Analysis
- user interaction
yes - max time kernel
25s - max time network
31s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
23/06/2026, 03:28
Static task
static1
Behavioral task
behavioral1
Sample
OperaGXSetup.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
OperaGXSetup.exe
Resource
win11-20260513-en
General
- Target OperaGXSetup.exe
- Size 3.9MB
- Sample260623-d1m6lsav3x
- SHA256 63af216c0b4db37cefdba79a12a1a74b14721fcaa13f5d3becb262931c90941f
- MD5 1a1afda7332d5f691b4ae70f305eae32
- SHA1 82b0ac1cbad16d03d94346b28360bc1a4b9fcda6
- SHA512 002be0669872d1eaf1ddb7bcb73c601791e3dbff8d4da79dd29219ed845ba1adce9b3a140d37b9c53e0edf312008212d115feb9a75551bb50191d70701568279
- SSDEEP 98304:oAt66rXL7zI6Ngg4CXLXCOPktgyLqYfDiRBJqTN7T8djru5:K+XzI6NN2DtgylWRyN4jru5
- TLSH T135163323BBC5E0B6E6A321314F6CE3AD52BEF4715E610A8763880E8D8E711516731F57
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 10 IoCs
pid Process 4560 installer.exe 3684 installer.exe 3912 installer.exe 1472 Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe 1940 assistant_installer.exe 4608 assistant_installer.exe 4784 installer.exe 2404 installer.exe 5836 installer.exe 5528 installer.exe - Loads dropped DLL 4 IoCs
pid Process 1940 assistant_installer.exe 1940 assistant_installer.exe 4608 assistant_installer.exe 4608 assistant_installer.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe - System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaGXSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe - System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 21 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 3640 opera.exe 5268 opera.exe 5676 opera.exe 5456 opera.exe 5448 opera.exe 3240 opera.exe 4880 opera.exe 992 opera.exe 5476 opera.exe 4460 opera.exe 3812 opera.exe 6056 opera.exe 5404 opera.exe 5400 opera.exe 5416 opera.exe 3164 opera.exe 1820 opera.exe 5428 opera.exe 2532 opera.exe 3616 opera.exe 1048 opera.exe - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 3240 opera.exe - Enumerates system info in registry 2 TTPs 8 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe - Modifies registry class 45 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\FriendlyTypeName = "Opera GX Web Document" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.opdownload\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.xhtml installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32 installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.opdownload installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.html\OpenWithProgids\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.shtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Applications\opera.exe\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\CLSID installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\DefaultIcon installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\shell\open\ddeexec\Application installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.xhtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F} installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\132.0.5905.43\\notification_helper.exe\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\shell installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\shell\open\ddeexec\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.gxanimations\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Applications\opera.exe\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.gxanimations\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.gxanimations installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.xht installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\132.0.5905.43\\notification_helper.exe" installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\shell\open\ddeexec installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.htm\OpenWithProgids\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Applications installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe,0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.shtml installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.xht\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.xht\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Applications\opera.exe installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\URL Protocol installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\shell\open\ddeexec\Application\ installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.pdf\OpenWithProgids\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.xhtml\OpenWithProgIDs installer.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4560 installer.exe - Suspicious use of WriteProcessMemory 10 IoCs
description pid Process procid_target PID 5132 wrote to memory of 4560 5132 OperaGXSetup.exe 80 PID 4560 wrote to memory of 3684 4560 installer.exe 81 PID 4560 wrote to memory of 3912 4560 installer.exe 82 PID 4560 wrote to memory of 1472 4560 installer.exe 83 PID 4560 wrote to memory of 1940 4560 installer.exe 84 PID 1940 wrote to memory of 4608 1940 assistant_installer.exe 85 PID 4560 wrote to memory of 4784 4560 installer.exe 86 PID 4784 wrote to memory of 2404 4784 installer.exe 87 PID 4784 wrote to memory of 5836 4784 installer.exe 88 PID 5836 wrote to memory of 5528 5836 installer.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"C:\Users\Admin\AppData\Local\Temp\OperaGXSetup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5132 -
