Analysis
- user interaction
yes - max time kernel
389s - max time network
388s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/06/2026, 01:20
Static task
static1
Behavioral task
behavioral1
Sample
OperaInstaller (7).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
OperaInstaller (7).exe
Resource
win11ltsc2024-20260618-en
General
- Target OperaInstaller (7).exe
- Size 178KB
- Sample260628-bqeqdaex71
- SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
- MD5 4ef32b114eaa6f05340b46d0f48154c7
- SHA1 a07219dc2a0fa96f5f9a03b1bb350c9ab2679d3f
- SHA512 6631937f30fcfdc536bd14735870c9c4592f4414e9c1d71ec69c718bf341ff286174b782c6a23a6c29744be940bcac34aa93845e60727e090bee8423d738ea9d
- SSDEEP 3072:IYHHEa1Lz5KhEwh5kc9+5sFoq0X/r6LGV4RxJ0OZnS+Rl//bRRlTHGVJp99vqRy:IYEwP5KhVyc9esFoBvum4RvGJTEy
- TLSH T1EB046B823AC184B5E5B244321864DBB19A7DFC700F65D9DB73987A3B5DB02C09932F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 4 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Browser Assistant = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\assistant\\browser_assistant.exe" assistant_installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe - Downloads MZ/PE file 2 IoCs
flow pid Process 31 1960 installer.exe 14 2728 OperaInstaller (7).exe - Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe - Checks computer location settings 2 TTPs 33 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation OperaInstaller (7).exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation opera.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1414299440\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-sl.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-sk.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-pt.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-ml.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-hi.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1774652473\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1645256094\mtc_config.pb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-mul-ethi.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-lt.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-gl.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-da.hyb opera.exe File created C:\Program Files\scoped_dir4036_520740752\persona.ini opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-or.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-lv.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_341673782\manifest.json opera.exe File created C:\Program Files\scoped_dir4036_1815041330\opera-one-dark.jpg opera.exe File created C:\Program Files\scoped_dir6692_2135132231\opera-one-dark.jpg opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_905606834\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-bn.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-be.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_2128780404\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-tk.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-la.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-hr.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-und-ethi.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-nb.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-hu.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-gu.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1176730732\safety_tips.pb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1176730732\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_2128780404\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_341673782\Google.Widevine.CDM.dll opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1645256094\kp_pinslist.pb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1645256094\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-te.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-mr.hyb opera.exe File created C:\Program Files\scoped_dir7748_2015393172\opera-one-dark.jpg opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_905606834\preloaded_data.pb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1774652473\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-uk.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-pa.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-ka.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-el.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-cu.hyb opera.exe File created C:\Program Files\scoped_dir4036_1815041330\persona.ini opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1645256094\crs.pb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1414299440\_platform_specific\win_x64\widevinecdm.dll opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1414299440\LICENSE opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-ta.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-mn-cyrl.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-en-gb.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-bg.hyb opera.exe File created C:\Program Files\scoped_dir6692_2135132231\persona.ini opera.exe File created C:\Program Files\scoped_dir7748_876230638\persona.ini opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-nn.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-ga.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-de-1901.hyb opera.exe File created C:\Program Files\scoped_dir7748_2015393172\persona.ini opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1414299440\_platform_specific\win_x64\widevinecdm.dll.sig opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-cs.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-af.hyb opera.exe - Executes dropped EXE 64 IoCs
pid Process 1580 OpInst.exe 1960 installer.exe 2900 installer.exe 1496 installer.exe 212 installer.exe 2008 installer.exe 4356 Assistant_130.0.5847.41_Setup.exe_sfx.exe 1860 assistant_installer.exe 2524 assistant_installer.exe 4872 installer.exe 4796 installer.exe 2172 assistant_installer.exe 4632 assistant_installer.exe 4356 assistant_installer.exe 4404 assistant_installer.exe 3008 browser_assistant.exe 5052 opera.exe 4036 opera.exe 4348 opera_crashreporter.exe 4736 opera_crashreporter.exe 4444 browser_assistant.exe 636 opera.exe 4440 opera_crashreporter.exe 4316 opera.exe 1344 opera_crashreporter.exe 4936 opera.exe 4816 opera_crashreporter.exe 4784 browser_assistant.exe 3340 opera.exe 3116 opera_crashreporter.exe 1924 browser_assistant.exe 4244 opera.exe 4268 opera_crashreporter.exe 4904 opera.exe 1296 opera_crashreporter.exe 2760 opera.exe 5160 opera_crashreporter.exe 5240 opera.exe 5300 opera_crashreporter.exe 5320 opera.exe 5356 opera.exe 5376 opera.exe 5504 opera_crashreporter.exe 5540 opera.exe 5992 opera.exe 5548 opera.exe 5848 opera.exe 5624 opera.exe 5732 opera.exe 6708 opera.exe 6860 opera_crashreporter.exe 6560 opera.exe 5644 opera.exe 6692 opera.exe 6628 opera_crashreporter.exe 7272 opera.exe 7284 opera.exe 8008 opera.exe 7860 opera.exe 7756 opera.exe 7496 opera.exe 7424 opera.exe 7832 opera.exe 3852 opera.exe - Loads dropped DLL 64 IoCs
pid Process 1860 assistant_installer.exe 1860 assistant_installer.exe 2524 assistant_installer.exe 2524 assistant_installer.exe 2172 assistant_installer.exe 2172 assistant_installer.exe 4632 assistant_installer.exe 4632 assistant_installer.exe 4356 assistant_installer.exe 4356 assistant_installer.exe 4404 assistant_installer.exe 4404 assistant_installer.exe 3008 browser_assistant.exe 3008 browser_assistant.exe 5052 opera.exe 5052 opera.exe 4036 opera.exe 4036 opera.exe 4444 browser_assistant.exe 4444 browser_assistant.exe 636 opera.exe 636 opera.exe 4316 opera.exe 4316 opera.exe 4936 opera.exe 4936 opera.exe 4784 browser_assistant.exe 4784 browser_assistant.exe 3340 opera.exe 3340 opera.exe 1924 browser_assistant.exe 1924 browser_assistant.exe 4244 opera.exe 4244 opera.exe 4904 opera.exe 4904 opera.exe 2760 opera.exe 2760 opera.exe 5240 opera.exe 5240 opera.exe 5320 opera.exe 5320 opera.exe 5376 opera.exe 5356 opera.exe 5376 opera.exe 5356 opera.exe 5320 opera.exe 5320 opera.exe 5320 opera.exe 5540 opera.exe 5320 opera.exe 5540 opera.exe 5320 opera.exe 5992 opera.exe 5992 opera.exe 5548 opera.exe 5548 opera.exe 5848 opera.exe 5848 opera.exe 5624 opera.exe 5624 opera.exe 5732 opera.exe 5732 opera.exe 6708 opera.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- System Location Discovery: System Language Discovery 1 TTPs 14 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Assistant_130.0.5847.41_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DllHost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaInstaller (7).exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OpInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe - System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 6560 opera.exe 6544 opera.exe 924 opera.exe 5848 opera.exe 7660 opera.exe 8032 opera.exe 7496 opera.exe 8072 opera.exe 7908 opera.exe 1828 opera.exe 6292 opera.exe 5992 opera.exe 7860 opera.exe 2324 opera.exe 4488 opera.exe 6176 opera.exe 7272 opera.exe 7512 opera.exe 7244 opera.exe 7460 opera.exe 7980 opera.exe 1012 opera.exe 7776 opera.exe 5644 opera.exe 6856 opera.exe 5712 opera.exe 7784 opera.exe 2868 opera.exe 4352 opera.exe 6120 opera.exe 3852 opera.exe 8120 opera.exe 6152 opera.exe 6064 opera.exe 1700 opera.exe 7892 opera.exe 7340 opera.exe 5924 opera.exe 4548 opera.exe 3468 opera.exe 5732 opera.exe 8144 opera.exe 6516 opera.exe 5524 opera.exe 5168 opera.exe 7600 opera.exe 3852 opera.exe 7812 opera.exe 5548 opera.exe 7756 opera.exe 7848 opera.exe 2392 opera.exe 6852 opera.exe 7340 opera.exe 8120 opera.exe 5540 opera.exe 8156 opera.exe 7700 opera.exe 6568 opera.exe 5872 opera.exe 7284 opera.exe 8128 opera.exe 8184 opera.exe 7528 opera.exe - System Time Discovery 1 TTPs 3 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 5356 opera.exe 7272 opera.exe 7512 opera.exe - Checks processor information in registry 2 TTPs 7 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz opera.exe - Enumerates system info in registry 2 TTPs 64 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName browser_assistant.