F437D487F2325D3B4C46E46DA89BA0F73C55118EF4B0A1892FE254AC6784
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 12KB
- SHA256 6559eff2a3d71928c89a0b9cd96371e81a4e9b4cf5c732b08139007922499f1a
- MD5 46ca0704cfbbf26a49bd374503c76bb6
- SHA1 183e0e71c11f91234d48cce4196a71d718bd056b
- SHA512 a423dc7b234fd88cc7e0da2ff15358fa7ebf3285e8ca784e00e7596d05317e655754e64000446c53708d1ffad696b692f5c257080d8f13c0c897fb5d677e05be
- SSDEEP 384:GsNj6wriay/aKt7Go4RDgO3SK6aWgDvrzY4ui5vB9hOjrLP:GsJkr1ahgtK6gDvQ4V5vXsPz
- TLSH T16442DFD70C8737B1196E090366C77364D0BE25EA2ECDAA55ACD5D4E3910287F28490BB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 18KB
- SHA256 46b5f18fb4e56b4e25ca14a2b3653f2bcd9d71b318146ee3c5b09ed4d281a418
- MD5 20d5e16d67667ca5c7dac0b264565645
- SHA1 3bd833a3ad7f38cdd4f905b500298576ff145cf6
- SHA512 ceeb6895e084416d685da9c3f21d9b0ea8b853c48688f243e34e238daaa80987853e0525905fe1dd616c955f6d685cca04d1130c2076be3f55a61dd05642a367
- SSDEEP 384:whQq0/O32+1IvXsTODVK0ZJcL9CGZwKB1u9uaFXQ:whQ1s2kjO8Gw5ZXBLAg
- TLSH T18592E1CBB5A9EA046698B8041A0E167D00D1BDB024FF4F42441F9A1EB1BFA533C5F71A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 19KB
- SHA256 b2b15044ce02dba99fb1e6f1ab62aeb7cf05d361de2990c44e349f401f9dca3d
- MD5 695d996a8287defaf8772720339434c1
- SHA1 b04617236add5fb0afdac2da0496593829c6839d
- SHA512 b8fbe97ecdbd73bfd5a25e934fbb177536b2aa8daa0346ef64e9eb03ba7bba2ffd468705bde1de90a5358121006042f7bfe738a643170c3480ec043132d4b573
- SSDEEP 384:07wDpwpe/JZaDhKfNZWCQtf1J2kmy6R5LK20GiA38gq79t/I0n17ajCpG0u:cUpNpfNs/f6kF6fKSVq7N9+t0u
- TLSH T14192D03DF8C79E4054A874B00E58697A2966F561F5E543AC49C16931B02E2F7CC9FCF1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
- Size 20KB
- SHA256 6191723861b2e9b70034e8edcfcb1127cb373cae5eabf47287e5b4ab7617597d
- MD5 b0f8e21de257897eab4903100bcb0ede
- SHA1 b4462866a9f96648bd9122c3ae2a85f5581693c4
- SHA512 a6d77b6b0c30cdff6d134b35e51f0c45f4f68631c65b25636a8efa6843555b8668e1eddbbc5d342d3c870e7dbcbf18ae57e5a28272dfdab6767a210b0a60d764
- SSDEEP 384:F84Gxe7K5bgu0s5snSB/OiM7ybvZw8+aiVFsOSX3KvVviqg+aIi6k:HGxeg+t+bvZR+fM1HKvV1g+/iV
- TLSH T10A92E10DCC94379C4C8716F25B6A539FF29E78A078D60D71D830DAE89E4A61941C63F1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw~RFe5c4b97.TMP
- Size 381B
- SHA256 1985629f36d32430fee63523d8cf2b9f6efedda2e1b63751d12e08a389364d8b
- MD5 87fac4f693eacdd0235fbcafdd581b4a
- SHA1 55260f450c95a3de902b2fd516aa21b33b0ca792
- SHA512 a6706d15ef5d37a1d90e8136f869aef9d2e668e9826f0cbd0366e0ca60533e511f2456e157eac135a9297773733fdbd36b4984dc350ac394d2cf03295d3f09e3
- TLSH T152E0F19C1F81CE05A0C5990305DBF1FD1D5081EDFAB0882261813C7029346000AE9007
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6000.0.986562397
- Size 265B
- SHA256 fd49b794d000c24907d2a265be667ae3c2e4407ea366621a596bcaf74f7c1b3a
- MD5 01db171ac2a372997abf1c7a2e568fcc
- SHA1 4c1f390c03d48a6d945f573f464865f3d0a3b73b
- SHA512 9457731d73320536cc3f5bc36142c599baae2f04b70cdbe5b7396ba5e26a7ebe258cefc17e3bd2a37ab4803cbd0876067af468792dcab4162484c76091c0111a
- TLSH T1BED095742D06D5E5F1F0E6398334BF77153A8432440EB430119C072601FF15E0711B23
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6000.0.986562397
- Size 1KB
- SHA256 617c420fb168a8fc1a73039b18813b75ff3614774b4ea6541ae0d411616d3437
- MD5 80ab5d5cac7f5a41d24efb6b84a05811
- SHA1 ccbb2072aff696caddf7bb554977279dc5adbefe
- SHA512 5862dec208122adbd5935bc436bdd57c3e1a09f8cd592b738956296b22e16b1ddfefbf8d6d0bc60d70bf36626f202e3e6061f9c889f19fdb27decd8271f7d942
- TLSH T14B2132819C8129B86FE5C7BE72F1363607FEC893611495B636DE410E07ED3B4450B71A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6000.0.986562397
- Size 2KB
- SHA256 7e2417dec115ad30f03332ba8ef04bb415f77fde68d915d59839f3218a53193a
- MD5 7e53809ea7c386bb014a7ab382aa4c35
- SHA1 aa2a4bc13cb364242e6a9b8d73cad0a6093b8b25
- SHA512 a98ab537aa4c46f73cf11283fe831604418fc56d4e73cdae489985c26845457fa5c9fa304e9f1841d6a40ece3dff0124ce356b382eccebfb7583ef8577b6ab4e
- TLSH T13F4121849C811578EE96C7BE72F13F360F7EC4B3210495A932DE004E0BF92A74607607
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6000.0.986562397~RFe5c2f16.TMP
- Size 203B
- SHA256 e376bcefe9591e34dac113001ea0f643ad67ce491020c58c7d78a76723a4f1bb
- MD5 6a4bd0044a3dc68679d86f423d1569f6
- SHA1 b416ee36069ed0f4cc8a7e3c76f2476d90a1e2a3
- SHA512 5edbae3d13da551f2073b653c8c1bf247fa6c46263b9487cdd0f97db324159b993e1efe0d0f7fb3e46e7e0ace7f2577c498ef2b7e53d3166a5547c441165dcb9
- TLSH T18ED022246AA291E9B1F8F0B0C3383F63081908300D18ED3421FD0362006E1962711F32
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 780B
- SHA256 9bc5eeca35b4c43e102a178d28af2ba599b848ef85a1f75763fd1974e98c8689
- MD5 3c657fd79e2a1701dbfd7d049901bc70
- SHA1 5bce44015ba771e12d0a61d6a372f4017b9749e0
- SHA512 94fde6a11b777cbf1c2cbcccd0a7d41c137b3bef3a562f1fb3ae8b187a344aa068715b79fefe86b8efa0d777a10aea6530196be937e148e02658ace65f0089ba
- TLSH T11D01B1E66C2547159F5687B23B7D7496C3B7C5C9E8C090D7949C544D418A26E09153E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 870B
- SHA256 8b9d1c4e0d797a2b5ddfbd2cec204dade76c502e865d27a9bd428b4332546750
- MD5 dda8e660d296d8afcd04242d68e5fc53
- SHA1 4827893bf7c6ded610828b07d1efe4c279accbea
- SHA512 ed23b14a906184b91844e404e76d7a92aa28edcfbcfa812ca1787ffeb6669c9f9287746c46549a0b355c6f96371cc05fc8f756acce604d99dd56ead4a08663ec