C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe --server-tracking-blob=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⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies system certificate store
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4560 -
C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.82 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff711e77e08,0x7ff711e77e14,0x7ff711e77e203⤵
- Executes dropped EXE
PID:3684
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\installer.exe" --version3⤵
- Executes dropped EXE
PID:3912
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:1472
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe" --version3⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1940 -
C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x5b4b80,0x5b4b8c,0x5b4b984⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4608
-
-
-
C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=4560 --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461" --session-guid=84a6a5ac-7faa-4c51-82c5-6442b88d5714 --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=DC0A0000000000003⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4784 -
C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.82 --initial-client-data=0x280,0x284,0x294,0x25c,0x298,0x7ff711e77e08,0x7ff711e77e14,0x7ff711e77e204⤵
- Executes dropped EXE
PID:2404
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe" --backend --initial-pid=4560 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461" --session-guid=84a6a5ac-7faa-4c51-82c5-6442b88d5714 --server-tracking-blob="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 " --desktopshortcut=1 --install-subfolder=132.0.5905.434⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:5836 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x290,0x294,0x298,0x268,0x29c,0x7ff67a717e08,0x7ff67a717e14,0x7ff67a717e205⤵
- Executes dropped EXE
PID:5528
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=05⤵PID:2144
-
C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0x5b4b80,0x5b4b8c,0x5b4b986⤵PID:5004
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=06⤵PID:776
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xcb4b80,0xcb4b8c,0xcb4b987⤵PID:2664
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"7⤵PID:5860
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream8⤵PID:4160
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe750109⤵PID:4788
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream8⤵PID:4852
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0xd4,0x14c,0x150,0x9c,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe750109⤵PID:5588
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x27c,0x280,0x284,0x244,0x288,0x10a8378,0x10a8384,0x10a83908⤵PID:492
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream9⤵PID:3488
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe7501010⤵PID:5896
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream9⤵PID:5608
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe7501010⤵PID:4448
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream9⤵PID:5124
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe7501010⤵PID:6072
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized5⤵PID:5696
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.43 --initial-client-data=0x148,0x14c,0x150,0x144,0x154,0x7ffaabe74ff0,0x7ffaabe75000,0x7ffaabe750106⤵PID:4924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1640,i,8993627367232673981,11543657407782905932,262144 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1792 /prefetch:26⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:4460
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2064,i,2655348859636063053,4467379446410923099,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2076 /prefetch:116⤵
- System Network Configuration Discovery: Internet Connection Discovery
- System Time Discovery
PID:3240
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2212,i,297080557749798858,16659305916527387961,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2292 /prefetch:136⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:3164
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3128,i,15373258652558217215,4237597177144582369,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3248 /prefetch:146⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:3640
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3136,i,8595241319898072126,11410858272136721491,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3276 /prefetch:146⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6056
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3156,i,15106088675388162070,8675559594650180861,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3280 /prefetch:146⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:3812
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3168,i,8524487683043301892,5793057734730027703,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3268 /prefetch:146⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:1048
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3188,i,18034038163551000452,11913295473106825169,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3332 /prefetch:146⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:4880
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3204,i,5966198471521200027,17582180273260542956,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3352 /prefetch:146⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:3616