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera_autoupdate.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS browser_assistant.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" assistant_installer.exe - Modifies registry class 51 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\DefaultIcon installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\ddeexec installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.htm\OpenWithProgids\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.xhtml installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Applications installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.opdownload\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Applications\opera.exe\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\WOW6432Node installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ opera.exe Set value (int) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.shtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\ddeexec\ installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.opdownload installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455} installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.html\OpenWithProgids\OperaStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.pdf\OpenWithProgids\OperaStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\132.0.5905.102\\notification_helper.exe\"" installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Applications\opera.exe\shell\open installer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{F3541248-42FA-4D24-B4A4-2BA9C8F81C18} opera_gx_splash.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\ddeexec\ opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\URL Protocol installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.shtml installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.xhtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Applications\opera.exe installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\132.0.5905.102\\notification_helper.exe" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\URL Protocol opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\ddeexec\Application\ opera.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.xht\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\ddeexec\Application\ installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\ddeexec\Application installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32 installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\WOW6432Node\CLSID installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\.xht\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" \"%1\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\OperaStable\shell\open\ddeexec\Topic installer.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 installer.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 7748 opera.exe 7748 opera.exe 8004 opera.exe 8004 opera.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 29 IoCs
pid Process 4036 opera.exe 4036 opera.exe 4036 opera.exe 6692 opera.exe 6692 opera.exe 6692 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe 7748 opera.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4036 opera.exe Token: SeCreatePagefilePrivilege 4036 opera.exe Token: SeShutdownPrivilege 4036 opera.exe Token: SeCreatePagefilePrivilege 4036 opera.exe Token: SeShutdownPrivilege 5156 opera_gx_splash.exe Token: SeCreatePagefilePrivilege 5156 opera_gx_splash.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe Token: SeShutdownPrivilege 7748 opera.exe Token: SeCreatePagefilePrivilege 7748 opera.exe - Suspicious use of FindShellTrayWindow 6 IoCs
pid Process 4872 installer.exe 3008 browser_assistant.exe 3008 browser_assistant.exe 4444 browser_assistant.exe 4444 browser_assistant.exe 7748 opera.exe - Suspicious use of SendNotifyMessage 14 IoCs
pid Process 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 3008 browser_assistant.exe 3008 browser_assistant.exe 4444 browser_assistant.exe 4444 browser_assistant.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 4872 installer.exe 4872 installer.exe 720 DllHost.exe 720 DllHost.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 720 DllHost.exe 720 DllHost.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe 4872 installer.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2728 wrote to memory of 1580 2728 OperaInstaller (7).exe 88 PID 1580 wrote to memory of 1960 1580 OpInst.exe 91 PID 1960 wrote to memory of 2900 1960 installer.exe 93 PID 1960 wrote to memory of 1496 1960 installer.exe 94 PID 1960 wrote to memory of 212 1960 installer.exe 97 PID 212 wrote to memory of 2008 212 installer.exe 98 PID 1960 wrote to memory of 4356 1960 installer.exe 102 PID 1960 wrote to memory of 1860 1960 installer.exe 103 PID 1860 wrote to memory of 2524 1860 assistant_installer.exe 104 PID 212 wrote to memory of 4872 212 installer.exe 110 PID 4872 wrote to memory of 4796 4872 installer.exe 111 PID 4872 wrote to memory of 2172 4872 installer.exe 115 PID 2172 wrote to memory of 4632 2172 assistant_installer.exe 116 PID 2172 wrote to memory of 4356 2172 assistant_installer.exe 117 PID 4356 wrote to memory of 4404 4356 assistant_installer.exe 119 PID 4356 wrote to memory of 3008 4356 assistant_installer.exe 120 PID 3008 wrote to memory of 5052 3008 browser_assistant.exe 121 PID 4872 wrote to memory of 4036 4872 installer.exe 122 PID 5052 wrote to memory of 4348 5052 opera.exe 123 PID 4036 wrote to memory of 4736 4036 opera.exe 125 PID 4444 wrote to memory of 636 4444 browser_assistant.exe 127 PID 636 wrote to memory of 4440 636 opera.exe 128 PID 3008 wrote to memory of 4316 3008 browser_assistant.exe 129 PID 4316 wrote to memory of 1344 4316 opera.exe 130 PID 4444 wrote to memory of 4936 4444 browser_assistant.exe 131 PID 4936 wrote to memory of 4816 4936 opera.exe 132 PID 3008 wrote to memory of 4784 3008 browser_assistant.exe 133 PID 4784 wrote to memory of 3340 4784 browser_assistant.exe 134 PID 3340 wrote to memory of 3116 3340 opera.exe 135 PID 4444 wrote to memory of 1924 4444 browser_assistant.exe 136 PID 1924 wrote to memory of 4244 1924 browser_assistant.exe 137 PID 4244 wrote to memory of 4268 4244 opera.exe 138 PID 4784 wrote to memory of 4904 4784 browser_assistant.exe 139 PID 4904 wrote to memory of 1296 4904 opera.exe 140 PID 1924 wrote to memory of 2760 1924 browser_assistant.exe 141 PID 4784 wrote to memory of 5240 4784 browser_assistant.exe 143 PID 5240 wrote to memory of 5300 5240 opera.exe 144 PID 4036 wrote to memory of 5320 4036 opera.exe 145 PID 4036 wrote to memory of 5356 4036 opera.exe 146 PID 1924 wrote to memory of 5376 1924 browser_assistant.exe 147 PID 5376 wrote to memory of 5504 5376 opera.exe 148 PID 4036 wrote to memory of 5540 4036 opera.exe 149 PID 4036 wrote to memory of 5992 4036 opera.exe 150 PID 4036 wrote to memory of 5548 4036 opera.exe 151 PID 4036 wrote to memory of 5848 4036 opera.exe 152 PID 4036 wrote to memory of 5644 4036 opera.exe 153 PID 4036 wrote to memory of 5624 4036 opera.exe 154 PID 4036 wrote to memory of 5732 4036 opera.exe 156 PID 6708 wrote to memory of 6860 6708 opera.exe 159 PID 4036 wrote to memory of 6560 4036 opera.exe 160 PID 4872 wrote to memory of 6692 4872 installer.exe 161 PID 6692 wrote to memory of 6628 6692 opera.exe 162 PID 6692 wrote to memory of 7272 6692 opera.exe 163 PID 6692 wrote to memory of 7284 6692 opera.exe 164 PID 6692 wrote to memory of 8008 6692 opera.exe 165 PID 6692 wrote to memory of 7860 6692 opera.exe 166 PID 6692 wrote to memory of 7832 6692 opera.exe 167 PID 6692 wrote to memory of 7848 6692 opera.exe 168 PID 6692 wrote to memory of 7756 6692 opera.exe 169 PID 6692 wrote to memory of 7496 6692 opera.exe 170 PID 6692 wrote to memory of 7424 6692 opera.exe 171 PID 6692 wrote to memory of 3852 6692 opera.exe 210 PID 4872 wrote to memory of 7748 4872 installer.exe 173 PID 7748 wrote to memory of 7952 7748 opera.exe 174 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\OperaInstaller (7).exe"C:\Users\Admin\AppData\Local\Temp\OperaInstaller (7).exe"1⤵
- Downloads MZ/PE file
- Checks computer location settings
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2728 -
C:\Users\Admin\AppData\Local\Temp\OpInst.exe"C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=12⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1580 -
C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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3⤵
- Downloads MZ/PE file
- Enumerates connected drives
- Executes dropped EXE
- Enumerates system info in registry
- Modifies system certificate store
- Suspicious use of WriteProcessMemory
PID:1960 -
C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x28c,0x290,0x294,0x268,0x2a0,0x7ff615e74e08,0x7ff615e74e14,0x7ff615e74e204⤵
- Executes dropped EXE
PID:2900
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\installer.exe" --version4⤵
- Executes dropped EXE
PID:1496
-
-
C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1960 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_20260628022056" --session-guid=b08f0c37-ef7b-4ca4-84d6-801941169ba1 --server-tracking-blob=YjA2NzMyYjdkMzUwYTIwNGMyZWNjMzc3YzA0MDAwZjRkYWFlN2UzNGNjMTY2ODc2ZWYyOWEyYzhlMDBlMGYzNjp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzgyNjA5NjU0LjU0OTMiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiJlZGExNDlkMy0wMjVmLTRlMmMtOGU4Mi02NGFiNzA0MGUxZWYifQ== --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=70080000000000004⤵