- TLSH T1981116E71C1147259F458BB53B7D74D6C3B7C8CAA88080E7D85C549D018B1BF06053E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 966B
- SHA256 3f0043bb767992933691138995c081f18b9c89d0588f0e1425f93c106a2620d5
- MD5 183f97b7cd0932ddc61a46c2118a037e
- SHA1 1579aa961f8633147ea6c3bebdff87ae31d9d4a4
- SHA512 91e8933889f37dcaef60c81fbf48eca444c8028c7b89993279a2176599fd92ceced65ffe47acaf7aa3f774ddcdf99686e33bb7a117b07e866be539dae6517749
- TLSH T1C211D4E65C1247249F1687E27B7C74DBC3FAC9C5B88090E7D86C589D028A1BE05153F0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 1KB
- SHA256 32a71eb2f462f72ce61f617a179c80dce5563bfd24ed4086115000231de7a6ae
- MD5 51b052f2afcf9ca387f8fbf590ce5cce
- SHA1 d7be870ae006b00dc7192e744ba4370ff821ff92
- SHA512 8ac5d5d67ebd301996033aa7ee6f9e9bc203926a46752fe0c8321aa153b0dbe31b9d35f85ef05f9423c1587854f9cdbda23833262fdf22e56d37094c59bc6c07
- TLSH T17B1105E6181113245F1687F27B7C78DAC7F7C9CAB88491E7E86C988D418A27E05053F1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 1KB
- SHA256 ca5d0050277f190a974c6eafdd851bebc5acd319ec07de416859d88b2f62182e
- MD5 4b1db00174f50b321aa2f341e3efa97f
- SHA1 6b1244a44d49c56226d491a7919d9c81e41ed8ca
- SHA512 1eae2223feb8e732d60ecf89ba479df4c566cbd2fb794d5589bc3291b258b897ce0c42cffe3ab5e7a358a7467e870086403e01c3c050dc113336e168b8899bd6
- TLSH T1D021E1E6581143205F1787B27B7878DAC7F7C9CAB84080E7E86C848D028A27E49013E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 1KB
- SHA256 1e8c4737cba403214a642a530e4db0648eb0d955cb0d2afa30a0cae3fd09b26e
- MD5 3f7f23806e11d6cf24212a52491aa8ca
- SHA1 1e7e03376af0c08d00421a644ecd3eadb66c20d5
- SHA512 7360d5e6f05478a0c57ffac40a50ba269a04799f5e05fea32d68038be7afd7eb760b9dd13b86a6eabb2dea464d04ad57632e41fdab4963482b5ddc360e6b8486
- TLSH T1AD21F1E7582147245F16C7B37B7CBDDAC3B7C9C6B88480DBE82C949D428A27E49013E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 1KB
- SHA256 0e2e82af3fa95c88546115bd0d9406acab68bec7ec072d03ccd449465bd50392
- MD5 80298e7d03e95560c81701f7f33a2f53
- SHA1 8c1e72411052759fdfba3bfa50fc345f29cf4b02
- SHA512 a3fa8593a124a24644f0b48b1ad5ae0169877039b41b1e26960374fa99d3e332ef0319127d954ad78ef79cc6bf0e3caa811c0e2cd4487b80cb38041f8414c86f
- TLSH T14F21D0E7582147245F16C7A27B7CB9DDC7B7C8CAB88091DBEC6C948C12CA1BE09013E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 1KB
- SHA256 411dda776a78bf47551f573c5f8aee208fb5e025d8f806ee76be6a8136a8df73
- MD5 4c0411826f84d0bdcf153dee0d89be7b
- SHA1 ed38efa8fdbee4e8eca6a56efd1cc3fbb5df9846
- SHA512 5a394beb90bd40d4fe42859dd771155ce303653440e8ce3032a3a9f451e837c8ed78d0cc070d30a220bad2e7aad025dedb30437d3aec944fab8539e31a4bda1b
- TLSH T12A21D2E7681147245F568BB27F7CB8D9C7B788CAB48051DBEC5C949C028B17E44053E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 1KB
- SHA256 67828c45c574419816ae8e3a9ac237f436270507d7f3e1b8cd25de88aa595a1f
- MD5 11d9ab902c5ad0a180edccd9c2c279d2
- SHA1 2c74266961527909166ddfde6678640664811978
- SHA512 4c61439aa98fa52d9c5b396311c2c736191479d5cd704567ec2b1d8ff56410a63cebe0301261cbf3a9dd3358452c74aeca995e9e52a197977e38972c798e409d
- TLSH T18D31F0E7281143285E56CBA2BB7C7DDAC6B789CA648491E7E85C849D02CB2BE05117F1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 3KB
- SHA256 30426dd6f6245076150a286dc5400ccdc93e4d31efa47c27b3473076008c8f44
- MD5 0325f62a9d63d1bf37d4c4ecda12a57f
- SHA1 0d854c1d8324fa68f1cade575646c2c8f7558d41
- SHA512 15b3ccc6b6dbb04a75ffe0228a71b3cfbf271fed4559215eeee2e3ad0bea616b28725d48c3bdfb5d6b9675628e0c38bd86bc5d4d9919e0e1695ef33c45c88363
- TLSH T1528174D268511734EE96C7AA77F83F6ACBBEC4D3610091DA75DE400D07EA2BB0607213
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 505B
- SHA256 6f7aa58b84f16e5cd9e89ce81e2cbe4fd052f1f22f89d06bf10d5c36113c2e64
- MD5 52a727128105f7ead1d333607a912ea4
- SHA1 293aa1e3a5a3447d72619eecda4b56583a2de6c8
- SHA512 63d1e8dbcab0761eb7eb103e1436254a8a73b16eb4a7e6fb3d94ebaf862d26d12ce7ae779737d2cb53ff20f48c99b3dcc6e4306ebf7e11f21a67ada5f39f8468
- TLSH T12BF00E41BC211321BF4E9BB137796823C7BB40CAA8C894EA68A8540E532A25E091A3D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 693B
- SHA256 f2aee6248e8d2c2b12eb4d9f8fc693128a0d746ff530ccdafd13bfc6ec89d666
- MD5 5d67f9bcd830d31f63d992251aac6c93
- SHA1 91bc22bb23809afc17e63bd829b94ae56d609659
- SHA512 f8e88cf3188206fe6f9cf22b8f40ec79d36f4c6c6362c2dae4c81949eec6a59b5e2a4d36a1cb6efbeebe8bed0b440d495ff13c2748db7b06a6b8e414b5e68879
- TLSH T1070128D66C3553109F59C7B53B7D7957C3BBC4C5AC80D4D7C8AC944D435926E0A013E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 2KB
- SHA256 02cd5c5ad214a06baca4e25973577e0177133e5bda0fcd9eb7aefb4300f9f733
- MD5 15a0f89562b7d06e93fdff19c9e4ef45
- SHA1 b5b80d112ecb7a51119ef87650929af5d64e457f
- SHA512 e19f968c7e420aa67b7dca0a952411a4660ace64bfd35769d40236ee406404dafac655a15338ca063d161936c2cb5c54c6fb56e1401555649605341f27203eb2
- TLSH T1FA5182D2685117385F9ACBBA7BF835AAC3FBC8C6A04081E7799D804D03DF2BD4406361
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 1KB
- SHA256 f5b22c79ad54604682b070d3662e36f15777f61acb9af3e9ccf7f4b174357b80
- MD5 5b5af31559ca169192f85e80a1e6ded5
- SHA1 8919757d69fde00d9356d7441162c5b8e970a942
- SHA512 8e00bde2a860a80a3979be5ba59660b1d3578877c67b779d077cc7d5e91b2c9365efa7aacd75efbae4a9b7bcc7f19dfea5b1605e15b7c15142dc3f2aef6cc446
- TLSH T1253103E7681253249F95CBB67B7CB9DAC7B788CA748490E7E85C849D02DB2BD05013E1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 4KB