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3492,i,5106335504217840116,4244966354046913208,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4008 /prefetch:16⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:2532
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB1476⤵PID:5364
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4576,i,12916548107871398427,6427874188774069070,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4580 /prefetch:16⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5268
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4792,i,17499636025004455708,15942871234988600403,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4836 /prefetch:96⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5404
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4964,i,10570030341720201932,1649952452170422821,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4972 /prefetch:16⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5476
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5096,i,4091301863062053847,14831237959719990839,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5216 /prefetch:16⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5448
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5332,i,16297072617421905146,6232753859933839675,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5352 /prefetch:146⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5416
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5288,i,1875724078422381166,7279228930996320797,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5356 /prefetch:146⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5428
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5340,i,6816492601045803028,10099154739537298084,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5364 /prefetch:146⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5400
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5344,i,11554875365595526701,12415383233471934370,524288 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5336 /prefetch:146⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5456
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6124,i,5220145943216656677,17887154199533448128,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6372 /prefetch:96⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5676
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6612,i,11627629176435846554,17189352608913295123,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6688 /prefetch:96⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:1820
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6904,i,3636689601819575003,13317825880403402241,2097152 --field-trial-handle=1796,i,10430044025785520432,14589754892543081976,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1800,i,1045494877885766732,14654403265999188513,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6940 /prefetch:96⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:992
-
-
-
-
-
Network
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\132.0.5905.43.manifest
- Size 225B
- SHA256 0eb93f246ca9ae50ab6056af4cc5746fe244ec4ccdb38175b2eb2e80286a27c7
- MD5 fbfb8e309126c86f6f285db04e48f5aa
- SHA1 5c01568eabbdc11887a7e313d780570984d872c0
- SHA512 3fac77b27c753f7d06ca94439a8aeb22db03a910781777cd5ebae211de6f86a8ad01aba1e116c4e199b521008496a47c7b87349b9c1ccd62275a6c7095468951
- TLSH T13FD0A905C48522196B2191203CAA38014118C76706DC68CC70FC7867EFF39A4E582AB2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-100.png
- Size 2KB
- SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
- MD5 b5a21b88b3d8a42df265817ebeb742bb
- SHA1 e0be32b4fc158db4e9783094cce614922114b742
- SHA512 21ece0dcf17b038400d09565438fce8be61746daa0250f2fa9d0526bba3d1ce6f8da5cce944ef8fa685c5eb6cf857b073d2a50ada44a44a76d84813871faa5d0
- TLSH T133415CCC56657CC8CCE065760A67A72C5FD3AFAF0A335B7A6010089ED99F1453803ACC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
- MD5 0bae0648c3e320c4d439f158b4fd5531
- SHA1 4e860ae24f03522c89bdf37f3ccc10b54832861e
- SHA512 6a5e4105ccbe1664546798db057b93622c9cbd6d5af4967e6be4e390a18fec0ffcc807e3331f09ed0de63ed85569be7ec5eed5a7c663df6ce4a5b70e09500371
- TLSH T11A31293504B0A195E74A36CEADE49C2B449C6AEE183E0139D60E246FC430A5DC8E530D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-140.png
- Size 3KB
- SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
- MD5 7e529063a02e4e83736b0263cb1b82e0
- SHA1 17a3c4b76962e90b1d2fa8a49441157949f4dc78
- SHA512 571806725f83feca90360b246d167a8857edfd9edc8dc0ef7eeef80f291fd06088c405a5653513cb8aa309df08cd609df85a95e3379e3e5907566c876ca77cde
- TLSH T1A2515C3226B5A3D7E796C374A780921B3899896022A20D0092D9BB27F05C253F6BE361
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-140_contrast-white.png
- Size 2KB
- SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
- MD5 ebe7d27ed3b4cb6566a10165abfaa941
- SHA1 fdf7c27058cf5daf7061756e938a33c1bbb26c3d
- SHA512 50ec8592d78f00a6387f06e077e0def88db26723c0fb8632c4ea06f2e09488db0fb82e0eb1f03da53f9c750f6cebd29f7889b1de342e4f0ae69f88c4b7b1425b
- TLSH T1B05106F6989A64D8BEA38C5BF7F583D001643DEACA6906D43BC45820EABA58A441038C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-180.png
- Size 3KB
- SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
- MD5 f332e088e89b88070ef1efbeca5b90f8
- SHA1 86129a8b1e2e7f78d6ce23c58a37fac9da5e566d