- Enumerates connected drives
- Executes dropped EXE
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:212 -
C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x288,0x298,0x29c,0x264,0x2a0,0x7ff615e74e08,0x7ff615e74e14,0x7ff615e74e205⤵
- Executes dropped EXE
PID:2008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe" --backend --initial-pid=1960 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561" --session-guid=b08f0c37-ef7b-4ca4-84d6-801941169ba1 --server-tracking-blob=YjA2NzMyYjdkMzUwYTIwNGMyZWNjMzc3YzA0MDAwZjRkYWFlN2UzNGNjMTY2ODc2ZWYyOWEyYzhlMDBlMGYzNjp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzgyNjA5NjU0LjU0OTMiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiJlZGExNDlkMy0wMjVmLTRlMmMtOGU4Mi02NGFiNzA0MGUxZWYifQ== --silent --desktopshortcut=1 --install-subfolder=132.0.5905.1025⤵
- Enumerates connected drives
- Executes dropped EXE
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4872 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x298,0x29c,0x2a0,0x270,0x2a8,0x7ff75b684e08,0x7ff75b684e14,0x7ff75b684e206⤵
- Executes dropped EXE
PID:4796
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=06⤵
- Adds Run key to start application
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:2172 -
C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x1284040,0x128404c,0x12840587⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4632
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=07⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4356 -
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x4b4040,0x4b404c,0x4b40588⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4404
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"8⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3008 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:5052 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db9010⤵
- Executes dropped EXE
PID:4348
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4316 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db9010⤵
- Executes dropped EXE
PID:1344
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0xa0c830,0xa0c83c,0xa0c8489⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4784 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:3340 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db9011⤵
- Executes dropped EXE
PID:3116
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4904 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x20c,0x25c,0x260,0x208,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db9011⤵
- Executes dropped EXE
PID:1296
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:5240 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db9011⤵
- Executes dropped EXE
PID:5300
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\de932af914ba00303d4a2778a383ac9c831101e2.crx"6⤵
- Adds Run key to start application
- Checks computer location settings
- Drops file in Program Files directory
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4036 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db907⤵
- Executes dropped EXE
PID:4736
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1716,i,591902649835301236,9105539080941014027,262144 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1904 /prefetch:27⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5320
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2008,i,3101204459007502342,17369020176472830985,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2176 /prefetch:37⤵
- Executes dropped EXE
- Loads dropped DLL
- System Time Discovery
- Enumerates system info in registry
PID:5356
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2360,i,3988671325233465191,7870202031366857538,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2200 /prefetch:87⤵
- Executes dropped EXE
- Loads dropped DLL
- System Network Configuration Discovery: Internet Connection Discovery
PID:5540
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3656,i,7746736618106645153,6786358530865358668,2097152 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3724 /prefetch:27⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:5992
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3084,i,16009167547584283589,15190593770176169298,2097152 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4124 /prefetch:27⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- System Network Configuration Discovery: Internet Connection Discovery
PID:5548
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4464,i,18145830519281116874,2319114950560999554,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3192 /prefetch:87⤵
- Executes dropped EXE
- Loads dropped DLL
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:5848
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4584,i,4984167184880386172,3146941542241968647,2097152 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4608 /prefetch:27⤵
- Checks computer location settings
- Executes dropped EXE
- System Network Configuration Discovery: Internet Connection Discovery
PID:5644
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4904,i,12794702445505404288,13935408891183580574,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4916 /prefetch:87⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5624
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4128,i,4436235663142221183,2521497087499094572,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3088 /prefetch:87⤵
- Executes dropped EXE
- Loads dropped DLL
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:5732
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3188,i,13397872245579596349,10315300552972960946,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5124 /prefetch:87⤵
- Executes dropped EXE
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:6560
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\additional_file2.tmp"6⤵
- Adds Run key to start application
- Checks computer location settings
- Drops file in Program Files directory
- Executes dropped EXE
- Checks processor information in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:6692 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db907⤵
- Executes dropped EXE
PID:6628
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1820,i,12068214900637139135,16192210450548432347,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2192 /prefetch:37⤵
- Executes dropped EXE
- System Network Configuration Discovery: Internet Connection Discovery
- System Time Discovery
PID:7272
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1684,i,15811066348056000597,14352381349623930562,262144 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2148 /prefetch:27⤵
- Executes dropped EXE
- System Network Configuration Discovery: Internet Connection Discovery
PID:7284
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2336,i,12069609742098925606,2028835217447047563,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2632 /prefetch:87⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:8008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3468,i,16975361461901834739,11553881723889898719,2097152 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3944 /prefetch:27⤵
- Checks computer location settings
- Executes dropped EXE
- System Network Configuration Discovery: Internet Connection Discovery
PID:7860
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3992,i,13883102630391659870,8546107803828475799,2097152 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4068 /prefetch:27⤵
- Checks computer location settings
- Executes dropped EXE
- Enumerates system info in registry
PID:7832
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4176,i,6226576002644941822,16236559435029766984,2097152 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4312 /prefetch:27⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:7848
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4644,i,2303524701066035899,14501986484597553606,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4656 /prefetch:87⤵
- Executes dropped EXE
- System Network Configuration Discovery: Internet Connection Discovery
PID:7756
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4808,i,4743757484772236528,14715098100258546183,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4632 /prefetch:87⤵
- Executes dropped EXE
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:7496
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4940,i,15097123434617754159,7792468557886019470,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4952 /prefetch:87⤵
- Executes dropped EXE
PID:7424
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5212,i,13327736818257467857,11262420798696123900,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4892 /prefetch:87⤵
- Executes dropped EXE
- System Network Configuration Discovery: Internet Connection Discovery
PID:3852
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized6⤵
- Adds Run key to start application
- Checks computer location settings
- Drops file in Program Files directory
- Checks processor information in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:7748 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db907⤵PID:7952
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1924,i,6748851180754090664,11941542345582362243,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2128 /prefetch:37⤵
- System Network Configuration Discovery: Internet Connection Discovery
- System Time Discovery
PID:7512
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1732,i,2498724688818492150,7861420269183760785,262144 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2092 /prefetch:27⤵