- SHA256 bce0eceda27d6931a5333c69742e681ffee81e46aeae7850aa90fee2823a9acb
- MD5 4d9307264672324179e5a401d18de3dd
- SHA1 1211611e0731930abd5b1b9dd3022b1b86240d91
- SHA512 e6b710448b481155d00fc96f4ee4b10847af569db0aca7c4fc37190f105e30ee7bd230e70ac2e27e5595f50199b4a228d6c828371ddcb12f09e0d77906aafc80
- SSDEEP 96:nJywZwbB3UTv8SS97IOwy+lyDWQFmcCa21CecV:82w5+fS9N7+cSQVb21XcV
- TLSH T1A98153D19C511734AE9ACBAA77F93F6ACBBEC493204091DA75DE400D06FA2BB0607617
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 4KB
- SHA256 38bff629321cb627d6af72714c0a0943113ce6be7ff1b1c7382677c21520a762
- MD5 3b71e8128018cb864794003772864c64
- SHA1 b70ac14c13ecfd9dd26f5519f838db11e7cc81dc
- SHA512 0e209dfd92f85daf87b1d57c98590066790b44e15faf6460b7ca2e8ead332a43c73bec4ec446a3ad6315035037b29fdabec832cdd38aaea1cde0019003f58acf
- SSDEEP 96:N5uwZwbB3UTv8SS97IOwy+lyDWQFmcCa21CecV:zu2w5+fS9N7+cSQVb21XcV
- TLSH T19C9163D1AC511734AE9AC7AABBF93F66CBBEC493205091DA75DD400D06FA2BB0607613
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 4KB
- SHA256 e2b67329d4cee7765ce4a37b12f0d046a0bd2de1aeb21725cd0f9865ffd84db9
- MD5 b9088b06b0cbda66bf5e405fdb266ceb
- SHA1 e8157795a84923fc30c1815e517538ae8187d079
- SHA512 f3c7647fc1438a6ff3c29b2d53fbceeac991079b3b0a1f625af529b86c02cf640709fda5295dc4c7ef0de23c93d98a89c608afcddd1752dba6a074c0fd853ae9
- SSDEEP 96:BRuwZwbB3UTv8SS97IOwx+lyDWQFmcCaf61CecV:BRu2w5+fS9NK+cSQVby1XcV
- TLSH T18D9155D29C511734AE9AC7ABBBF53F66CBBEC493205091DA75DD400D06FA2BB0607613
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 3KB
- SHA256 ea70866331c82afe1226274cd21a84189458d1852db280dd0c9b591d3172b4a3
- MD5 10d420ec29cb6376e0a8dfd2ccde8b00
- SHA1 55b0860cf85b20333cc5f5ab4e1c26df69a75d3c
- SHA512 8aa5d8f4e3b1099afcdd5f207ad0dfa1fc2f823accfbf0d4978278cc38aa1a8bc2fadb0e0ddb78142837501fe2ebb78c1e52e80b2cb6fe930521b8810875d77e
- TLSH T1088163D298511734AE96C7AA77F93F6ACBBEC493200091DA75DE400D07FA2BB4607213
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 3KB
- SHA256 1c873ff3214b3359c210d23b0ffbe1fdc74c0087beb106979119f87786b89b33
- MD5 3b2a24d6451f94e54b225fce71dd94ad
- SHA1 3a1a9b660e4b9f24115a68cde98881983054863f
- SHA512 d2ca07e7028d9395ac24f8f4e3c6e511d1c7c24db92c0acefee7454e6d5b3299d4a220e8fa874c8ffafa3f009e0c01eb521c6ed707f371c01905998ae80e1995
- TLSH T1BE7184C25C411634AE96CBAA36F83F69CFBEC8D3200091DA75DE404D06FA2BB0507313
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 603B
- SHA256 9c2d5e72de521b3937bd2c23568eeb46bc1e30fef952c5998e8e982ccf4b0522
- MD5 6f67083259a2bbb6dcb14d1874a3c1b5
- SHA1 fff5444cca5556d73caf4dba909a176e9bc0e3de
- SHA512 cf49a637499ffe74e67ed6ed40e40a75deb7de409b390094f239d36c97c35d49cbcac095d2fdc85f609ffd2408487b3b2ab56465f0e5ba8b4b80900e275eec51
- TLSH T101F0E1967C1153246F4A8BB53BBC7C57C3B784C5B88494DB48FC540E039A2AD0A167D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 4KB
- SHA256 a9742705f82740317c09083b203c42925fe8591b6f97ae835b9145c18ea691be
- MD5 428f8418d14104537ec80f0abb63c29a
- SHA1 7c6ae42a4c425b02601f83a0889b434cb8cdb6f5
- SHA512 dd272d1bbe19ae184b945992922bfacd880f33bc4f6bb3e146eaf110183ddea1f11551e5afde3c955b8fee4412338b85efa47ce05f00604192e658b57d378727
- SSDEEP 96:KwZwbB3UTv8SS97IOwy+lyDWQFmcCa21CecV:K2w5+fS9N7+cSQVb21XcV
- TLSH T1128164D15C511734AE9ACBAE77F93F66CB7EC493204091DA75DD400D06FA2BB0607213
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
- Size 4KB
- SHA256 c35b7b148428826bf3b892ae531afdd7911f0cfff0322863d744c8fca664f50b
- MD5 69f059966639332ce6c47ca78be9017a
- SHA1 bede6c9c11ac373c894fdddf7ba6bcc495878196
- SHA512 d02dad2213d0148ea83ece5f11ad84a9b267824937a257464254f01bf79ec17d177033eaff40c7c05210774b674fe6595c24668edf21de37d468f213ad1db2b7
- SSDEEP 96:p43wZwbB3UTv8SS97IOwy+lyDWQFmcCa21CecV:p432w5+fS9N7+cSQVb21XcV
- TLSH T1FA8174D29C511734AE9AC7AB7BF53F66CBBEC493204091DA75DE400D06FA2BB0607213
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034~RFe5c520f.TMP
- Size 412B
- SHA256 51fee074685b0a2d1e07d44137c3da2e4389d57a7def03ab84f1cf3982f6b7b1
- MD5 67137d19dc8b07949c525fdd90d7017f
- SHA1 c13f7d9d642868c2ca750b942f457b15d080ce1c
- SHA512 ade535e0bec0f57f1bd2be2b062bf65740d77d723ce8d473618619dbc3edff5880becc92c6b3eb1d5c2e24570fbb24797c530efd9da7e53de0c42d5ae47e3f72
- TLSH T13FE0AB527C252214AF894BB533B97853CBBA4488A8C854E654EA901EA31915C4A1A3E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 8995bc3bbe2d25cd9231edd9324389626cee035614e07d3baec10d63a8330046
- MD5 f0207bded10087b21cf65f89c4f20c0e
- SHA1 554e6b9eb7a567882424795892fb7e88ba1ee7e0
- SHA512 47da42b0244475e4289d0f1170ad0ce0769ffda749d1f2d465196f260e645f38764f07cba0cf863f365f5f4f8157a8266d1a951874fb7844b1f39cae440fc817
- TLSH T1FB3112F3642253385E1A8BB57F78BADACBF280CE7C8491E3F418558D12C657E5402BE4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 fd84d851f6b1c02baa11e264277af14f78bdafdc9dcbbc6ab99bf43eaa350b45
- MD5 65c108e374838b40fa868ca9e4bfccff
- SHA1 c4712b39a56db519c1ce1b2a1e34ba380b46d371
- SHA512 f5d560224dbe72c1c35055f01b49b6b6bf3ab3ff70ff268ea14cfc0d2efae8fa972c8fbcf6d53027b1bec5a80436a790a95ef7364954d169a778fa8f36c75897
- TLSH T13721F3F3281253284E5AC7B2BF7CB999CBF3C8CA7484A0D7E918958C12C71BE54017E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 e3145bb0e635441ba127362662f029597bf5b0cf9bbf559452eca18ea572f72e
- MD5 60436e509a3a574a62e031ba546cae6e
- SHA1 67289e41dfa8eeae4fc7b7b3170dc306179b05c8