- SHA512 2314aae692c024f914661e46cfd76531da6c09b94c084fe915a0594625927df30282d09518a950eafcfdd2e499b1e4877cf3cdbf5509de0cc756dadcde43fd45
- TLSH T17D815E49F7942B0AF64AD07A0703F172487B4060179A730EDDE72988795F4CBA36B787
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-180_contrast-white.png
- Size 3KB
- SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
- MD5 98b9f7a4f4322e7b46de392fd20f66e5
- SHA1 d009d227522206c40cf592e460c9642cd03b8769
- SHA512 3b3e5baf3cfc57119e0812de2816df6c7dcb42e96c4891e47c4f32320fd3be2f27a0118051a6651595baaaa30069bb1c0d78aa701744a44534cabe7547d4becd
- TLSH T101716D453798377AD6D7C2191DCD00D3C89C23DD355E6A3CBE47D0B065B21576E7441A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-80.png
- Size 1KB
- SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
- MD5 1f2fb1bf463b2ff2bec96784debfef84
- SHA1 ae6f721ad937fe39f86602f71002435b18bf1edd
- SHA512 0c92c4f75e620d0b636cfd83e89c69a44f6a96a00006fbd0b13637ba5dcc77c9b302029e62f4b80766811f31810f9c20ac1a98b65c38789951ca0e19a5bb6894
- TLSH T15D31D896AC81A05BD3777972212589F78EF32C0605511E78F0F16130A9678637AF2620
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\150x150Logo.scale-80_contrast-white.png
- Size 1KB
- SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
- MD5 17471bb63ed62a6e545b6b626a763511
- SHA1 586b9efde7b3a04580a49f8fe7739593d42d303e
- SHA512 f619d963b62edb07c8077c3c6ae60ed8d3f3dd5bb1d05a2b83dca1a7a4a346598b055f6c7ea22e05bf281b1de0f205f5d1054819000759d9450ee1fe8f6491ae
- TLSH T17121B6CB7941E7567E21CCB920692044DAB57A480E7CC2EA7521A8B6871335CB7B4DB8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-100.png
- Size 1KB
- SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
- MD5 c3722e0232ec20ac8f99cce7a040b294
- SHA1 91ca47da87ec045ed3ef5d97243167f08fb9e10b
- SHA512 71940b8431e36307ba5176939a169b9259bb6b43c32529a10a12c5ea31447bddccad7eb9ef7cb309b175ee7bd56e70926bd5aa0855d0fd9497547ecd7ff93158
- TLSH T14F310A5E007CA6A894029FBFDA441F98F3C25C883C58DB48850C9A9DD66B8F6F0C4E5A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
- MD5 504d80d276adcc0163a8e4720013f9e7
- SHA1 6d34a0593ffce916cd19b66d61004fd7e7eb2cd1
- SHA512 9961259704ff97c0e1899a33259f62155b73264e272064f3fa90e64124513c7c8bd6ab69a39c1efb271ecc2972ab8fd86fb836f22153a9bb35419c3816d11337
- TLSH T19721083B1E4BE6093DF97C61EC0D52F6A836723E4C527A4519176D26A224A6060633C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-140.png
- Size 1KB
- SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
- MD5 667bfbaaeb2d2b372b6e0d4bf4992ce4
- SHA1 4c6c2e07183963f59391945fbee077b55f8f6b2a
- SHA512 ac63a3dd2f6088e7849e3824c35fd58ca78ec77dc31e1f6cbd47de7cc394318cba7d2309912206a94180267be057c2af5c835424019e2a03ee33a2ab801ba9a4
- TLSH T132410C6EC9F04A5BE0CF56A79A523DB6B0F783D514047D355041502353B0E830EB717B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
- MD5 93223e8777b581e988b703df82593b17
- SHA1 40a035464c27041ccc87c7935c45100d93d1c948
- SHA512 b8a3ee4a71e609625eab51f0f6dafcc82cc47ba2c567cc8bf73cf6423056f9171276289bfdcc8428b7c07645097664065ee9b0b78874425bff800178222fed12
- TLSH T1CF31B8E33C06263ED722BB2F74208CD5C53B7A61619CFBEE259A5462946B3C9044EA10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-180.png
- Size 2KB
- SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
- MD5 704d0a2693b350e7c463b0ff2143835b
- SHA1 0313ad4c3690a590ac54552d2c27806e73776600
- SHA512 4517b2fa911149885ec5549f3173d3c774716740826873e4b2199c804b17e776a5296565930e5acdb8d5476710a391b21e6da8941df64c525a487db4619a1ea7
- TLSH T1C3515CE98D504D4ACE42F079880A4FBA6026C61246268A1FF7ED51F363E67A3481F685
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-180_contrast-white.png
- Size 2KB
- SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
- MD5 39e2fcf13c20103c5f449c06d3a4cf75
- SHA1 ae8e1bce2be17ed450d891864e6aa22642af39ac
- SHA512 8e4902262b064008804d49d1b5f27bb7b8f33ecefb05181aa69534e1d21662719dd4f8e0677c58215f6c5ca9eb4fb92fca54a89f9720230afbf06a70216abf26
- TLSH T12D416E5701B03CBC6DD9913B53750697D4F3D68FF2544C0B6688345DE4F00D009256EB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-80.png
- Size 1KB
- SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
- MD5 32d3e390613cddbd639e70ddb2511ac0
- SHA1 c96ac088e72d756f31896b16776ef100379f802c
- SHA512 7381ceb8fee84f398082177f30dc01593beefa729c73b0166af686bcd25d54312b202d9243834b754769de41e9a1deed74ca91a76dcda918a749cdb4f08c124b
- TLSH T14311F94011E157001133EC75C8192D61F10BA2934745E4A431FACCEA7085B8AB0DF5CB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\Assets\70x70Logo.scale-80_contrast-white.png
- Size 901B
- SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
- MD5 e6add5afc73f7b06fc2348550595f8d6
- SHA1 4d658bddb93fa6cb423ebc61bd20db37e4d37db6
- SHA512 55437dfea7f68a4572dfc86b5428cbe9db86c0d32d0b09ba6b7b1cf8e49e5f1bb94285bbdc97d8ee00d70ba75921db59644787c1be1672fe37cee09441f249b6
- TLSH T1D811B76D6AA4C735BBF50D30A075410F4675218F351104333D6EB66133A09CA54DD04C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\CChromaEditorLibrary64.dll
- Size 145KB
- SHA256 d092a6ac9e3b41c80e6d8eb09cce8efeb22e142bba4551c5c680273de0e4341a
- MD5 d12db8c6a8cadf95d21f6913b965e2e4
- SHA1 aec377667309c0022749769bc7e384a64de7c006
- SHA512 b68d7ec832360869443f4433bc007fd4324069c33c42846ad137004b7e317d4433266cc58d1b0cd4c597815af239e57cdcd63b8e7d30a62960a423c0d1e6d1e8
- SSDEEP 3072:EvhCtUxogw1kAmNvN6FaZmT3ztaeMLG/UFGB3Zl6ucJmerHqG25Dpq8cJJ:EvhDzw1kAmNv0GmT3ztaeMLGCGB3Zl63