- Enumerates system info in registry
PID:7500
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2396,i,7431412025753126501,18393258348268243587,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2604 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6064
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3136,i,17586281364157616510,15312996283096527775,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3240 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8120
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3148,i,10881680768684541310,2497342265737988939,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3260 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:8128
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3172,i,5917394627113432205,4949492644129631219,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3300 /prefetch:87⤵
- Enumerates system info in registry
PID:8136
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3112,i,18226820295964329270,15000305784976485545,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3200 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6516
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3184,i,8230628497878026288,16214958507944299180,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3320 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8144
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3124,i,12375790885457465243,3894888232161455753,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3220 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8156
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3976,i,663809868830561822,16143152171247270591,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3980 /prefetch:17⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
PID:8184
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3160,i,9936604821275928332,1030107634809329609,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3280 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6856
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C967⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:5156
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4660,i,14130627192480683400,13434723157774317687,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4664 /prefetch:27⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:7244
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4832,i,17409447651682673091,8611971313734810246,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4844 /prefetch:17⤵
- Checks computer location settings
- Enumerates system info in registry
PID:5736
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5140,i,5190212717993685341,18331949956494651195,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5148 /prefetch:17⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
PID:5524
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5272,i,4563442440434114995,8896819408932722027,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5296 /prefetch:17⤵
- Checks computer location settings
PID:5756
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6324,i,11347833432501459961,14683565707817337116,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6316 /prefetch:27⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
PID:5168
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6896,i,10180082513374934340,14968149997913103946,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6788 /prefetch:27⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:7528
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6804,i,13254380588619335313,14059601639344768438,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6860 /prefetch:27⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
PID:7660
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6696,i,4950825374279765513,12816165967900475503,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6388 /prefetch:87⤵
- Enumerates system info in registry
PID:6404
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7276,i,5920464390145925696,2410075011902800244,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7284 /prefetch:17⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:7460
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7336,i,6910232951756637586,6159296127823466583,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6668 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:2392
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7472,i,7564440194087690406,7218013966709334023,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7476 /prefetch:87⤵PID:4548
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7512,i,16107327602050731198,12214973228349808642,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7716 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:2868
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7848,i,15358371854098023173,8750203497876298852,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7860 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:7812
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7888,i,5673190039478272930,6416577393333115457,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7904 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:8032
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8112,i,12915007650433302551,10783823716131059887,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8128 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7600
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8264,i,15243261921400219409,15045428246293369123,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8312 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7340
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8276,i,5275114334897704502,16235942312771946825,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8340 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7980
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8288,i,8680368816136961628,3299013767812137515,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8332 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:7784
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8300,i,9020090083699949333,9822472825885053528,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8452 /prefetch:87⤵PID:720
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9256,i,13596945199840244,2771602770221303038,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=9268 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:2324
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=9452,i,8105276402916382870,6670208679403951887,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9468 /prefetch:27⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
PID:8072
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7312,i,1169318042098223494,8142677604848199104,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9644 /prefetch:87⤵
- Enumerates system info in registry
PID:8056
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9636,i,1569374744579091005,2446817405917701697,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9800 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:3852
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9676,i,17786083615821157764,4910979273718185662,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9844 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:7908
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9668,i,11138662168781882589,15537340340690401229,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9820 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5712
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10184,i,6630400232989257126,17835821488075963187,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10196 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7700
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10344,i,15337932121208392930,14903609385111350346,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10368 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6544
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9492,i,17541555633965986074,12155862509439763724,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9488 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:1828
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10356,i,8286593733364858830,7234927402062376517,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10620 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:1700
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10624,i,5768590719855725301,6267450766848202216,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10648 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7892
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F1617⤵
- Enumerates system info in registry
PID:6384 -
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff7508d0900,0x7ff7508d090c,0x7ff7508d09188⤵PID:7624
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe" --fix-taskbar-pins7⤵
- Enumerates system info in registry
PID:5152 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x298,0x29c,0x2a0,0x278,0x2a4,0x7ff75b684e08,0x7ff75b684e14,0x7ff75b684e208⤵PID:3724
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10992,i,16979189867541301923,11240579709382662993,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11004 /prefetch:87⤵
- Enumerates system info in registry
PID:5356
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11088,i,12314783400785509096,12723640207908568049,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11124 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:1012
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11144,i,4109410917014310991,1915144969716355271,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11132 /prefetch:87⤵