- SHA512 d6097f4b6be16dddf59dec47a713266b29e227ae82ed609ba2489c119c1d4d2239e9c3e7bab2bd6e5d0d479f93a6b82dc3816f543c6ce307b87b2810cd1a7375
- TLSH T18421CEF3181153384E1A8BB2BF3CB999CBF284CA7484A0D7E85C949C11D72BE54126E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 36a5aa94c280ef96718de7e9754f08d01b3400afa2312df47581bc93f159eb0e
- MD5 d5de4b1ef36a6dad2e8381ffa21a2f5b
- SHA1 924cd9dbdf83e6f4205cd146a813811a63d4f61d
- SHA512 fe421387954542afeb1086c35f336da71f90e6c404aca4ab71c5beb28e2a05514ec0d41f821bece02915a50128980e0478ed46e0857405c95a3ae46a2567d5b7
- TLSH T1BD21CEF3281143385E1AC7A5BF7CB999DAF384CA748491D3E418958C12CA2BE54126E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 a9f74611700cae4086828d0cdac62b86be7b81e5df744afb7b362ee03f264f5a
- MD5 ec6333df9f534b94b47befb6745b7822
- SHA1 3dbc8ee655a94f75f221d2fcf6b4955c91a915b1
- SHA512 25a2d7e1e7289ea399570181c05e3995d1cd5c69793476b56e633735bf7578ee8a3f72713188c30edccb7c0badd8332b19c3ecdeedacf6cef64401086617c065
- TLSH T1CF21CCF3181243385E2A8BB57F7CB999DBF3C4CA7884A0E3E458959D21CA2BE54117E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 554f98f4aa27ab0b42cc6b1c363cf25b9b066f25be3e97af4bb7ea0e18c7d4f3
- MD5 f8e191c286c40b49208c545acaaf9f27
- SHA1 a69c8d3ee6fe9110d521a72bb7aa47aca06ab8ef
- SHA512 f4e6d50dc628cb377da4569fb7d4592cc98249ce7ed9d96b02d909b7f8984e1707e831dfa0f161361ad90ce0089f36213d1d0c40b211c9f19020d36d3e7c2ea8
- TLSH T12F21ACF3281253385E2AC7A57F7CB999DAF2C0CA788490D3E458958D22C62BE54117E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 86780701a550ffafaa2ca777c341b627f55b04bd874140fe607ccf8d34c9e86f
- MD5 5386bdb813096bc345aa0b450e485fa8
- SHA1 aa13a1be211d5a39b44418fcf50b836ed62a0eb6
- SHA512 adfe432ea0960af1821fbcc0916115a419124486025f949f354eee7f2d9cf8a762d240fd3fb7d0b577939bb4903f579664892dbd5b360b6e27874c4ec01eeb3c
- TLSH T1C721EEF31C1253385F2ACBA57F7CB999DEF3C0CA788491D3E458958D21CA2BE54216E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 36420472a44f1f823ee4f66b16131753680b0a577d66d14b7fc3d167f4c22cd7
- MD5 1eab60c9a152151007cb1d3e65ea3379
- SHA1 bedfffe9e4cd481a470b5746fd9f5100a9e24559
- SHA512 39c1445eba4a655222fe312733a09fdf427c921bdd2561ba4b1da5cd77dff3ce96ba9a6be92b885d8fdddaf23bc92f6ff9f8c286598c636c62a216b274076e85
- TLSH T1AA3112F3681253385E1AC7B17F78B69ADAF280CA788451E3E41855CD22C61BE54127E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 474B
- SHA256 42ee4c5897392aafcc04bcc4aabdb7041963ac83c50b3a7270d856bf70fca4d7
- MD5 57b62bb01cded08b711c0e2ab7114035
- SHA1 4b604fd187dd89c951cbd9a010b82e4610320db1
- SHA512 2c2b6911d21b30b8a6477e7267717eef9665603ce224195c4934646ebebb48549179a4cf26b4d1dcafcd2281b9cfa6724dac8a0b465b111651f0008caf389f08
- TLSH T1BBF0DCE279427214BE0F4A71FF34AB23C2A344CB3488F0D18488200D12BB6BE600B790
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 b7f10d1c0b72df78386165dfa5b6108298d9f4b4680118fc2c4ac4807c6f4ca7
- MD5 fabc8e58a51a3a7c2066bf28fc46ae57
- SHA1 634b00c193cf44c8d74a5f0fc77edb2dbed88511
- SHA512 7dae7d03a2f24333beaec0fe6f5e16393812c2e59a79ba43dcd4b74dbb6b0a24ea962fd7e029775077dde792c33884403dfa07f4c9ed3ad1599dfddf1eabb07d
- TLSH T11B21E1F3241243284E5AC7A6FF7CB99EC7F3C4CA7884A0D7E918958C02C72BE54016E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 b470633edd9932902007f8749544398ee4ca5a1a980cea0f71cf9cef3e33fee6
- MD5 4602ab772ebed7f574b83679eba9aeac
- SHA1 bced8b25a649ae8f50d6349c461d28385c3b5540
- SHA512 7c986a4f71305ce39b5767959dd1e7ba4552acb9aafb8527fb21f4fd62a35e24726bc35e08023c53881e8da38f6b355dbcc7a266f7c698036711880141ba95ac
- TLSH T17621EEF3181243385E2ACBB5BF7CB99DDAF3C4CA788491D3E418958D12CA2BE54116E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 4eec97b74332ee6e5fca91523d3364bdbe227f1e60f22aecc337bea942516f0b
- MD5 38cc19a47b20c604aeb07210a3e2661d
- SHA1 88c480f0c6bade12e660ac58d82ec5f5e9b34867
- SHA512 474a06c5f50922570dd998aa9b41d6e0ed73ee503f9499e6edc7450660201ab9343a4b75a5dd620d1af1d4bd9007a826537350f0346aa0cd22cd458b1331a563
- TLSH T1E23135F3681153784E2AC7A17F7CB5DADEF280CA788491E3E41855CD22C65BE54127E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 5f6455e1ce11933205d90e369eb0c96f7a3aecfd1df647041709c29783d22670
- MD5 dd7b0937aedececdcb385f3a47f09dde
- SHA1 6c8e4c49ad77c2f345807140e86e5dd86dc9762f
- SHA512 9bc4ce9c979213d923e52249ea508902d82a191bc2190a3dc8527cabd55a959bd4b5bb0fe1a01414bd78a9eac3b1a76c68cbe905baefa39eb3f0ec926ad3057c
- TLSH T10B3112F26C1153384E1A87A17F78B99ADAF280CA788451E3E418548D21C657E94127A4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 9d894f8919748c70f41a3d0ac048075d0d67ec178ba30b2cb4b0c738cc7105d4
- MD5 dd672edf73e2a8b226b355d74c75580d
- SHA1 6569ba3a22cda1596540b9fe5a6ab564cc316bec
- SHA512 b50bfedf322033a2f6eae7e83254a219317e720d7018c1a9ffc40331759d33f72a18262d1b372e93a1f9196aff7061bad593c0f1019ca628f717ad17cb0400b9
- TLSH T1423132F3681153385E1A87B17F78BADADAF280CA7C8492E3E41C548D22D65BE54127E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 200B
- SHA256 d358d7f71ad84ee42380f7409897c13603f114a9981dab1e7e511874f95898c4
- MD5 fb22f1324f734de95385b43af4fbba97
- SHA1 ebb9dd673c7fd493dff6671d982c254c72af8fa6
- SHA512 63757db5508b640f5a9529bf358fdb7497b7e66378ce6c70f3be8b58eca6e2fd46dee394ee4879738f3e8263f0047fd9c5f71d23f600abf243a1c910ba2884f8
- TLSH T1F0D022B9B3C324109C0B14BAF4503B1A0DA204523885A6B01598328861268B0E20FD20