- TLSH T18CE386B532052815EE761AF8857D3D90E629FF511F60E2DF522CA01CAEB0EDA2C31F95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\CUESDK.x64_2017.dll
- Size 474KB
- SHA256 7c46fd5e0338361ad3528f3dec72dcb4a9ae20d386fcb1cc214a801737108b3a
- MD5 83d59d6f38efcfdad18d39c1ae3f49f5
- SHA1 d196972ceac8d1ce85f966f8d5a06839e0fcbee7
- SHA512 5f59388f55a5fdf87afdf53ea67925f2cc44933841493c62d84a0f4c1bdd8c77006956d482bd4eeb391c2f6b384601a034fa376312405026eb9d99c2292cfdbe
- SSDEEP 6144:flTZkQQzVVTgmAffw5QTzL6+75I+qZojZdL:fzkQQzVVTgmAffMQTjO+xf
- TLSH T188A43A2FBB484DD8E177917C89DB8F03E1B264590B118BCB15C693AD1E63EDD1DBA220
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\assistant_package
- Size 3.6MB
- SHA256 6cb3ed0b791b2319305c23a43353a5db2081b4013289162d54ceade5b2b7e203
- MD5 eb321164ec9352c05b8d6fe7b87c3736
- SHA1 8dfb88b5f8d9195403fb904c052454cd1dc9c321
- SHA512 a88c46d74260b3dbe376867826b3c89c84990052e4490b75d77fb54826eecaee7560af85db2ff5e1cbf44479ce53b52641930a37f6816fb08d1e007c2053379e
- SSDEEP 98304:bkiom1+QXlA/2Vuz3UzFVRqaJkKU+6Kl0mbg4f2y9pY:bTz83zSbqaGOngynY
- TLSH T1B7063321BBD1C471D22317374CE8F3ED827EB9641F538B9F5399176E1FA09825309A8A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\d3dcompiler_47.dll
- Size 4.5MB
- SHA256 31b57aa72c8773469132d587b5de1ce6c1d672e7a1c02b51bc7be114f17af437
- MD5 656fe21a7725ae1192c5d59f2d5aca2f
- SHA1 8137a525b8b04b29cd6510b3781b7353df9a9306
- SHA512 3fc225b639546b3ae84d5305f50c36c094da51ecf26d907128b93a6c4a8232fda309af8e467ed40944a4d769a3c82a9b0543b4563bcbe29bd907b53c1893e1d1
- SSDEEP 49152:X6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/RD:XUdeqt737jFm5w5D
- TLSH T14F268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\dxcompiler.dll
- Size 24.5MB
- SHA256 47c488edf53904b9bf7fca8907a6b6940557f3ea01127845abcd9e518cefb13f
- MD5 24d770a104085b4353432b552348e5d2
- SHA1 7037e4c785c20c5b684799fc579ba344cb34d371
- SHA512 9d9640362c2b08720c2d6805a579162f6078f2e0ceb2d37b0b20237c1870ae3a449800e86066e35083c5963ab9d211ce1f4735f98d08f896a8b687ec160fb0d3
- SSDEEP 196608:pBm/u/QS7NeY/3KKwp52RVMEhDhYMK30vFxQYNyYGujI:pBOOQS7Ne3L2RVfhDhYMKwnQcyYZjI
- TLSH T1534729122646D49DC059C879C7678B26CA6C30E73FA7B9DBC0F461252B79EBC1B39234
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\dxil.dll
- Size 1.5MB
- SHA256 e86e64046a4ed5050b16defac296e4ef4abd936f7cdceb47aa2fe498867fa761
- MD5 a2b151a80b2ea4e54dc1c817927102a3
- SHA1 33d97e853a1ef1998b37d33ee51245b92ad69f59
- SHA512 57ebcbe8a6b3ade1007316b0478ba3c94daaa4edbb1b7a15866ffad51baf37e6c453b6fc8ceeda2c43ccad97ccb4b2b15d39b494e21b587df6cb8fce8d93db39
- SSDEEP 24576:VcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/8:VsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bJ
- TLSH T17D657D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\files_list
- Size 4KB
- SHA256 ee7e23266f512e69b95afa630f4539d894290ba35a026e93aba0425c390b0219
- MD5 a7c27732b69ca0bd0bd7f510fb80a96f
- SHA1 9c5459aee4cd2e4c572eb321bae3f2ada14e70a5
- SHA512 45c96a1e11bebb932e8c1e1d9be9ea3dac7f799d29b36e1c82ddca5eca8ca678f134dbab6763d210bfef532f8de5d9436aa2e9adff1444e62c44f000a07a3b66
- SSDEEP 48:3MlvE3eCPTuqaeDCOqIG4AUsKyIYKJhqTwb0a9RVtbDy3HCk7RPO2ZrgB6D:3MyTfz5XZyITJhGwbx7Vti3ik7wvU
- TLSH T1C7912697C41F41648826B7F63D20F4956835A8E6E97CA09CE797181048F73FC02C6FA8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\headless_command_resources.pak
- Size 2KB
- SHA256 b3175eb086ccedcddd282b5847a23687a8a8ee37bf485851efc36a7600a2acfe
- MD5 282e9726ad68922e49284993ec81aff6
- SHA1 d72cfce4db93696dd0ed96edeaf146b5ed0a398d
- SHA512 3f01d1f6bef25c19cce516faefd675283a6e2cfee0f5d863ab69f14abbab2d961789b0f3a749270c511c8b08bd6eb00dd6fd700aca30929139a2c6fb441d1111
- TLSH T1AA511893360AB6A6C079C72891DA9A7C6BE58325748DB9744EB70C33E9384A345C2871
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\icudtl.dat
- Size 10.4MB
- SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
- MD5 f50c621247b8ddd574dc9790830f28c4
- SHA1 ea84f3a773b5b90851753353826fcdf94576b3c1
- SHA512 030df4e2c8f0354a97ac6a21774d6bab1246237bb71cc286b1a310b1a7602dc31fa056b8beb1157ac71b13d3744cba0fa71ac807e5f69fcafebb3cd827b553df
- SSDEEP 98304:nHcBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndL+j89o:nHcBhORok2HiXUxO/RJk3IWhlYntjd/o
- TLSH T1F8B62803A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer.exe
- Size 9.1MB
- SHA256 9614c38d5fea1c81e2f421f27c1d427ba7083085a2eb9ab17e3285e8bb0dde8a
- MD5 b1adf5a27741c6dcd8acf3a4bde95062
- SHA1 4108a20c347752b41ffb75f2283cd4b5b46b397c
- SHA512 50764cb0412c966b8df238a487b44a77b381d4a56d547536f00f063b32a2d0bd6c9d4fbeae0fe16045d765fe1de44e441303b00afb1fcfba5afe482b8a4d1cef
- SSDEEP 98304:6e4C+i1DtCzcIH9SKpZUfE0O28pQNsarhOzFBI3++wteEmi:B4C+2tCz/EDl93+Bqi
- TLSH T15BA68D53F3E601E8D0AFCAB48B7A5232A9357C464B30A2DF0A9436251E75FD45B3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\installer_helper_64.exe
- Size 649KB
- SHA256 80d6bff0207e8fe5560c6277ae4c67e6b12656363fdcde82ae030ff9c40d949c
- MD5 2032205888ab0dd4413808419449a6ab
- SHA1 af927950b42e3edd67d934dde7682a73d4fcefd8
- SHA512 742edd3723541d916ccf8f4e424f37980b3e78f78545cf57b53b9a635770b094ba50825ebc313b20221b25f8f3242c3464e89a19d3f5d8c3e1671b8f856830dc
- SSDEEP 6144:aSV2L7N0gbZhB2LgBl0IGsBMxuCEhdEi/zOwFMroX6JjQRq+5shM:3MhvlBzMxudEi/zOsgoX8L+ahM
- TLSH T158E49F12B2D545ECC079C13486528526FA72BC560F35B6EF02E4726A2F7BAE41F7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\libEGL.dll
- Size 501KB
- SHA256 01b100af6f95eb34dc190a4d854ced381cc23eebc316e9195ad9baeaddaeb51f
- MD5 1c09d3ba546eca958fa4a95fd3073f1d