- Enumerates system info in registry
PID:6752
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=11424,i,18337457495259387479,12073015930786094254,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11484 /prefetch:17⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6332
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11068,i,11248687024501365191,8457153661757219622,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11044 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:4352
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11304,i,15821112627828055972,7663641463018408263,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=4060 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11340,i,4364559571295218745,11276756291535849910,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11052 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:6568
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11268,i,15872839941682771711,4723628805073874165,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=11048 /prefetch:87⤵PID:6840
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10968,i,16334248249940697421,3528011926024787333,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=8032 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7776
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=11300,i,13251001436762211217,7508647075817388442,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9520 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6424
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=8180,i,17668303552160323828,11347141872983144802,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8280 /prefetch:27⤵
- Checks computer location settings
PID:4492
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=11584,i,17738448310339334997,4846182950240333188,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11484 /prefetch:17⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:5924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=11376,i,12874181833454744334,5018929748708446623,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8180 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6228
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=7000,i,6879977033512153300,9815058791251225009,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=6792 /prefetch:27⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:6152
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=4512,i,326966416390410318,13651535029737569174,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=4748 /prefetch:17⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
PID:4488
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=3420,i,16559604378555281337,265322415131928074,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=3492 /prefetch:17⤵
- Checks computer location settings
PID:7564
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=9456,i,2903393140714727490,16070217858375971935,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=11388 /prefetch:17⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:4548
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4288,i,16008482167766994903,5572037037984496647,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=5508 /prefetch:87⤵
- Enumerates system info in registry
PID:3192
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7096,i,4037608411637626104,17433832216197247450,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=11376 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:3468
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11204,i,1695722676343102287,14990024069163769879,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=804 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:6176
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=4244,i,14319108538965242987,10613247262137635671,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=9252 /prefetch:27⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6268
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4088,i,11685921558116167918,11107982558669912504,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=4008 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:6852
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=8180,i,17795499899835345158,10911320000519476842,262144 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=10980 /prefetch:87⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
PID:8004
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5620,i,6916139027133119030,814213393601448497,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=10928 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5872
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11260,i,2676569823176033410,14183576379122716444,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=11056 /prefetch:87⤵PID:1712
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=4144,i,6514985958476028860,17520954999264044659,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=3500 /prefetch:27⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
PID:6292
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4108,i,15403298520316614108,18280280968909977763,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=3428 /prefetch:87⤵
- Enumerates system info in registry
PID:1760
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7532,i,4447117107357903912,4631502040147234578,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=800 /prefetch:87⤵PID:5004
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=3480,i,16379244951162222914,993231497341868244,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=11268 /prefetch:27⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:7340
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1596,i,3765312405738615340,15658951760800680329,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=4688 /prefetch:87⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8120
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=3416,i,147860665385447343,17768777039615149681,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=9532 /prefetch:27⤵
- Checks computer location settings
- System Network Configuration Discovery: Internet Connection Discovery
- Enumerates system info in registry
PID:6120
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4356
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe" --version4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1860 -
C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x1284040,0x128404c,0x12840585⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2524
-
-
-
-
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:720
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4444 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:636 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db903⤵
- Executes dropped EXE
PID:4440
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4936 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db903⤵
- Executes dropped EXE
PID:4816
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x224,0x278,0xa0c830,0xa0c83c,0xa0c8482⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1924 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4244 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db904⤵
- Executes dropped EXE
PID:4268
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:2760 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db904⤵
- Executes dropped EXE
PID:5160
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5376 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db904⤵
- Executes dropped EXE
PID:5504
-
-
-
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:6336
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart1⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:6708 -
C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db902⤵
- Executes dropped EXE
PID:6860
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC11⤵PID:7252
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff7508d0900,0x7ff7508d090c,0x7ff7508d09182⤵PID:8148
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version2⤵PID:6060
-
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1176730732\manifest.json
- Size 72B
- SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
- MD5 d482d7180f77c5c4a21a7f9a04cb797b
- SHA1 d06ba12c44afa7bfe7d3dc660a5b38ba3e200531
- SHA512 9393f8752a6e1e1f80e30a83c00ba41b8978bbc52e38aea4a03aa8ee4db2dd001b19b79da0ed96822ad5adfcb67bb5d91f9600b7a2f787a98153d9e8c1a3697b
- TLSH T1F8A02230BC008033388C0BB000328383A3B02C022020FE0A0E0B2080228823E20F228C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-as.hyb
- Size 703B
- SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
- MD5 8961fdd3db036dd43002659a4e4a7365
- SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
- SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
- TLSH T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-hi.hyb
- Size 687B
- SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
- MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
- SHA1 d0914fb069469d47a36d339ca70164253fccf022
- SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
- TLSH T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-nb.hyb
- Size 141KB
- SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
- MD5 677edd1a17d50f0bd11783f58725d0e7
- SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
- SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
- SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
- TLSH T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\manifest.json
- Size 82B
- SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