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 16332b9f41ee2e356a9d5da3deb726eda9574c79a5714ca95a39f275752f0972
- MD5 3d93dc81979e228f8df49ffd15c13a3f
- SHA1 d31c84770fffcd7c72413611b1bfd2c800345f8e
- SHA512 385974e774216527e85d87fc3db1366c660dd3aaddb9b33470247eba53959f485c2baafca629e9a66923f93709f4ef53bcf0215aa5a3e7b877373d48fc011c55
- TLSH T19821B1F3581253384E1ACBB5BF7CB99ADEF3C4CA788490D3E858959D11CA1BE54117E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 6c1cbafd2700a85b521bf66add6ed2139fc995995217da37ce0305a315e9c350
- MD5 b44b0e2ac0054b1ffde6f7dbb00fb8fb
- SHA1 610ead14995b9c04eb4ebf5d02b09a973aac0e34
- SHA512 aae5f2bec6fc469818e82b3c1977083f7ac8fa03cbb94cce13b2950c86683696468004791ab3a349d3e300851eb83fe95df8b5f39e1a431f1cad9a8922eeb37a
- TLSH T1223135F3681153385E1A87B57F78B6DEDAF280CA7C8491E3E41855CD12C617E54027A4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 381B
- SHA256 10c3dfc38416cc6df4070f26b02faa71f2e8750221d9d3cefc0fbc25746ec2df
- MD5 11be391d2848ac222c0adba27684fabb
- SHA1 4ab8c81c0b2dae73d05c5d6fc564469bc819fc73
- SHA512 6fde40dd62d097903c800914575c428a6aecf81e38def633d8499ed8f5a50e92c7afbc56df73df9772a91539f6a5819f5022d3522ca2d5f2f7a09e6fc70713e6
- TLSH T19AE0C0A2BE5631086C4B2EB6FB68A633D6A384CA7845B4D18896101D277367D610B710
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 84f5f026cf8fad73f47e1c8a76176e0f0fa9339a06510cd55ff04e25e5a6527b
- MD5 597419fe9fbe93956ff9f155a083291e
- SHA1 f6fd9e2a8b3b785c7ae84af62f45d47bc4b9f93e
- SHA512 313928d7cf1db956d5605ce4548f85448e01b6be2097fc12b79c042c17de82fb7018c83b0e9da32a45ddfff99fd84a6d26ef61687fa8c41e6a75d4f08aefc6da
- TLSH T13D21CEF3181147384F1A87B1BF7CB999DBF284CA788490D3E418959D12C62BE54117E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 572B
- SHA256 c3aaec933243fb4aacd6ac5df54cd2d010a731c86edd79daf835512b196b02da
- MD5 a054437eda19920381add02ef3af5ee8
- SHA1 9dae54b172c2d76824e1e097f18f80de8a84e010
- SHA512 3498b338eaa09662015be3e186f959e26f67e6a3b526bc7aa7a434d52933a68cb22677ced840300587cbfd17e94f2c9d035ab63b99682dd0ee144e1daa111f65
- TLSH T1E9F0EBE27D4262282E4B4A75FF6CBA07C3B384CA2844F0DA4888100D02F767E1003AE0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 662B
- SHA256 5271d621cdb56e110de791079a500169643b9850a9cac490928e8e2a1a5ae2ae
- MD5 6c43981cd84bc9b93ae6f1fa2c3583a0
- SHA1 ec2da0f20d9d1abc0927f7b6b6f0440128061344
- SHA512 c6a5f2e581655eca755ca8ffe9dd5727b3f008bbef8e6cb5978d7ba5d1a444274a5caeaeb83874cededb50527e145ec17c37af99588605fdc7e220922ec2d69d
- TLSH T12801DDE3794663245E0B8F79FF38B65BC3B784CA2444F1D28844101D11A79BE5403BA0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 96d1d5aab695f7fcd6268678a4909900bb177277a2ee4167cdaa4d0bdf9f4d1a
- MD5 349100d71a15c8540b911754a04e46f4
- SHA1 0e66ca17d14c1dbb2a532056d91e52946b45e00c
- SHA512 d41c9066b4fae86cf385376db4b2c9ed0970f01934fe1d0d997a1eef2e252a869c555aca2ddc85994a9465c75d7c3191735a25adfe1068cb496ad317f65d9b85
- TLSH T1383132F36C1153384E2A87A17F7CB6DAEEF280CA788491E3E418558D22C65BE54127E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 839B
- SHA256 0e2f1f3eb6b55de449e5dc161b0a0b888ad1e087a423d4db73b5f77916497472
- MD5 d57c4096705d86c956ef3042f6712e75
- SHA1 2ab97145cba14e1eed6a4d0c61224055f8d61773
- SHA512 58c0c80747addfde1a786be0972f7ca7af6f6e8bc1d1a782006ad715ae5b7a900d430f428bca089184ce5fd42f6b1623a62698dbf0f1fa3e1a03de03b617cbc8
- TLSH T1ED01C2F3280257249E0A4BB6FF38B59AC2F7C4CA7840A0E68948555D019B5BE15056F0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 749B
- SHA256 71470501345bd0f61f91742213a2549b8a4ca660bb48a491f79187e126b4b43f
- MD5 24c452ee686bfc93ac501c98e469680a
- SHA1 05a3df694b1dddcd3511596c061360c4aa6b3bd4
- SHA512 2afecd93f9bb8dd48f2fc0cd37b3021ca92e4626b6a9abc8f361d0301e2adf2c1be5e8b3b4c8d93e7a13197a8a4d2bc39dea5ab4f2b95d3b026dc140638e435e
- TLSH T1EF019CE2784253185E4A8B75FF78B65BC6A7C8CA6844F0E68448555D01DB6BE14067A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 60356c3c8c44a64e88bfb1bccd87bdc0403b135b19149c5abbda3a38d1daa5d2
- MD5 65a05edd26cf7635c9a7ea6d336e2c0e
- SHA1 e59c739aad8c2a30744271512b4d1cb0a30c63fe
- SHA512 0fc9d3760fb8e3b9a5592a1f11862d88265501fb80a8ffc9a7ee5740b10e66ddd4ae953986c077178ef56d59f6477b43dbbed29707431476fd94ac5dca6b03e9
- TLSH T12A210DF7640203245E178BB2FF38B9DAC3B7C8CA784090E6E90C945C01CB2BE54023E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 bbd7a7ffcadb700ea303988f1e01d3eafa2de0605523678f1706aab4c951d0ef
- MD5 5a1fc9a53a19bae0c50d1c7d43d0f841
- SHA1 d1e92d45360613fc09e8f537cbe96c3e94e367f9
- SHA512 d13b64f892bfcb2560a6357d3ee229592213921ec6168506dd5973a22c5a9e34382b126d7ff6f57cf5661035d8d03ad2ce0bebaa312c659eb8423a21ef413ca6
- TLSH T14621E1F3181147284E1ACBB2BF3CB999CBF3C8CA788490D7E818948C11D72BE44017E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 99f1d7e5d62791afc6f992df9e884069e56cda34c7983503804371b6c28e91e8
- MD5 121395666d4191881a73f4feb93889ad
- SHA1 e6449a9053b492eaa6be9bb193935bd9edd8513a
- SHA512 d76048a4d728f63fd351db155c0d74bd6b47cda7184980e714a717ba23df0d875d34a5d8ab11d2275a94bab7684d0f074c0fcca196c692079848c3acf78feeb0
- TLSH T1F83132F3681153385E1A87A57F78BADADBF2C0CEBC8491E3E41895CD12C62BE54027E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 99cc7f0de9ca5a5bd3d4984a71bc66f9af1469465a115d97491a7b986250ee96
- MD5 69a4a1ee80ac074816a8c5316707a59d