- SHA1 0dc75f81cc997459341cb084659cd6fdf76e15cd
- SHA512 f8a0c32efcd5ec00b6c293a2cd11e17ab484c3c75ccd440c863deb3dc1ab09d19a6361ca9e71607f9d9e7064689ed5edd033324b7de09abf0b9adde0946839a4
- SSDEEP 6144:KkNKGb1FlSrxKvHsnTaSCgUV+HBiBfBcZJIWfpszCq2rCZ0m4c:lF+x+HxSfjBiBfBcZKWfps/2rCF4c
- TLSH T134B48E15B2E949A8D07AC134CB538547EB7178520B61F6EF03E0A2792F77BE41B7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\libGLESv2.dll
- Size 7.5MB
- SHA256 d3117fd2d0e0279eb62807a7212d0f9db6b58b159b223eba8c6578a846563fd3
- MD5 a275bb82071cf646bd34b8f747f0de56
- SHA1 b986a4a812378fe949abfcccbf75d9d4f1142e5c
- SHA512 c0f917684796c0ceb3a5137eab00808810b6650c1cb6c2fd1c717ee28bd446a54b78a182f23de9281c0aca86993abfd27d1f6bd9a1c07bdd4f51dd15fbf954b5
- SSDEEP 49152:cluxMJnGLDcGiNn2ubyWXMzFj9kCmtQOd+wKYUxLU0Yrk2SiDiInF5vzxDlDh55u:WRnTCmOU0JizxD9h3iVax5T2HLr
- TLSH T14D867D13F2A680DDC01DD2B4975BA227F674B8450724B3CF2A9853162F76FE0AB7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\bg.pak
- Size 1.0MB
- SHA256 2cd44de4f707f0cbaa460446b71f178c09677f54b58e36de3245928f53e5334b
- MD5 013a9c776165cd36695732863ca07cab
- SHA1 475f6dd79deec6eb6e9cd8d8593d9dad3aacc519
- SHA512 a8e5ba631fa8ba908f5ecb1edbd3137dcbc921d95371ccaf0da051a813e876a47a086c25e4cae0a7d69d282272fdef18344d02a0c07e9ccb02da30749c8a559d
- SSDEEP 24576:PAuwFKTkfb/JzojvGGml9cICdBBuK0p6g2HH2CmZ8vYAgCzQkECKU+Vb6mYkyiWC:4uwzbAG5KdBBuK0oH2CmZ8vYAmhU+Vbp
- TLSH T1892525A15B9A649F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B887BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\bn.pak
- Size 1.3MB
- SHA256 9316bebdfb4de3d7bd922f4cecf6cb14a180a5de0e1cee9aa6d826cad929d06e
- MD5 a3fb9b045db2723e2e783b8b76cc1a46
- SHA1 af8ca89efb57d4f537266621e8b0dcc06427a45d
- SHA512 295e1d7a14e81d43e446a5f0a8e192729d11b98458a35abd97dea88afdf4a12b63aaf28e387282ba38d749379f1b131deb03da9cd7f36b20db63126397e8e8be
- SSDEEP 3072:Z7c6n99uDDd20tZ75Myf7eqpHrsQwAuCn/gmRo71UdhZNt5jzIIDAposUPDFV:Z7VLupP5MoDDwANRoUZNt5jzIIjV
- TLSH T18255E0209C6E81B2A8D5CDC9434C6370C123AE979B61F74DDC17A25938ADC3C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\ca.pak
- Size 644KB
- SHA256 4f2282548621f11973e493642c114323e658c5d68d8e9eca139bd84e8dc28544
- MD5 502d2386af2ed01125a5a828ffa8b2e1
- SHA1 5f1c830b5cc79e47a67a11f3f557d8dceae3e0e3
- SHA512 74618139274e0068a8c2d0cb8ee7b36e881a1a5e9f9b14701ec6d493ff1eb1d6fb80243d0024001cc339401a7520707c44a931f3914b2423464bddd66730a800
- SSDEEP 12288:JI7D7G6ybGbf1bCCrz+W58rPklpt0bnitR6M6EqHl9kXkcBKMe3aRYUX1BO5g5io:rS/KBKLzxJQyS8B1PBh1t1jn6QD
- TLSH T183E407238BC83B764493330AFB42C257F09CA9847B16D254F5AF1A1622CCBDCD677A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\cs.pak
- Size 642KB
- SHA256 079aeb18c44c58677f657f4b3b6b89550f3296bd46f37728acf9179015354c26
- MD5 0e75abed01f49f76afca13a1eede19fe
- SHA1 3566a5e3a4da12c8ae8e7008817314159043d569
- SHA512 3f2e4ce69bc71658a3e575ef43503fe56cd16b18571ed17779d12d99f4695ccf8063d5dc7444b766cc02fc2c556359f8d9a9ba51486cd43ca63bffbab666e693
- SSDEEP 6144:WEiqVlxjI8xL4PnzHNx2GOaISBIM8QesfgpawI+1NQJflz3f81MqY4BDrJC:Wzq/yfvzHNx2GOaISSawI+1N8CC
- TLSH T188E46C1EDB926439984002447FBA5228BD5E83140B6EA9BB7CCF9C91227177ECEF1D58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\da.pak
- Size 593KB
- SHA256 a627fc78602dfef085badd85a6d3e78dfc889719e99b98787fdfe6f6ddf358c3
- MD5 0fb5666e270b5a0643cf3bc5856c78bf
- SHA1 8b8c4b21f19a460c73d0df1fd36e6e3dfed83e72
- SHA512 9b74fb6cdf5da29ee3fba6400e7fa29a17e6edb2e2595ed4c7c3956042e7206caeb727abf538511f785fac8e4bf74d571b14cf547565590230a6d8d60f0aa90d
- SSDEEP 6144:MZr/fWjPn5+zVWql69SxVzs4EpId4A9CfwgyzZhxNRQgD3UPdE8enAvKBDNNodsa:MNynml9Ts5MRQgocAvKBDNNoCactDu
- TLSH T156D46B4BCC9C333F89AD0764F6118DABDBAD543CC684664F75D8903A19CBD6092BE2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\de.pak
- Size 641KB
- SHA256 7ab90295a52565e26dca106c4aa0d8c0ace1b9d0067b0b957e281ebcd879ec09
- MD5 373e426e17eeeb69af339738291a2dc9
- SHA1 5e68fb6977371e009a07d9937c00e8b2782b2ece
- SHA512 ae67ddd2173d299d421bffd3b7d47fc5a0d7a73d24412037825aec409c92bcfbbaf884d70d4047bbf50d676db13e66ca698b56cef4a7a56a16e45267fcf9adad
- SSDEEP 6144:hgs9lYG/QgeiiKICxUu/z65CblDc6dnP91a87unx44X8NeJ36pjR0tcMrt5zNGw:1oSQ4ZNUj5CbF/PXaq4X8NeJ361G3Gw
- TLSH T15DD42903ADDB221ED64673607701CDBB7B19E36FC385312A94EDD027660B6B283AD536
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\el.pak
- Size 1.1MB
- SHA256 cf08478683bdcceba9e2ced67f9f36761242df3c3b515d8f20da784ab0286d60
- MD5 d354f9a0fd047db8c3a5ec679994e7f5
- SHA1 df3f28250876e8a39374172c81f56154c1cf880c
- SHA512 5d42c0fb978269a29506e268d85ce938c7d71e139680d715a7d1872d08096bb19bdfc919fca2697f38eb1da2f64ec227fafaf8c1fd6ead400decb1610ff8f5c5
- SSDEEP 24576:G796knjlr4LYGUe6CRK9Xcx2y7fOILqlJP8624A9bmvdtU7rHYeJZlmmPdzaYDMU:G6knjlr4LYGUe6CRK9Xcx2y7fOILql2t
- TLSH T15A35CEEFB0542DEE8046990785D8F07C27C66D6CE749CBD86229CB60BDF90719622E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\en-GB.pak
- Size 520KB
- SHA256 924a85e9ac136eae8e4f89762d818c297aafe897c16d18442b338279fc31aa1b
- MD5 e72bc11121b543c58a21eac8370c3307
- SHA1 ccd588eeb08e8effa3065dd5b451ad7a90d543ec
- SHA512 37e6371c32024e57fe8414dce30c643147a70f1de9f8211a8930894341ec6aab3de582681f6e2066261852b7933f654317365b5ac41d2157d275478b1198001d
- SSDEEP 6144:zObCbD7PbUS+KQDF5BcFRF7WCCFIJmuVkUt0NhMh9rU9CLdI:KCjPbBgDKHJmuV7tx9rDdI
- TLSH T135B43D1FF344122905935272BF0A9662FF36D06CA35116663CAD902C33B7B5A837B7E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\en-US.pak
- Size 523KB
- SHA256 2cb89056faab6f3c7b8dc80497b59523cae8fb3c468adf8c6855fc7ac117332a