- MD5 2617c38bed67a4190fc499142b6f2867
- SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
- SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
- TLSH T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1414299440\manifest.json
- Size 1002B
- SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
- MD5 dcffff15fa618a53834ee4ae8673bd23
- SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
- SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
- TLSH T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1645256094\manifest.json
- Size 73B
- SHA256 ca7ea4f835bd9ed0979106a812def5e1867fae42c732690bd0e1877b4c2dd13f
- MD5 9bb1ec2a3a1920c72307805be44281fc
- SHA1 a798fc3d9b1e2c3e1de54924514ec70cd077578e
- SHA512 f52a3981f916718d6c403ea5fbcc744831b5a9c10f3033224ddcce970743c26608ee7ef23c9f94254966d1245250e5cf970ce1ae2fc35ad3b9d32fa2914765f0
- TLSH T184A02220BC00A0332080032C0230C3C3ABA23F0A280028000A333CC023EC33F203033E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1774652473\manifest.json
- Size 95B
- SHA256 b99652ef0510a22ae33bfc8c5dcdcd31eaeb08362993cb42d64861bc07169089
- MD5 284c57ae1fd42990e7a9a7c554ef13cc
- SHA1 b094d21f756a35f63d6fb8f3e0aac2e8231b3992
- SHA512 31bf49af1e9c3a4b5b747f4f906cffcadcc7e16240054f9f5381faa75426fa456db616ab21ff5875812a1b9aa5f95e8abb23b983bd42faf17d48f024524fbec2
- TLSH T106B01211BC007C7734C50B25413053C76B953E0A96323A4505532D8022AC739112451D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_2128780404\manifest.json
- Size 94B
- SHA256 95a2b0748baee70740ff2d5da78f98b5a29950562f989591f0b0b5bf13354b85
- MD5 7130a770ae4db8eebc02a87bdee55e4d
- SHA1 c27b743f556ce9e389cc8c33d89e590719d1f506
- SHA512 2efd8fa39992cb928b432c12117a868da26dcb393073a1cae51ea6c93acb28a7be7eb5c37007db0b8eb7e40a2770cf50fbc2728b059adb61694d4c49339bde42
- TLSH T147B01210BC49917318C107541131829347761D01601529038F9F10D036E823D0262608
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_341673782\manifest.json
- Size 145B
- SHA256 6cce5ad8d496bc5179fa84af8afc568eeba980d8a75058c6380b64fb42298c28
- MD5 bbc03e9c7c5944e62efc9c660b7bd2b6
- SHA1 83f161e3f49b64553709994b048d9f597cde3dc6
- SHA512 fb80f091468a299b5209acc30edaf2001d081c22c3b30aad422cbe6fea7e5fe36a67a8e000d5dd03a30c60c30391c85fa31f3931e804c351ab0a71e9a978cc0f
- TLSH T156C08C42E9010C6203811AA0011B438A83901C13A8003C04362309242B8DABF21705ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_905606834\manifest.json
- Size 202B
- SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
- MD5 837451b9bf5675593e66a3b58787a0a5
- SHA1 0d8c4631e5308fcc2abe2f1b9ce29921717d2bb1
- SHA512 3a746580453761bd2fd27ff6087193189e51845c8c4282247b0946ab5da91e60c134c1a75e66d271a0455704aa2f861e35f2b54356191704c343f748f47b741d
- TLSH T1ABD012E33D41D4F701985BA86922E10A67B92F0F5C47B41A07925049D4D9EB7347872E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\scoped_dir7748_2015393172\opera-one-dark.jpg
- Size 349KB
- SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
- MD5 fc3dafe25d5bc30a830ab92aefe52634
- SHA1 2e1bda9bebb1539aadf6a2c6ca33c3b9ac8865fc
- SHA512 d9ec9ad58ef765de7fb1cf737e9d287453005edbb5c47524e19938161c14b16b59084e9b91a2b40389c43fe9204fb9fd41698aee68968fb2fb046a4cbeb73829
- SSDEEP 6144:SXn5tlDpMtckM8FeR5HrNVvuxQiW3qp6gIQ7B/7SoK2RIFW8aE6mM+z:QnfMtc/RBrr0QiWc6TQ7B/7SoK2REafC
- TLSH T1A0742397ED4262D66B26D0F13C52692FE3066AF31728454B322424F7B3A1C1AD1FBD78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\scoped_dir7748_2015393172\persona.ini
- Size 217B
- SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
- MD5 8fc4f4bf76a946d682606a6be94a822d
- SHA1 3248c1d836e9eab63f0b647ed3249af2dc0e342f
- SHA512 5301c9918ed28c51ffa1d06796f897d7d7df3954a339718647aff9d11c7c96fb27fe1cb0fc7438c5ae1e86cc9a7322fea7b41b646ae03a4d51f70aa4bef6f488
- TLSH T14CD0235211470321D103D7D920717ACD56B65168C604539C03EA7093F2472559592D50
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\scoped_dir7748_876230638\opera-one.jpg
- Size 194KB
- SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
- MD5 c18898ca5a97bc5807f3be336fb1338c
- SHA1 83fbeaa1c4a4b69599cc6eb08f8958a6908f6b32
- SHA512 f7163299688c9fdaae8882c38e5992cd23d90f48a6d36a307e756794c6c0541afbebf12b584c2e03464008e2e4927e775e57e3f982e412206b7d9db271976a93
- SSDEEP 6144:bcztf14vie9cI/+1YhN8iuRIHN2XT7/N7:bcpfmiscK+QReT7/N7
- TLSH T10014125012852B6BD4DE763021AF362DC703F5BEC63E94065180AC5BD9CBC931EE7BA8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\scoped_dir7748_876230638\persona.ini
- Size 207B
- SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
- MD5 a2294db65c800d2e518ec4943a2dd187
- SHA1 02e293150a096b6342d1c39ab57b27d5c0c8cd7a
- SHA512 115c2d5573795136eaf70cd9c89478d3b1c4dd95aa7189cfdf59319cbafc7f90a01e57c34050bfb24095bada13db3bae26515a1d4c2479f646ae52851dc41f53
- TLSH T19BD022A621820222D203C79C207173CE9AA692588A1442AC03EA70A3F21B2A9C297D60
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 1KB
- SHA256 71ccd39de69ec147afd8ad4337a36829dcababbf40897250380c7770de551242
- MD5 2595e903fcb3b99996adb2cc2bf504c8
- SHA1 89954e0577e83e0008d58a2dc6cd0aaad2972a62
- SHA512 71a76aa25ce3ea545922ad9cee54cd3fff4c971ee4e5ddf6aa4832743db48da795ae8e76883cf5e5acab6818e8aba44515c72848579c476c54bda2e43e0cac35
- TLSH T1CA31CE4EA2113027D686BF72D8CEBE93CDB033476BCAD05B18455E8229AAFD11FC81C5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
- Size 528B
- SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
- MD5 047f3e9d21d6b325d592b1959e4362e6
- SHA1 5aeef5f985171cd69da397fd039854e44ebecdd2
- SHA512 4523896ed4a03afafd2075d8c8947236d34fe1da2c246a3f90c2be2a5c151c18bc58a6cde5a209abb8e06e80f662e24d0149640b3e98e8a872bfa8a04ef592a4
- TLSH T147F0500990082252C855FF55DFD6AC97DC76336136E595036D458E410C12F96AF950F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 471B
- SHA256 558d78fd838f15faa2c4353a2d7c71ba4eaa4432e14ccb6fdb4ef49cc2e97846
- MD5 1ae7bd53cb077960b8b22b81469d15d9
- SHA1 4a0460d5de4a2972b9b49a75a595db352726a34a
- SHA512 c1eefb405fec378fee43a98b7e773008e43cf4ba77564000039de48b54c83f38a0ba3f37747c8cd2fdf9e60faddca0cbf40c65620a1831d266924d630e228f5e
- TLSH T1FFF0D49108AFD091158115CCC8D68B79787055F920C110CDD92C49F584569BD2F96C3A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 174B
- SHA256 d1e6068e2db3b9d532c0061f356634c8f5f5ba3590eaa58a9d52f1a6a2f66408
- MD5 a275b13ebdacdb067c8073733a132a4c
- SHA1 a420c3516473a3f8fdad82813999c79e82e7340e
- SHA512 2f347c5a51c6d26377c9d6c6a2eaa299d61bf58e1c35ac629d6e4b2e8f565fa40ea1b79116fb41f64c55e5660df80eeebe4b95b9e49af0cf1158802260f5b00b
- TLSH T126C04C1177215725F1104ABE169659510AB5D6468A5283580F74321C642A9818CE0D05
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
- Size 170B
- SHA256 8f5a2c151a5f08defd1d9ada88bb19241bed4844c30a0d6c02dab5202a4fb04e
- MD5 5bdfa7b3c5c9b89fb9d979fb7025d73d
- SHA1 30002c00f885a283b4b72a405826f06c42752304
- SHA512 ce08d00fbe86efae4d51c99e9d216d79f6c39e615b8cd9ac75e6c9c474f4fa0d44888803d3b2f4be72ea37ee196f62e9cb416e47abab182fc7948474625f38c7
- TLSH T199C09B5473654716F14D153D79D5160557B54109F5C6C3044B7811349528A440C71D05
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 416B
- SHA256 1f749aee5ce6ca300116dbdfcde79a362b305ba0c37e14b496404f523ccfb7d4
- MD5 5b7f66dc628e512979761dd3db8949b4
- SHA1 eda2131cee4fe5ffcd9e6ce3cde2e20a8b118cc2
- SHA512 df4a8ff8e2a6c69f95548fe806eda4a8f487d0480123377f645c461a6b493eb8e863dd0933f6d442864c7341db9230457df50de6eae55815a24223e223a87671
- TLSH T154E0C03811F7816EF5F4D4745BD5B9351D67F036052892F40EE817047707A40BE52A35
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
- Size 44KB
- SHA256 336041697f52daa163b35e3a6c94fb0a2555c4e51df716239482cbb0877e4df4
- MD5 0eb73009e9b77f0fca3786fc4d5753d5
- SHA1 fa38fac773e1a5126c5197fdc13152767db4e7c8
- SHA512 b2a2a2047ecea926de02b58a2402aecc3f60dcfb24e3aac8e3916bdb5d8d7810a1174b8576d3cb66f807d9de57280c36e953a7c5d655e8b83fb0785d1533e25d
- SSDEEP 3:MsFlTlrllkl2cL9r3lllUkfl6MiL9C+L9r3lllud7t/:/F02WrPlUkN6N3rPlud7t
- TLSH T10913926C5DCF0847C7120434208B47F02B20CE2081274B030121AA2014452010821803
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
- Size 163KB
- SHA256 570566c7f03332ac34cf86e06af443dae4751f498a9284b3d3efbdfbe077b6d0
- MD5 2fb89d45c891bfda76904456c8640925
- SHA1 e21bcc4a2aabbc5e7ffb22b3a332db9807816699
- SHA512 6112e4d21fccc1f1f611171c6c6f4bfda8220b7a9b30a1faaa57fbd39b62c46854a99332a8253c2eeff1ff41ac217e7f619eb178dffe56f7142a8487d490d007
- SSDEEP 3072:DSF51fN9Xch1Lk8efLd43QCdVgEU3tzpxzBwDG0SAxJBFdAWSTqi0+h7Etf3:2F/Xsk8efeQUBEdx1T2vBDAWSprh0f3
- TLSH T15EF312EB14058FD78D75367222CAEDBC41BB3622EEA2709CE217366665F4B404EBD074
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\132.0.5905.102.manifest
- Size 227B
- SHA256 3070fbf02a93efa3130659d65b980d8bad2ebcbc3373681a803bfa366e4db2b3
- MD5 4120b163e90601f19389e77e9ab34ac7
- SHA1 1addd0464e0c423f8dffe05671ce0d55dff2ce2a
- SHA512 74bf72fe643ae42e410d13ce90f3b9821c237a859e26e22255190ce1b982fbcc86f375268a2050fbc2c9a01d42a260b6186972b40e84faa89c9af7c5dfcc819b
- TLSH T1CBD0230144A5331E9B3191303C5E20017159C77745DCA4CC70FC7C97EF6365495435F4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-100.png
- Size 1KB
- SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
- MD5 f4d70bc86e8544d7758742c2eba89d47
- SHA1 5df4635794ab25e2f88bcf8ec39c19a09383a029
- SHA512 d20cbd543bf97890d64c07f9e99188604f4dc5def904ad74229a3b1d9d9a06fff93af711c99a178799e9de472d930aa52a0c154f0d2953abe5ffc3cfd1708ab9
- TLSH T11811C840D668A4ECCCCD5DBAB2BC3893D7529C198049B1DB4CE1E8E38C303050976E0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
- MD5 7f69f89f11fd675b36e8de01de3c29ad
- SHA1 b91e00e68889367de138ffa5e7fb3c9de2a18467
- SHA512 06c162296c5ac62429e6e5dec07b836e6053cb4eb0291d8ed904f71cc42352c134870ed964517d2600f03fd7cf3821ee877ea83a330c9597fd7d629f9c2a6432
- TLSH T1081184F6422D2D1DF58532B16EE55FE299A82B2535D0BA425008C1194E2B512C900180