- SHA1 b017cb32b76ba0a2e582aeb4d09e7828b21f9f5d
- SHA512 8a8714206be499ed939d9531f44783ee02e94fc0af4a7c368c4dd7dd3c26c655ea6797d29f685c99831c57f5158118be26b63a6f19c2135e6a9ff251ff2fd6cd
- TLSH T10A31F2F2681153385E1A87A17F74BADACAF680CE788451E3E418558D12CA5BE5402BA4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 b10a10ed697a15eb178909c871eee4c0dabc37d3e511e2fecc010c41517d3f55
- MD5 15950465db4a42af016ba2d2180b3fbe
- SHA1 ff33d6e9f46e668b92aa71c1f1567abe063667e6
- SHA512 5f6ae42d537f707ca3571e4c9cf4fe5d113e566b5cf01a2492f59e57f682f72df522770c226ac8e831f2260653f06fd51e849a63a92869d6460d5be1b513a721
- TLSH T10911C2F6141207284E1687B6FF28B99AC7B3C8CA7844A1E7D94C944D11CB67E54067A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 935B
- SHA256 3ebe7425a0ca67ba5f0d96ea577c3767b9d0f56736d1ce2ad7778a54629859d0
- MD5 2c4ba4c8a2b4bf83f7c88cb1cfa4f66a
- SHA1 7ac2cbc15c802631f66f32cd0b9f002aaf2823de
- SHA512 6602d4a12b9e6e466316f24ffa4ccf2b76393dbc56bbeae6f0b5c6cdfea910e938bdefe5e525984b6d96e85c1a4bae64177f3abb767b8cbfb4e9fde9129ab9bc
- TLSH T1E611DCE3681253284E0A87B6FE38B5AAC2F7C8CA7840E1E6D908548D01D72BE14067A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 5f17337a06ee6d7a5825dad24f43468f408edde2343d215a8943b7c18bcd6ed4
- MD5 795713d4ca436583f76f682d090a8cbc
- SHA1 6bb6350e0556f85946cdf0864561bfacd4a613c9
- SHA512 3d42f61eafc1fc92bb191bece7ebc538fb736942e814bd65f98348d2711d0aad059471b560e4de7a5846663c1cb64063628b311f38aae911df9aa92bd50aaaff
- TLSH T1FA3142F36C2143385E2AC7A17F7CB5DAEFF280C6788491E3E018558E22C617E50127A4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 ae2f0d146d7b3d58676ab43b57ec5536189b8ca960aa624fd49daa0f7cd91f40
- MD5 2fc7704c7b747504abc983dd540c7528
- SHA1 d5c6d425dc879bdd21a1c6b4aadf04d4215f3298
- SHA512 8e7fbb2f0b6ce864070e47eaa6afb221d055159d3238c4a89b42a54dfc90faf70c73a27f726a9dc0ab3974e95e0e2fc241a27f376a86829ba78fb94f21a08c7e
- TLSH T1DB3112F3682153385E1B87B17F78B6DADAF280CA7C8491E3E41855CD12C66BE54027A4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 e3899c199b51cff7e6c7b34d5ebda563e8756dd088bd9e4ce22e393d551a9aa2
- MD5 ff01807e42ff5c0973cdba23fbd531a8
- SHA1 ea796151ea5c4c92751430df7330a4e954c6a9e6
- SHA512 0e3c5c0059a4bf6f3cdbad35f02d728b05c624d56f33dcb4328efe1b57d657c8372e233c0dcc0a2d0116d9568fed9698eafccd02f6548a4e6e1401e5b3e6d846
- TLSH T1C821DDF7641253280E1687A6FF3CB999C6B7C8CA7484A1D7E908C49C11CB2BE54016E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 6630014d473090ea25345d77224fe54d3542d72d4eaf78d37d628f4d8ebe1ba7
- MD5 0bf893cdff4ef703d1b6c720b6a8ac72
- SHA1 5e9ea271b5d42e653d4818e1ccbc9841b3e55961
- SHA512 4b6449d0c1856f668d7955ee8cfd8229ca93031a9fd5a6a8bc218d70039cf180b14e31b2f0389bb5b9fe039d2edcbf98112d48bd35b963edfad2bb2e570e9098
- TLSH T1463144F35811533D5E1BC7A17FB4BA99C6F280CEB88491E3E45C558D02D667F44027A4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
- Size 1KB
- SHA256 af5c765254d8e05a164f7317107bdf768b35c2f815561fb40713f40a856dc90e
- MD5 213605868b4081d7a8b988523cc6413b
- SHA1 940ca09ff1869bd12229c2df9e1554f14e8c000b
- SHA512 72df5f3f1345178e26e45afd4cdac1c5631c3b2908e2a138c317f7feb4ebc49a0db84acceb1506e6273bf205b6eb7e20813838a6be28a2b27108f0385870a776
- TLSH T1313114F3541153385E1687A17FB8BB9AC6F280CE784491E3E458558D11D657E94027B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296~RFe5c578e.TMP
- Size 171B
- SHA256 ec1719853c89a489adb35304f23edd536e7deb571034b182f087b463500f94a6
- MD5 0c36c237f44352307a449e4e9b036807
- SHA1 bbef1413d98e085d3063820349971f2e6d96f74d
- SHA512 9fedeb2ed30d413c5e081cbb6a5942d7db6a5dd7a8c83ae80d2891dfc2071b30fcfc60bd9962ec2b882e6271600cccd34f14eabfdd004ffad9becd56d9601f30
- TLSH T1BDC08025F59379144C0715B9FC2D7F165B4E541B1581D140058412CD165EC7C911F954
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json
- Size 649KB
- SHA256 5e402dc32589de2419a8880117bd538493f6d4ceb02e148665e7910fc8798d5a
- MD5 dc9521f471d6add692549ba76110e9a0
- SHA1 2ff323a65b7ce5ab7837f54c332e9a0250d42f5f
- SHA512 3cbe78771e05607f7027fd4dd5a5425fbc573970ef4a8755e29936c97e031d9de3ec0271126068a83e91305944cec7a8a5d4e3deaa5424f1249a378053cde3f1
- SSDEEP 12288:0hcyioFgVS7CQlBLGil4S51cuM36Td+blVSiYiWKmcm03TgD7uDmhEZmPfQUJd/1:4Xx6uF
- TLSH T1FFE4A8AB868C2CBB5F8136D560CBBA5940C2701FAE8D7E99E780CC4CD2A55673B7C117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 e624013dee01be427c43486050c6c39c5fae400cac7e11e18af6b1c5328642ad
- MD5 b70c85dcaa2d530dc48c24492a050839
- SHA1 86c02daa0cd1d3793b8dcc1c6c8fa4008743c8e0
- SHA512 d66f8a97dfe4a66c297da071c5b5a8fa5e43960125b0cc671231be62f38d0b2aa69cd7c642a3976f8567aab5db6298b8d19870ab3dd2c817da396895c021cdf7
- SSDEEP 96:IcBnNpCWhxZAXfuYZmDotonYQlokRZH+itAvBnvmjc5ya:Ict6wxZ+ADURIKP5R
- TLSH T160B1A6F5951ACA579DFB8B5BB6057682DFB52106C2411DC445DB2E0C14EF49C3406C6F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 0d947655267491d3a6569ef8babd7c7b5a55bdce7bc94b2a9ed0f17fe2aa83c8
- MD5 af07c0a3bb816dde1e9a5e7cd6c65144
- SHA1 0a2a465689c748f6e423c324dcd3a85e427edeee
- SHA512 ed7925249649cc76dcb969d6e5d3c12a94ffc178b2d28c069bb1e5a0fd887af24938c297dec1c95eca2f9f6c4cf5652f845a8b0d3fa34eb4610bcd45f5e38636
- SSDEEP 96:IcBnNpCWhxZAXfuYZmDotonYQ7+QMokRZH+itAvBnvmjc5ya:Ict6wxZ+ADURO+QQKP5R
- TLSH T1F6B1C6B5991ACA579DFB8B5BB6053643DF762102C2411EC846EB2E0C24EF49C3506C6F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 3KB