- MD5 3be06af8902f292090bb715cada5ae71
- SHA1 5b1278a60a43d11c01b9dfc029973e76d67535c8
- SHA512 f92aab6fd32abb0bd1427862e115d8c2360bc7cb710eff693c6762f4ba382e09badd5eeb78d1b0f35052395283d59a708f42e4ab8138a2cb8fdd1b57207f9bf1
- SSDEEP 6144:uoNerh5uxsgp5MyMG5jeWngfs/gtw+GNSJmsV3U3GWYj5Rrt9vAdX:7erh5Y3My/jMwPSJmsVE3URrAdX
- TLSH T1DBB43C1FE748122905935372BF0996B2FF36C06CA35112563CBD812C3377B6A927B6E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\es-419.pak
- Size 633KB
- SHA256 24019764e0932343823ff0702679c967e169b9a520b8c72f43064b9a98540ad1
- MD5 deb147e98db9be1b3188587ac235ef3c
- SHA1 cc84ac7b832a9a8ad4b9b57b920307e4b5841d9e
- SHA512 4bf6c91431a5aff16de235e5027cfa34f1d7242b6d24a5b33028f37c9162ced9bbe4edd3da6255abf6b207ef8bdd4069eaf9d71cb99fdbd5dfbe8d864853d2d9
- SSDEEP 6144:tkLFE+NRCeY3lsJQDNAfIODtm/Wo1UhCYev6gIwbyll+2dYCb44PDn0:tWFE4IfsJMAUaKv6gIwbyD4cD0
- TLSH T151D4F822AAC81F5300E3A348F783D753E4D89545B408C29BE8EF866562CCF9CD967ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\es.pak
- Size 627KB
- SHA256 4fa12830ef3aea54408d9251d747d1d10d63c088dac9f3157924394c6ec7a044
- MD5 b491dddaa6e5428adb1647541a63bf17
- SHA1 7ea41b06eecefe8871e56adfb7e48df0b405450f
- SHA512 6a2859b0a7e0d586244481cd5f83d15c80c158495e1ff4a7472fbe01ccc134917f2021da42668f92134791d1b902e3f9e5dd0d83b49e3bde5a4983695302bb32
- SSDEEP 12288:EHRWWbZ1JBx+mrAQWLu4vv6f87yv+jabBtM:pW3JD+R/u4vv6f87y2jabXM
- TLSH T179D40822AACC1B6310D39349F783D753E5D49549B408C26BE8EF866622C8FCCC967ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\132.0.5905.43\localization\fi.pak
- Size 588KB
- SHA256 dff922e8d85f947774fc3cfa4cd696e6f32b011d63687f6c7637324a2e14f13c
- MD5 9c9113baad605a3dd653abc0afe485ad
- SHA1 7ff27435f7b383fecbe003c7df7c7a4eb905def6
- SHA512 3bab3da766cebd4c51a9265a6760f9b09f681e8e99ddb6dabc9ab89907d036f4c3e31d0cae12ae4108147abfd15eb334a0d396d483770c896c210172bc0d58b5
- SSDEEP 12288:KmScBc58190xA07I+prWaMDkjEEWq8yLOI2dbLtYl1temILZc1JQ:KBqcvxRIacyLOI2Fr/
- TLSH T19BD45D514219C32137C4C39E6DB0903EF6D5E39D8C248D99F847C7D94AEAA887DB236E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe
- Size 5.2MB
- SHA256 4a5fd953fd0e1c3085ae68fa3984083b6273b2fecad4cbd5149f9b20a720e7e5
- MD5 5680d512b11f574b5524f10c3d45ce87
- SHA1 0e7cd5320efefa1df9732096e472f1b956d75708
- SHA512 66ac6b71c34139109dff57757fda405610a3ae78263cab833ecb3a1275bfeacf57de0ea59a047d4d6b93401652fe94ab9715638dc53ddc6acd8a4181280fdd59
- SSDEEP 98304:u6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwm:oBjuUOK93csaOxLVlod8Il796HKXPZ
- TLSH T10A46BE52FB217074C80A7971643C6B7B9C281D2B972186DF8AD87CE25B784C2363DB5E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
- Size 2.8MB
- SHA256 5cd0fd3cf2f5debada24ad0e8cacf6a271b82056b8a1ea6d0b345bb1ea282c8e
- MD5 dfa9e74748c66be682c033b54f409a4c
- SHA1 ab061fae6e559f90101f8b72e8b1f386b85e5851
- SHA512 286c0a715ce6f5c9fbe1b99a14e55a58f99e8767d48efab40ffe4b6a4786768f15520762e9696578c8ade56bc368a65ae71826105ed4805620a468291a74e7e2
- SSDEEP 49152:/B0txPJp8RW6XcydhaCBmYQJfxUKmwQFm/7EaD/pXG:/uKXdBmYoV68PxG
- TLSH T1F7D58C13F1D910D8D01DD1798B9A9632EA62BC454B31B6DF0A90B7562F7BEE06B3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\Opera GX Browser.lnk
- Size 1KB
- SHA256 96a6354426c335e2b1931023278b42f8e6c47f7d2c33540fc86ce760fad31017
- MD5 161ea597773c0511b9362e0e0cebc2f6
- SHA1 3cfaf6c132da06ed29f7f6eeedc5988665298ab6
- SHA512 ffa025629363fb9a53aa02ac52f8e26902c8bae0c860e312eadb8529a60e2725d79eef830f6df97cd788b8d35e7ecbb73579260b7d091947a7c0252bb849f5a8
- TLSH T1D221ED2D7BEA2B21F3FBD975457B173AD279FC00AB564A0C005642446838602A99DF2F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\additional_file0.tmp
- Size 2.8MB
- SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
- MD5 1bed04ab23ee645cad438456a6d465fa
- SHA1 68b7d9eb6ff0bd159281a2fd55a7a24860ba765c
- SHA512 9ca295d1c574e88eb8506ba3bb4096ff3860e605b7870fe11a2eff27c85a551894345b7524485fb4fd5ed5e9cfbefb917f735ed51085cfd3adbabd9a28909f23
- SSDEEP 49152:MkinoAcJ53ld/JCHyHuw+yIfBfnDWUKT5qDztnvkbPsGaW6EYFZoMzu3ug:MkioJJ57RCH2uryIfi0mz+W6Eory3ug
- TLSH T1E0D533317D918476D22392330DD5FBEC66BFF5B22F229A9B3388072EAF201A24715557
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\assistant_installer.exe
- Size 2.5MB
- SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
- MD5 31f5e82954b11ee1cbaf09294f7d5d6d
- SHA1 580d39bfee5fad23b31ea4869561b4f9d15f322e
- SHA512 e3ec7a6c238faaa1561b12b67217edac16e5c63ff68483daf4e7d7bf6b1bdcc16e2dda5b11a7b69434dcfd864cab6e427854d8d70a2cd7cbf744ca8b15a6fe9f
- SSDEEP 49152:6P/Ojp1psS7+BMvcOZ+XMxNBfAlVH5p6h7yMo:6nOjp1psS7+BMvpiMnBfAPH5p6hGp
- TLSH T1CBC59D02B89194B5DC963032361CF77E9A345E114B364DC79B90BCD16FB9AE2223739B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\dbgcore.DLL
- Size 196KB
- SHA256 a2777992696c953c001dabade3f236f731987b58061efd8c894815f9939f979c
- MD5 874334b4e7891772e6543f666e6d2411
- SHA1 d9f0ca0263a50f254c6516aa9c8fbc671d978025
- SHA512 c5b205cd580c75df43e69215028874bd233cede85c1829e4bbc67a2160c786a59124ef49681351aee383c27ce764fb7e47fc22e8b454b0eed8f0bb4020edca1f
- SSDEEP 6144:pASh0NdOkBakZykbp/eyhr+SJors+k0L3nTd:8YIqFLnT
- TLSH T169148C6296840833DD9F11B8B29F333795FEEFB0139194C362549AE4E5647C06E3A2DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 102419e70ed462dd1ef4a30d94b714c4317ea838d7acc85ae030dfca19f609ab
- MD5 7660d7d4afc11706c9b4f03aaef74a9e
- SHA1 38136ffc06c49fde4dc4210e9f9f580b5aeecd53
- SHA512 e8f2f71ec524dd7435515c012ccbbe2e29d0de866a64fcfe604c0a9888425f0b6a7f89baac8078a1715f6c7dc411a5da4d5c0b92c720195d9ef00eb57ef4fa1f