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-140.png
- Size 1KB
- SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
- MD5 a0076d9b3db9054267a7c86c9323aea1
- SHA1 22b85aeec3e3804fe1f6e91d5a9ac1c6a0153b6c
- SHA512 8fb750bddea61501f8ce2b0d0c27d29f322c9f297777f26b1401696c836c844369a9f6890bbb9827682deb70004cd98a973a0742d2d218f12a9fc3c301f10985
- TLSH T10121F84FCC2CE4E4CEDD49323C15A326A33021C950036F8A99CAD3F2876474C68B71D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
- MD5 f601df01a867a51514ea89ac9bfe9b86
- SHA1 827cf9859b7b1864236cd1f03e8aa40758285e82
- SHA512 2714e67298058e8fdad4459cfa17e2c7c67353bbfd9ea850bb403e669ae085ba579c31f7d64889470a97565719342e6a30efe2f66566783197194433aa947600
- TLSH T1DE21B45BA702048EC2065E3F4D54C81B6591FFAAA3B3DD4B265303B0A44217E18E76B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-180.png
- Size 1KB
- SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
- MD5 0a76f51f6169a31402ff7c61cfd05161
- SHA1 843a32d6dc0d5b9d97c5f475f96e49852823a103
- SHA512 7056949d7aa9cc4c96f9c13d656cfffa9f9a49ca78f6be3037cd38cc1d8712917cc235099f24723bba26fc9ffdba015480309d0418961c1116dbe7b65de6301f
- TLSH T14A31D8C629E310F9F9FC01F501126A6CD7C095D41162215B68CADDB42CB37257BB90A5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
- MD5 67a0163cd9753e42360222a17173f593
- SHA1 e4ee5c2288cbd5d354aad1905b917285a3daeb92
- SHA512 87e69e15ba6dee402dbe5a90da864136ec2c6884c204a567ad461e0181e70514f73a7df22a47de63d4829fa937e56fc4c08cb6c5268313f7b9af1e7217d81f47
- TLSH T10F313C6F5D568577E37C42BCBA7085F5D325B31C400727106F34B2983814E5521A89CD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-80.png
- Size 827B
- SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
- MD5 95a8f1834d8da00ad94c0cf2aa09853c
- SHA1 7e830e3ef55b4d7b9a18ec8c151bebb2c28f0069
- SHA512 c89be6e503c26efd4eec12c77e091570e187ff64928cab01f6f873d9ca3769f019a1724f76b57c9d4038495e29cc4106f919082913323af1ece7aff820c828f1
- TLSH T16C0120FB28489DD0CEE79271529CC55D9BC259065A80D0F7D2E9D8C05D33B49E678810
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-80_contrast-white.png
- Size 799B
- SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
- MD5 3015766c5ca769e54009f167550f7389
- SHA1 0eff02455a1e0fa1724bb1d4333c3d24329f9e9a
- SHA512 7ea7495163e0246f78f88dfd0ee72b8584108c286227d70cec9de125747f21f2618f46f7197f7cb9c0f40d297bcc3582cf70f54ebf7f9eb10941fbaa6bf0149b
- TLSH T17B010AC8D032EEA5D91788F36CA24FD59CEF42F000181B2C84A880913C030D6B03ECA5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-100.png
- Size 781B
- SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
- MD5 ef710f4543a25076078fbc1c09ec9e2c
- SHA1 e4ea1c2cb24cfff03569dab28877d11f9c6cfc74
- SHA512 fc979d06806a69da71336533d96b1cb66b227064a224e23c6f5bf9d1fe4e85a9d9546643ce296ba5f04c025284d5ca2c445c52695aae669735a2a5b48ce07a00
- TLSH T122016002E621E8FADFDE023E322C446D4725035AA706BA1F00C6F8A72EF0B4820B7049
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-100_contrast-white.png
- Size 752B
- SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
- MD5 ae8eecb8db4d20efbd816b887ef75840
- SHA1 1d0cc741d0a75e5e8ab51dd8b6a99f5e679ef5db
- SHA512 0cb71eb86ab2c5d4c70f04d7b10736aa453d51b56723ed7c9dc332f92ea428eb7861f23da2e30416bea8cc59877ba2c87f3032ea473028a7df8c6a299d517572
- TLSH T13501B5E19CA5D03C9D59ACB03820317AFFBF65062CA02F825474762B2010CB538E50CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-140.png
- Size 991B
- SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
- MD5 9590b4bd9378a2d8706dcbdc630fae8a
- SHA1 751eb2aa5ce4e83133a73fdb9efffc013bf37ec8
- SHA512 b2666efa916584c9b090e305eda116f2a90c58862fa36a0963176b09b493a4ce5e601a178c74be0f2e59811ad42cd1d5747e8a45ea07c3f5d52b28e177fa5603
- TLSH T13C118820BE023DEDEAD89D14E139505E86042902332860CBA0E5D4908EBE79044F095D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-140_contrast-white.png
- Size 865B
- SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
- MD5 9b103e9dfc26dd4d837df8ab55ec4fb8
- SHA1 6f46830a3a63e0eec923bccfad57d8391ac3e559
- SHA512 e8023067638a9fb849ac9364a45c8be9a6dd325fbc704d960cf270ce1075ac6c9d57b7f96cae62985e92e5543dc2f2a43d473a2dcb0060af067cd474aab7e59a
- TLSH T103118AFB1644C6ED594F572F50DA9C51734B8A3B836E80189A3C869CD190F44CB77ED1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-180.png
- Size 1KB
- SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
- MD5 7ab03a8ba1c0243b96c4124cd5341073
- SHA1 7de490dd37ebed58337fc0db654f12398e84a78a
- SHA512 c96846f008e8ab440009bf2442a2cb9db3d24452619c8c2b669395f971f9a316ec62693bb586a94e565f1cab893bf665112c34cc1fa46319e571e3fb4d2fc41d
- TLSH T18021E7612B26DDFBD7C182F1913B4A395E1CD582327461369CC2E1623C3772E1271248
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
- MD5 1521be4b8c8f2e0ce20a89f163de3909
- SHA1 c291448b74fc3d7060c1df4b35026084981ee441
- SHA512 6a0781d275dbf8fad4ee464e759de74399918abdc99cef3c74e5d66a0d555a8bed363da964c15e2ad9ab3cde5a17d537bbcbadb10585aa1ef50f0b614fc39a50
- TLSH T1E011BB5771622D70C791577F5868F505DC72D33134A18DCB5CDF29ABD0C62B4449C242
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-80.png
- Size 590B
- SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
- MD5 1b4ff26a106929e3a5710900a9d984e7
- SHA1 d3e1bb4fa64083743ab56ecd89d586df6b583bce
- SHA512 d8537fa3b0da1b2ee7c8cfbe9101a7dca624af4532305e06f211e4dac799ae9b533f19d3cdf052352e2a926bfe32cc908cd3944b2543010e7baefe52697add92
- TLSH T11EF0E16019445CD54FED19969A3D4F30EE5034155813BCA70DC2D8369E2634598B260D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-80_contrast-white.png
- Size 519B
- SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
- MD5 169dc90309162bbabf07ac3d954a076f
- SHA1 a4c87f029a4f34d66847271cdf8c5e73b1e48a90
- SHA512 b7633c8faa5614efb402c47957577dbacca1a1b3fd0bb39cf79eb3a06ec6a55f9b8c5ee9569271efbfd7d43ad348d275c0c6c9faf840663268bca2fbc6c64bb7
- TLSH T1D9F075C360D1ED222EBA2004E411ECFC747A11985B439885003B48BF7F77F20A90B088
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\assistant_package
- Size 3.6MB
- SHA256 2a06f65f1e02d4734080d0a4efcb54c0ac18e7e8599a9f17cd7f2883ab9ea53b
- MD5 2a1beb9f0ee3906a797ab98fb6818bae
- SHA1 7d62bfb489cc54b369d65b2fbdbfb31f1ce3e62a
- SHA512 779d0b01185660d5932c6af9c6936e335dc30c8473cb73e734b01fdaf0a09fd9cbb406e186a4136961bffcb442a6caa87310efee95478b8625488420e54328d0
- SSDEEP 98304:jkioIqvESPJvKOCt/t/b4HdzOJd52xkFQRbi4CMI60u:jNqsSwt/F4HdzYWkFai76X
- TLSH T1F80633307F4088B9E63722334CD6BAAD50FEB3611B7B59DF37641B5D4F901828A89A17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\d3dcompiler_47.dll
- Size 4.5MB
- SHA256 abdb586aa4b6ac26c01f78ea8e8f00d2a8c3cc4292ac5d79bb7a616e2dffd251
- MD5 182da8b75823163de16189a1391a5b9e
- SHA1 3a675dd71cda2330fedbc9a427fda83be24812f1
- SHA512 0f1e5353bad390ee595e53ed08b1bfba9a635b13146941027e725860669c49b6e3ea415bb7cff855cc0b3e08a37857a8a3470b3f961920c60aa1cb5ef0bb1e71
- SSDEEP 49152:y6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/q:yUdeqt737jFm5wS
- TLSH T1A9268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\dxcompiler.dll
- Size 24.5MB
- SHA256 1b3f4fdcc71a604b3baf7e177803b924395dc794f8caf2875990d9df9b65676d
- MD5 388f69450c10a379d27d459d22c23b40
- SHA1 f6e24dd0d32ec7dd37c36b4909c1ab0f6726c5c5
- SHA512 e8c34c4c27e132438a49b9d134a03d212cfaad73a3c589f7e7727bbfd49195723168045eebb623ea914a5f9680addf052f2d3b550cc609dbe12a81e25ebe98fd
- SSDEEP 196608:/t4TgJsHwvs3qKdLp3YnqfWBF6f0WkaATndCt0o08+VmeQ:/S8JsHwvqF3YMW/6MWkaATdC6o03meQ
- TLSH T11E4729122686D49DC059C879C7678B26CA6C30E73FA7B9DFC0F451252B79EAC1B39234
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\dxil.dll
- Size 1.5MB
- SHA256 41480abe82ab90c751269f69b43e73eb996b60c9075d18bb41d375fe3d420c15
- MD5 de0b7ab754658dc33814b3a194f79ddc
- SHA1 ef218e874ef2b918b392ed7b527c907ad97a602a
- SHA512 d52df013949cb12bcbfa0f80bd1f458f11f8a648536145d7060470ba994f6c108e4985a0e7a34773254e9edf372f67d111c2fe2dad2eb44cfc9646ebc54e82f9
- SSDEEP 24576:8cuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/z:8sHMPzbOxBduHdSCde8ZF1/0Wy4oV6bS
- TLSH T184657D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\files_list
- Size 6KB
- SHA256 1302d363ddf0c77c294a4b51e17a12705c7512691ec96b3be5aeefa4544f8da2
- MD5 b3223c4eb958e49603e5b226ea464f73
- SHA1 a0aa7e69be7f9bb62a9397849e78a7f9a9c18a36
- SHA512 8420af38482aebc83380b716134ad9ae63bfeee462689dc03dd8b83e7c4623968cdc44f742c3ea2f6709e3276f21e1b5710fc11d143e41ae5b24af28b51256b1
- SSDEEP 96:QMyTfz5XZyITJhGwbx7Vt/JnZ7vMbngEDi1JZJiAORnOU:dafz5XMRwbxHBZ7unmvFORnOU
- TLSH T113D10697895F0265CAFD93F1EE61F89091342495EEB83058F7C70A5694A33FE02C9ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\headless_command_resources.pak
- Size 2KB
- SHA256 b3175eb086ccedcddd282b5847a23687a8a8ee37bf485851efc36a7600a2acfe
- MD5 282e9726ad68922e49284993ec81aff6
- SHA1 d72cfce4db93696dd0ed96edeaf146b5ed0a398d
- SHA512 3f01d1f6bef25c19cce516faefd675283a6e2cfee0f5d863ab69f14abbab2d961789b0f3a749270c511c8b08bd6eb00dd6fd700aca30929139a2c6fb441d1111
- TLSH T1AA511893360AB6A6C079C72891DA9A7C6BE58325748DB9744EB70C33E9384A345C2871
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\icudtl.dat
- Size 10.4MB
- SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
- MD5 f50c621247b8ddd574dc9790830f28c4
- SHA1 ea84f3a773b5b90851753353826fcdf94576b3c1
- SHA512 030df4e2c8f0354a97ac6a21774d6bab1246237bb71cc286b1a310b1a7602dc31fa056b8beb1157ac71b13d3744cba0fa71ac807e5f69fcafebb3cd827b553df
- SSDEEP 98304:nHcBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndL+j89o:nHcBhORok2HiXUxO/RJk3IWhlYntjd/o
- TLSH T1F8B62803A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
- Size 8.3MB
- SHA256 67f3216dbe076cecc9e8f44dccdcedbd4e1a0131c4f485e5cc31384e3f566f55
- MD5 2827634b59e8f543ce914b69f5cc7018
- SHA1 0de3664025271219304423f9c31ed0ea3c71d05f