- SHA256 69dbd4775e25e6ff8a8cdb047e52217ac59b706251044da82bec49a203ec2bf7
- MD5 90eec6f80717e15b3f353ac446a53111
- SHA1 ee431d38ff7f62e5073888438c9c6b6eb760023d
- SHA512 0903bc7efe8169667f7b3179c3cbfcaaaeced742a4c94bd5686d78f4ceeccdb577440d94f89a740b6f4b9ac07eb940b28e4a89920cbc39bdd2c7752f93eb6f25
- TLSH T1E261FBF05C64CA675AB69B1EB9423F43BF721117E6402EDC92DD0E0C28E756C1762C27
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 6KB
- SHA256 ee03498f53a3f0605387bfed2134c21b60c89521f00891cd31f6e85db1ee6f7c
- MD5 06cc867e9953d6f7e553b474c7af99dc
- SHA1 d21c4591f9444857b1c5a4a948bd63afb4e9c189
- SHA512 37e5f95064a08ce21b382c3d9cd0b6354667bf9a7ce34a39ab13dd005627ba131b688e6044832c82fbe3eaf8f5185a44d24e0f23a74df118d9c38dfdb59f1768
- SSDEEP 96:IcBnNpCWhfMuIN7mkvP94k31AhAZAXfuYZmDotonYQ7+QMokRZH+itFvBnvmFc5R:Ict6wDQikH94kShAZ+ADURO+QQdZ5R
- TLSH T19BE13AB6A55ACA5399FF8B5BA3497943CF762102C2801DC456EB1E0C10EF4DC350AC6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 3KB
- SHA256 1b99c22ae880ffb25dc6536bc5ce5fb75e16a30056c00b09b96f96fc618e5acb
- MD5 c6b01da51888132e2b8081fa255ae020
- SHA1 e0f67b52e8c1f5231ca33be98f104cd1c5920e03
- SHA512 3c4847b6672f6d8b6aee4e9b323bbd047ec0f914ca3a822a0beffa1405f7115ff1b7c181ae9858ffbee1bdfdd119f6b80393e8fdd205cdc60946ef30c8312170
- TLSH T17B61FBF05C64CA675AB69B1EB9423F43BF721117E6402EDC92DD0E0C28E75AC1762C27
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 3KB
- SHA256 51abb270d0f4016c9ce9a32bd540b3e1e2d48293996c0e83632ced3ae55fc71d
- MD5 b91085de5c95cf1b0a45f415e47eac8c
- SHA1 96dab473abc8280210ee9426695b7dc5ae0e06df
- SHA512 572e7d29f1a47ed423109572d54e1fb511773b9d425d0630c9f21a79188b3ba8d03753c7122c692f4bf5783c3403e168441a84ec61eb623cce52afa99f822586
- TLSH T1F561FBF05C64CA675AB69B1EB9423F43BF721117E6402EDC92DD0E0C28E756C1762C27
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MEIPreload\1.1.0.3\preloaded_data.pb
- Size 8KB
- SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
- MD5 a01c788456b7771739d0c770da676ea8
- SHA1 23b67e6618949c08a0a214d920fbc9779bf89377
- SHA512 9846efd14ec46154b7b80b89e08b30bc8f82ca1b11bfaf19ebd4f1f32b3f44fbac8ea8c33203070c4414cbab9d727d2ccc4f1f733b64cbea880c0b516a16a8a1
- SSDEEP 192:/8bnweeDe4NkGNXDsyEsR6R6Oh/CU3y5M1ZJ8jmmOd:/8bnsa46GN1eRv/RR7J8jmmOd
- TLSH T1EA029F068E4B3E4F0D1A964D49863F56373B216751C54C8CFF9B992A4069761B0AC89D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\Google.Widevine.CDM.dll
- Size 2.7MB
- SHA256 cb190e7d1b002a3050705580dd51eba895a19eb09620bdd48d63085d5d88031e
- MD5 477c17b6448695110b4d227664aa3c48
- SHA1 949ff1136e0971a0176f6adea8adcc0dd6030f22
- SHA512 1e267b01a78be40e7a02612b331b1d9291da8e4330dea10bf786acbc69f25e0baece45fb3bafe1f4389f420ebaa62373e4f035a45e34eada6f72c7c61d2302ed
- SSDEEP 49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
- TLSH T1A8D59E03D68300C9F459C8B5D7A6A536D5703D4A4704EBEB9B60B7762E73FA09B3A309
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\_metadata\verified_contents.json
- Size 1KB
- SHA256 43daa4139d3ed90f4b4635bd4d32346eb8e8528d0d5332052fcda8f7860db729
- MD5 3e839ba4da1ffce29a543c5756a19bdf
- SHA1 d8d84ac06c3ba27ccef221c6f188042b741d2b91
- SHA512 19b085a9cfec4d6f1b87cc6bbeeb6578f9cba014704d05c9114cfb0a33b2e7729ac67499048cb33823c884517cbbdc24aa0748a9bb65e9c67714e6116365f1ab
- TLSH T123312BF9B981F25B79163611A1B66C31770FB0E238A0B05169C865EECEC4B03E0B3007
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Opera Add-ons Downloads\akcocjjpkmlniicdeemdceeajlmoabhg_26357.crx
- Size 1.6MB
- SHA256 75b4bfdee44a9d9745a1aeb48fdf8728767db078b528915b27ac94e2027289fe
- MD5 dde6260bdfcaafec07363c4b3c67fc4e
- SHA1 ab66f175b58b81d5551e355a6b98aa6901ee6684
- SHA512 7a3d3fb165c3c721f83e8acc97ef5da4352c732df72dd3c316c85a3d1eca8a7f693d85e98b24eaebbe409511ceb87ca69f336626c081309e086adde306aa12e8
- SSDEEP 24576:Ebt+3h8cN3c0xZis92eMaKS9oexpAB+SooqIwN6g3T+TmAPad5UhVOimgBX:Eqh8oks9rMKmKpAUNNID0T+SAyrRip
- TLSH T1407533BA2ADB9E09F0D638774D94735BF5198B99491A381F79351C0867B0BB80301EEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1639\crs.pb
- Size 313KB
- SHA256 17086e62df27938f626b008f1691aac29629252533561a3fbb4513eb9878961e
- MD5 3cdd0a09161591fede6e1392abfbb480
- SHA1 2df2b1270b7b9fd55383fbe23d9f983d446070f8
- SHA512 fc5cfccc2bb5f3206d31a015516bc2234b608eaca17b176487599091896cbb58f6dda80046ead392fbccf724ccc3e6fd76a9d1dcf108fc913bda178c2c52e78d
- SSDEEP 6144:JHJ2WprYUbVmFVk6wpnnoTBfStk06xrWtefZhzSVs3LowNZFeO:32WprO4hn6StaBOs3kUeO
- TLSH T1AC648DDE0F387C43AFC2DE54B1C8D53BBDB576D17A9A54829049C4F269827E17E8802E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1639\ct_config.pb
- Size 54KB
- SHA256 49bedaa545c1f71b7db3787a0043b8e599923034569b54a10401fe75f77c7476
- MD5 cda06d8a4000654880728234d6bfd0e9
- SHA1 6970ec8b14341065b1c56ae89a6f7ad4902004b8
- SHA512 01bf0aaa05bcda8b06cd5c0752ea7fbb96b248a067c450a011daeed28e3e98eefbe41ec85d0b0bcf86e98f73ad5f4a6ee33935676a1d823229bc8dcbd9e3ca2e
- SSDEEP 1536:59Myh3zp3nuriS67OM/TV5T1RthGPcP1egYWR:MtWLVd1keV
- TLSH T1CB438EBBB5148B011B83D119B4DD2BDA9213B3D98CF3D93EB0D19005F6812B771AEA76
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1639\kp_pinslist.pb
- Size 10KB
- SHA256 83217837be3107187568f9fc743d7f529415786d2459b6dd125d52979f8bb802
- MD5 786c3a7af9ec4506b79d366b02f7030f
- SHA1 743414edb46c2b846b084b1130f28a2c09c889c4