- SSDEEP 24576:gDOSE7VspFPxh+EqYbt6lyn2GyQWKACVOxHTdMgh9IVbMAQyvyXiuVKHeeKKwsf0:gqhRcFPxhHYCBRnyHO6W6NIyX/kQs2Rp
- TLSH T1E8856A20E784813CE4EA0177E67D7A79866DE134073440CBAAD45B69782D7C3AF386DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\installer_prefs_include.json
- Size 130B
- SHA256 f3db8635d3193dc0ed9b4919d6b14602398bec77d187e7de93272b11d26f7806
- MD5 a212705d577765d86a67abf5b711d57d
- SHA1 1f65f3c3091bfb6e52e777f656c983d308ccb766
- SHA512 604f5605f618512a8c2a6e0e4da0804c216c2ee52f19f3cc4af40281dfbe68ea9f2df569b89361e0b41512ef1bae79c5680b8314566b63fcae3a53350610e4fe
- TLSH T198C02B44417852D20F7143DB3832338C90D321020565B4DAE341320540208833813580
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\installer_prefs_include.json
- Size 855B
- SHA256 49653796467912b0857b1ccf1cb0d8bffbd063b37f09525236c71cf76d560a71
- MD5 d8935b14572ecea8c58bb9128e74903f
- SHA1 e97bf1ab3139a1f197e779ade7c1ce21b31689ca
- SHA512 0d6ece2433a5faf431d90d605e2e0c3d84817bf716fefa7ca138be9bb2ad22712163ad067d6be0d7686862b801578793f24323695fd0fe35eb5eeac573b3d2b1
- TLSH T19611D639A16830227F7783BFAF6B2A05AE034202482861D2E0C7641164EFC420F32A2B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\9b23572f-10bc-4b4e-b08b-bc7ffb303428 Opera GX Installer Temp\opera_package_202606230428461\installer_prefs_include.json.backup
- Size 115B
- SHA256 230412d3dd11610ccdb45128082314fcd7e41d38ef3ae81426a0d9a3814e5616
- MD5 f2ea62cbd016d7169ea9793460997d5d
- SHA1 52ccd29dc1d95d5b66d1f4d914b42b31bfc3b5fd
- SHA512 34b3827a8c236ae78973f795c3a86090480fbf2b964776e53922fb8d7343c056bcc720dba4b0bff6506196890aa61ac4a0c082a188102967164e55fb1d2a5de1
- TLSH T18AB0929582A8A1921FB283E73976338DA5A3611259AAB4EAE705320590648537823A95
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zSC044D118\installer.exe
- Size 9.1MB
- SHA256 33566d50268068e1fab01b06431773c863627abcfa5e0614ecae1443ebfefa61
- MD5 dc1e5f41aeee9c85dfa87110517662ef
- SHA1 48567bc8cd8e37cd90d195a2b11d4f9377872baf
- SHA512 5f50a57432d746745da63add515f122463808235dd3a3cf11b76585470682d7d0af28b36b0df60221391d4105e7e345c60df021d629619e44d1d5c96e2d105b7
- SSDEEP 98304:yW3lVkWPMuxFoGE2Q6so01GmZv5d8bD2IdFBI3++wteEme:F3lVkwMujDxiIS3+Bqe
- TLSH T1BEA69D53F3E601E8D0AFCA748B7A5232A9357C464B30A2EF0A9436251E75FD45B3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera GX Browser.lnk
- Size 2KB
- SHA256 e969b9f27b3c3bd92a23089d55c4e0c3ee7648c57839acd6b386ec467b0c20ce
- MD5 f881b4822e81f6377d1c9c8d113ea5a9
- SHA1 2a17a4fef42e086d35c6d44ad386de3c2ed350fd
- SHA512 b75ef6905a4a48b9528298deb0fe55d9b5d41c47552fcb58f2350c1eed4f120bf051f4a9a848d9ff7d8bbe1846111126f6415a1cdb01ad27e1a9d96f8a948ae6
- TLSH T10741335877FC3B11F3FBEA71467B17359379FC10AB669A0C004581886879A01A85AF2F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 24cbc7653db379dedf349138e503ec93d5f47c7eae0b3a2226d3a4b67281db13
- MD5 d767eb8bb380eede969ab8de4597069f
- SHA1 9058e6d14c01696b0924a748ed0b0a7b6e041e1d
- SHA512 e2cbf4e90266e446d7f2cd15062f8f94d2881a2be23a65b2fad3eaee3270bb3d499693bf5482f79f1bbe5569b164af0e4cabcef32dea31093ab3934df10e68b6
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw
- Size 1KB
- SHA256 93961fc2a105beb2941667938b0dde3788cb9380dffca9876d33cd3b65c6d62b
- MD5 299be612af80d6e3abb6b0a5ab379a5a
- SHA1 d0f12a4d6448a0035bc7c871a70a635c10b3c5d3
- SHA512 bb2261e50cabc5cfbe30bd719d318421932d9fd31534d6adc30d8df59fecfb9c919d0da3d78e68c62d81a49427746703cc54d813c9265dfdd177760d984bfff9
- TLSH T1C9412C2B0E4E5A090303AD42240144505AF4DB47497255D9762B09E3BD90F96C3FA7D5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw
- Size 2KB
- SHA256 44bc848db80b89662c0b7b53069f49bb82af196e82132460ae571fc7b9414495
- MD5 3b2a3c14fd1d5db742e242fa34137de1
- SHA1 1fe45c64416942b603f6e1cb23c5d87f03654586
- SHA512 2fbb891353df9bbe9de8ee08d105b210b6c4928a51bef0bbbf89d7498c066341d4175e540391c8e3fe28deebe88733fa43c6ac5a0108dda64a3fcb97124e08db
- TLSH T138512C56CC5D45524A53078DC2A37E0CCD1A36C0EC83A69CBD70BE9052CD28724D5EAA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw
- Size 3KB
- SHA256 350259b93bf476a3cf3654696f9ea22d53193d9c610830d23107e4dc7b87793c
- MD5 9fae981101da8857771118defc501ef0
- SHA1 ec2d3825d711e71b48933735df78cc79c9bbad65
- SHA512 47b209b1c3adcfd4f3badefcc0934a4886d7a1a686234fea9a4603fbf214124b5031b0d9dbf308875a281c6da97d7ad3a5bafb11ef52d53455f4ebba0ffc99d3
- TLSH T139617FF04B896CBC3D4B67697C40453D5F21BAF7ECA6F58A13EB61464477F003280959
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_7c18ec62-e71e-4264-9aae-0fbcc156302d.raw
- Size 3KB
- SHA256 1ec769c8f539ea5564706bb898dee2a8f7aa667e423e775a71e41497feb1b0c2
- MD5 a86a468482cf6890c9a16eece25ffb9f
- SHA1 a39e20593524b0b856ade7b5b916172c607a0b88
- SHA512 42b32b16dc747f8fb6727b38c1e148ec3a45db7e475ef3c2f7afa3e9491e32bca81a0b23e553ad75c8e4a52de058eb1f60070efe49e5fbdccae610694dbfcd2c
- TLSH T140616D845BF216DF85E6DA2BA3B110C251DA018297FED9F408D9D792370AC18DECDF84
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\fe47f663-e214-43cf-b182-14180688a088.tmp
- Size 162KB
- SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
- MD5 6c07e783fb8030c2aae67919d45965f7
- SHA1 46d2d931e5049884b4e4af1c247fbb1a25b6edea
- SHA512 f93944f08885b666c7ad9ab5d7ea051280cd636286586fe1ed696ad67c3b43683fe87dac24bcb9410395acff59a5b0d12d4c12c2f44a0963af2cd93c939a9aa5
- SSDEEP 1536:EEJFyMduylKOn7MU+AO8iKqqFG0urH6PtOE:RHKcuGjFhurHjE
- TLSH T1F6F364823BC1ACB7CE92A6B52F7CD4E9B372F5084746572B7FE1A2718B9D3180950139
- MD5 SHA1 SHA512 SSDEEP TLSH