- SHA512 aa23b8cc07f79be4be228ce009952b227784f10100d44a843a90d654072a5991cfa010d9f1b73667f4aa068aa2c7c5235a1d3e1628237d54cdd3d7367e155fca
- SSDEEP 96:bxk+yBjecaikDBwrXnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:G1IDCrXnYQ5jlMacFwn2c9w
- TLSH T1202204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\SafetyTips\3091\safety_tips.pb
- Size 180KB
- SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
- MD5 ed136d4c105cc252f52bceed4b36ee35
- SHA1 2a3115d95987d638d9095af51f0a70c1e9893728
- SHA512 7b7cfc3adf944628b0ef6224229f7def0543cb7d41cdc8bb6b2ad5be2338a0173fbe63490f8d742f4c006e88652d191e24b4933e459f03cea2570085b95297b9
- SSDEEP 3072:2LHCaFAH1Z2dUZ7ViebPO8B6wAppi+NKfDRdwt20xrFzg7NCmDAsf6B9D:7lVAdkXPOaRdwtzre7NChsf6B9D
- TLSH T11A043C49F84703A06F0780C99BAD62972104B2F47395CDDFB77FB6A56E00C9B20995BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
- Size 151B
- SHA256 922d5ff48b25e3cbc25a702bbdc492aa1b2fe223021d40140351753470c516b2
- MD5 910c1584e3fb737526aedc5d740bd8f8
- SHA1 32ca2a465ee4539ea452c0d45d7cdf86fb535c15
- SHA512 a530fb403b272730ce5323ced5ff868836121a4b9709ab4afaf78d00da38ed1773ed34d9708eea332ae2f8bba576ecb3bd0e715fd696f47317f60f60715672e6
- TLSH T18AC08C0A5697051BC8E7078438647AB88AB5320AC5EBAC2222D43B0C4AC421210A1C60
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 572B
- SHA256 ddda121cef0c0e0c268894d64721d3fea47b3fe9cf180f5e0cdbdb209e1fa5fb
- MD5 cfa47654f53f9af20a4881920daba3e1
- SHA1 9ec0afa7cb9e0b3ba3c9ed4fdc44f85903c15b83
- SHA512 2932f172313bf87c58cb768e879669754aefbbd57475cc22767991c0ffbd3c67145839e2452b93051e41b838ffdddfaea1fd197af22511e56daf4b1c5135469d
- TLSH T1E8F0E1D6044E16C15F0E1A1F80F970B9D9E136097FB1A43834656084073B56B3440C6D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 236B
- SHA256 fe2d20b3c73cc19f7763df6e9993ab5035ff8e9d8865666b7e71dbb158fdc054
- MD5 254c8084376673ba84601d63b17f9bb4
- SHA1 4f92514b279955e6250c342e5c26bbf63389c699
- SHA512 cf30133960b27d7fc4d8022e4ceb16c4e0113ae65a047d6dcaf45bd92346e8e20fcdc9345b37003601de4a3f2c6edd47144b5bb6b950e0de929734218a8d7fca
- TLSH T11ED097E7008E06808D1E4E2F60A9383A906662126EA4A0BA042A30004735AEE16D081C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 124B
- SHA256 89f98a8f89156c65a869f39eb4935e7e1977c882a47c2d21269652a2090445b9
- MD5 75011931f176dd8aaa69d10595e2d15d
- SHA1 d0a0acabcac61c32145e398f29c103f1cddea350
- SHA512 604d12a6799000905e5bcfe10c884e8bc492125a1aeb313a515c32536aaf5d1ff41328d0b5aab7a1d4ef7c4b77f67ec35ca81bad70766d0f021b94ea2772915d
- TLSH T1E6B02BA0100E01904E1D8A5900BD241A4142050028A8C0D004052010433AE5E59C002D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 460B
- SHA256 30bf6d32a32daa929cdfd252c3ded29939e61e995345449a5ec289ef71e5439a
- MD5 4ef6a75e00f91e151eca825890436342
- SHA1 78927b00fa47db711cd63d33440d62ed5b189860
- SHA512 acdfc59ed893b2a16df7c6948c271a5ea4aca8cb8e415468bd2c4c0641b0a645cc5b6076deb10439a361d1156c38e7823f3c4adc2265162435893ae09b3bec7e
- TLSH T119F0D497008E09C15A0E591E94B570F9E5A13A09BE71943820556080073656B3480D7E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 684B
- SHA256 702a68704c08342278aa7168d0a6240a557393b52150566bab0cfa9d38b2e9b7
- MD5 b478a78f611b0510547a05f4351c606b
- SHA1 f03ac6de7108cefd120d8a92f65c85772ec0f25f
- SHA512 b525ceeb7a3b6777c6b67fdd903557d49657e91b72e2e0015f51408b97d1091ee76ebbb24aba6a80a63d3ca3bd175076b4bd6932f008909b7dfd3b52d3abb522
- TLSH T1BA01FED7845E0ACA1A4E191FD0A530EDEAA27609BFB0B43975766140033A56A3440C7D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 796B
- SHA256 05bfa7519679a0c99d701f654adeeeff32347a4064eec1398dacc4bd0cb9d12f
- MD5 0e1b449a84ec2861204d015550b2a4d8
- SHA1 3353991ae18be1b477e14a8d9343635d027b3d22
- SHA512 b492f1df02fc97c6a9eda5197ce00ea343823f16dbb2351d316fbc25bda2c9e93f4d0c774a40caac08b90b38da7250084a5342575645fe677422295073713aad
- TLSH T1320125D3854F0AC94A4A191FD4A670DDD9A27549FFB0B43D71666140073A99F3441C7D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 908B
- SHA256 b6a94010ba69852dda6839eb800a02d4d27743dc7f12910fc4843e69eb3b8163
- MD5 204207435376d9ffadedacc0992777cd
- SHA1 d9bd2129ee5fb938ff94228784cb4cf58c4a9866
- SHA512 5e7bf7c34ffd22dcc25ce6d741e197ef247869291919d176a2f651f7e38540373bc24d115a98d32024675c3e01a866e5ec2c3a8bdc017156c95cc86a3faf6b69
- TLSH T1751127D3854F0BC90B461D0F85A630DDDA667544FFB1B47C65A66140073E56F3451C7D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 348B
- SHA256 8e3ab2c705935cc17c8c3e79f5a7bb307385163bea434315bfc6742251fc8294
- MD5 f55707f9ad5a2bc541c2427798af7d9a
- SHA1 2c4fea3af417a7e8926c0151fd4d02f6247f228b
- SHA512 285f39c1a15451b60589eab9c8d6e01286a602450599c5b8d7651bbd8bcc53760477f1bdd1c7a0af84e6692d2d5780dd14079db2597c1ff13fa9aaa15552341b
- TLSH T1BBE0C0A7008E1A854E0E5E1EA06670B9C1912715AD70E1395416700043385AB11C0CBD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Downloads\OperaSetup.exe.crdownload
- Size 3.1MB
- SHA256 da94f0c6bb433e63e4f6ac5510ca3430c011d83a4e22832fb824ab184714572f
- MD5 52059ff9cc18c7b0da7cddf7bd9fc4aa
- SHA1 51da1ac745ed906e4b21f668ca0d304dd4bcbf2f
- SHA512 5ae07fae4b92499e1d60abedca38e555fb89371d24c2cd3246fec4544ea1924b10ca3db85524cb207fd605a2d702b1bf0d0e7f32a92a2c7a0e685b8f708c7a85
- SSDEEP 98304:uAkUMb+1JahwkyV4L+3/1mIIE0/BfWLtX52PMmxEF:1MyJahwLVR3/bIE2BStmMIS
- TLSH T14FE52392B741C836D97312330F5AE765A57DF9A10E228A4733D86A3F8FB01815A35F1B
- MD5 SHA1 SHA512 SSDEEP TLSH