- SHA512 ba8af84a938e3d39fb5e417fad0b8d9fa45d2d07f44131badcde0e918b430387c2ec852aa0645bbcf80a0372cf4e6d9d34cfd15a4626532437d86c77f8e27fef
- SSDEEP 98304:qWsGCxm6FLKnSTz9R6PrBZoTvDAkhZ5k4jMhhYNY8AFO:VjCx1tKnStR7MHXFO
- TLSH T166968C53F3E601E8D06FCA748B7A523299357C564B30A2EF0A943A251E75FD46B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer_helper_64.exe
- Size 652KB
- SHA256 fe3856bb87a7210843e1c034c5ee97ddfaba373833253dbab279854e2a55e6e1
- MD5 f0132c045d3c215d390f14c78665ee65
- SHA1 44337ed29d03f3fc40c2fb5db789a989399b67a5
- SHA512 fa3c89dc12f17b933f4969729c4342bd2cf03757b973d840d6d17938c5667aab742e39fcf9596c3f23bde38588c8ce09c65b1138c042e15cfbb98ceff1ac288e
- SSDEEP 12288:VnaQAunDzFLRxxphcxMN0KGOitkhogO4d1:VnaQAun9LxsttkhZd1
- TLSH T1B8E48D12B2E545ECD039D1348651C522FA72BC570B35B6EF02A4726A2F7BAE41F7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\libEGL.dll
- Size 502KB
- SHA256 f3ae511d55fa143e21a1b1aceb0bd166a91542c94f84d184f3438debb34d7478
- MD5 d21f7fa8a0f11a6d4bf8fa2c803366c6
- SHA1 f64bacf060cef3c31cbaae3d41ea6ec731f02c58
- SHA512 890d5371bfb97c9dcd30255b9f50c2613afa3a152137bdf6ca51c64806840d54b86fc27a4383338cac03e4b2597282ad9409208dd507a02ffe9369ac232f8e07
- SSDEEP 6144:m+feWkJis9xp27cVw+7OtfmccvGH+7UwhhnN5ovG5Mgf2:mee5iO2IZOtfmccvG+7UwhtNKvn
- TLSH T1B1B48E05B2E94AA9E07BC134CA438547EB7178560B61F5DF03E0A2792F77BE41B7A321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\libGLESv2.dll
- Size 7.5MB
- SHA256 44487957fbe24a70730727a87949bc60c4755caec58c7a2205f45e13e234b64a
- MD5 87116b9e560d6102269985e91ecb5427
- SHA1 0b2068429b721d932a016f6ef3918beebf387230
- SHA512 8732b457a49bb2075ffcbfa09cff50820a67e373b14af0f0ef0317caedbdbccfe5ebe44f2e7c4264b010fe5761aa45acd159914dbff1d596ba235f1b1501768a
- SSDEEP 49152:MEDxvHeSXtnnCRce/Qq0OYnmQOQznnwpbzQp3IQB7lHQjUnUwRe5jTfsYe5bB2Fu:n9XtNdnxpYTfIn2aW3RS2b3Gnadeus
- TLSH T126867C13F29280DDC01DE2B4975BA223F674B8450764B2CF2A9857163F76FE0AB7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\localization\bg.pak
- Size 1003KB
- SHA256 714c1097aea1961094ed436af43c1a418802c50f8671940731e2b37519f3c403
- MD5 c4787ec11a7418a3ea376b72e17906ea
- SHA1 7aa077a24bd9ddb926fb400b667cf395074904c3
- SHA512 03b90482c02cf01dd0adb5757f3dafc0d03c85e4f7ff5cdfb15dfb9f996600346955cc6864a88d4b9180d7bdf535edc41f1d222f868c98e688d62ec82780c565
- SSDEEP 24576:VGx711KTkfb/JzojvGGml9cICdBBuK0p6g2HH2CmZ8vYAgCzQkECKU+Vb6mYkyit:VMxDbAG5KdBBuK0oH2CmZ8vYAmhU+Vb5
- TLSH T1C12525A15B9A649F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B887BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\localization\bn.pak
- Size 1.3MB
- SHA256 d64489385fff780a708c05377b108993f97f022d2f6e45b6687406592cc96f62
- MD5 ec923d884b6ce169d09327216ae9e48f
- SHA1 af47a70f8852dd0743ed5de0049dff865f75ca70
- SHA512 093826a2142e9f50463b478126bd8a2f3391e41af2475b9ad74ba64856f49b26c023e2eca0e0081196334839d239086ec2d78f4e984a4c3bcb8acab43260c9e3
- SSDEEP 3072:gSTgGAWQoidKupSEG+X+BKD0i94zHrsQwAuCn/gmRo71UdhZNt5jzIImmtgvUPDo:pAWQoiCECH9rDwANRoUZNt5jzIIK
- TLSH T16A55EF209C6E81B2A8D5CDC9434C6370C123AE979B61F74DDC17A25938ADC3C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\localization\ca.pak
- Size 630KB
- SHA256 52898021b433dfc59834a1fd51feed1285fd30525ab19ce72f360038f4d77463
- MD5 99a6c298dce630e922414b6f670bfdeb
- SHA1 6fb19d9cce9f07c56193724abf859b80559156fc
- SHA512 bee5283fd8cc859250dbd8288ce5b13086edf682d9790766d88a06e4ef48611090b2c04af75b17f6471fdb1364778d9b8e0785d7736d108d7d0212dcd629e777
- SSDEEP 12288:Vtvtv6GK7G6ybGbf1bCCrz+W58rPklpt0bnitR6M6EqHl9kvkcBKMe3aRYUX1BOW:V1V6ku/KBKLzxJQyS66w8BhetKj0NUo
- TLSH T16DD4F8238BC83B764493330AFB42C257F08CA9847B16D254F5EF1A5622CCADCD677A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
- Size 1KB
- SHA256 108867f6d7fcfb1f3e29cac59190abfddd6c17ac4c50a54aceb7845c5baf85a1
- MD5 e7db69e1e8afa7c70241d3163d0ea09d
- SHA1 57a652166825cc2849f4133eb1a0f2c196803e77
- SHA512 b123bff83f1331891890a25e69182579d38544accd25d1791d3af93d197c6888768d69390a1458e80aac5e67e8a6dbd719a54854ea77a2ba4d88b44009158b11
- TLSH T18C319650801750777F72E35BD9536B5A5A070503D82810E4AAEB0A5D64EBD930B6691B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
- Size 2.9MB
- SHA256 e0a97dc8d997226f9032c9903c21f113b3f66680debe47044d071fb5e8adfd9e
- MD5 eb2c32a0515b522f3e2e8d43665514b7
- SHA1 8d2c779b9d19e97ecafca449f1416545904bc101
- SHA512 3503d3b50219bb631a147abb07f74a9f406068f2e8ad2ee40cf6dfbc55be4f3c5beb6764479b04da69404fd311fd649ff2904b27f6be3fd6380c2c4363fa6edc
- SSDEEP 49152:PcD6QN78RDWi91TUg1rrH4LGa09zMgiGjUIxh2tHT9ghaps:EuQpg6i7ggZTog3SGJ
- TLSH T1B4E57B53F2D910D8C01DD179879A9632FA62BC454B31B6DF0A90B7162F7AEE46B3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\Opera Browser.lnk
- Size 1KB
- SHA256 9030a834cec9a4dfb81a6eeb4ce56c304b5de417303d3c354d045326affa578c
- MD5 17d17846166bc8289c12730762c39c33
- SHA1 2594c6e4a20a84380e3573ea7467676b0a7c7c22
- SHA512 1cb02abfe1585bb3c6cc2824e1841c31fa77773a87ff308cf49db2ec23122292c90763f8e5855397367bcd877da7c8313452216597bc33620dafc9352f7e4f70
- TLSH T112210F662FCD3735F3BAD87484B22E6202BAF814EB4B9E0C111083986C35646B488F1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\additional_file0.tmp
- Size 2.8MB
- SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
- MD5 3b028b1188ac321e66add16f8ebadbec
- SHA1 086bcb2b1c0d300be15c1390841aadadcec4eac7
- SHA512 17c390e0df8e29ff9ad43e581db298ada2d8378fbb890dc5f4b17df8fbe21134f99ab203ea4752a419215d289c128a1d8bc14721bde80042e5bb4c3901dffb72
- SSDEEP 49152:+kinoIZOrzV7AlDfo7eT/uAtH00raHx774jx4aGhcr0glyGIGE1HVyVNW272DS/Z:+kiocQzV89Tmeradk2ha0gdIT11yVQ2w
- TLSH T167D5233275A48C34D62312321CE0FAEDA5BE72701E6347DB73A42B1F9EB01979A1D562
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe
- Size 2.4MB
- SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
- MD5 b0408fa2a406f483e42c3ac102d35e9b
- SHA1 fbaca900ad54abc65ec2cb34d63727c87132d16b
- SHA512 2e8b9af626fff68ecd0204d6a3151b4518749143ec78a2f8f99f959399d1c8ea59987f99c38c9e48fe38b518fd8c91381356daf3f17944fa3432337b882e5401
- SSDEEP 49152:wJv8lBbu91xwyiZSwRDzWEibQojjHLQDpizF:wR8lBbu91xwyiZSwRWEKQWjHLOpc
- TLSH T10AC5AE12A86094B5D8563132321DEB3E9A30BE1657354DDBDB90BCC1BBB86E2353734B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\dbgcore.DLL
- Size 222KB
- SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
- MD5 b26ebc5cde9b1726ee9f9534dd6107d0
- SHA1 de00af3ec4de63a158bcd50c6e95b046669d3353
- SHA512 2e01c65b58369c1f5f4081cf377c3fedd87ae5fca63cfbc44dd7859a1e10a849d1bbdbb592349d793166f577dbd954cd8660f625dcbc9adc4d936d6a44f062bf
- SSDEEP 6144:FASh0NdOEQzFh0ekr6nzwBaQGdppLIg2dFl96Fl:4MHZn1n+P96Fl
- TLSH T14C247C2269401533DCEF12F062AF363A96AEDD90239490C359A05BDDD6D4BC12E3D6EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
- MD5 021b11c0fc1a09e49a2046ef07d1747a
- SHA1 4b955c1e7150db4f07528929fc529fde9738a2b3
- SHA512 6ca94fdf2b92928859152aa23f31df46944eeeac7988f6bb5d647341843d8d2aa91c2c810d17c8b58a03c99e4ca7d7e1ae6b6c2d9ea5029616d870b89794d6c8
- SSDEEP 49152:xEDlXSohR86M5NKBlv/2yOFVnzM9F0KM7:uFhR86MHyl0fb
- TLSH T128856B20E784813CE4EA1177E67C7A7D85ADE524073440CBAAC45BA978297D32F387DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\installer_prefs_include.json
- Size 239B
- SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
- MD5 d89bea9bbcd4817b77b7b90014f1da87
- SHA1 21cdef3b05e461f645e198bb92f7c787ad0372dc
- SHA512 70f794b897b35a6d15559a05cd358e98d2887096c60f7cac5c2e1d065e1a2c39618d64cc81b9fc2c3380075705441c3856b0df03eb6feb4396e8558ab2b1cc96
- TLSH T1D6D05E59802AC0E269B00287783633DDC24B1B0288616899B3C72125806DAA226EAE1A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\installer_prefs_include.json
- Size 1KB
- SHA256 929f2a1b2371ca8564ee3ffabf6021e2868b54227c4641ff36b14ed4ba3c206a
- MD5 855739524c643843fedff7d303261da4
- SHA1 946994a0ab8cbff4b645acabdb7d235c5df94ae6
- SHA512 fa408e7cd8580c978e9400006c1d4e7f3b8c97738e1cdeb545586f4d8f0bd898f27fbd977b2356230a74be5852cbda50593e8f33b637b57478395576d396e9b7
- TLSH T1B41196A44056E0A367B2D21BD9772B8AD9074603C82814E571C6086994FF9620FA592A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\installer_prefs_include.json.backup
- Size 224B
- SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
- MD5 a31327ed38a2e2aa048700169e5c9e89
- SHA1 cee83a9db48bf9c0d963bc6d03cc125af5cc4ffe
- SHA512 b302790a45f5cefca7131f81d2d15976d402a48147960dedb5eaea136205c7a5e04635521f08c63f7ab53f1b9dd283e575240076beca5f392f47f0522f105fef
- TLSH T195D0A755802BC0E365B00283783633DDC20B1B038C716899B3C71125C07DAB326E6E1A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe
- Size 8.3MB
- SHA256 127384a7702d51649f429b462e28f75344a528eec7aaabb60151912fbb788bfa
- MD5 b5231965737af58f373eb24b76adac1d
- SHA1 e4f08a3a12f97c71aac606738fb04657b2c5641d
- SHA512 551621c632f95ab600061152fc6339472b4b77e239daf724236af6c42666abe48defb38c29e2bbac63136c9de001ae08abcc48805cfbb12273e51595975c7b3e
- SSDEEP 98304:MWsGCxm6FLKnSTz9R6PrBZoTvDAkhZ5k4jMhhYNY8AFp:DjCx1tKnStR7MHXFp
- TLSH T1EF968C53F3E601E8D06FCA748B7A523299357C564B30A2EF0A943A251E75FD46B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
- Size 3.1MB
- SHA256 ebcb295fcec89a70169ba86e4708613156a09358c4fba995396e21a5d9f54f72
- MD5 4b228001046c643d45a2a73bc7827ed7
- SHA1 936792002242d68ddd3be47631dd93fdf5d1bcfd
- SHA512 97ca1db54fdcc36a606139a796476f8785c7b1304d82147e17d55a7df67a275081bfcc0c70e105330a4833d99a7e9d86731f13d1429a616e4ef504f2e92cb224
- SSDEEP 49152:jVAbwqJT7WwvjJVXLFS2VfznzmwP//fH3lzYcIkvCbVNfx+AC6tcOvkTPt0C:JAV9WwvjHlnywP//v3qRkvCwV6JvkyC
- TLSH T185E52322B7429876D62220324B1AFF94667DBC615E779A8773C4796E8FF01819930F0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\b4ff4363-331e-41ef-acb6-572c640ce7a8.tmp
- Size 14KB
- SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
- MD5 912d6f7689c9d513133d60762e81096d
- SHA1 9a8cc6d7a87ea3a2e551b704221e69fe20fa0ac6
- SHA512 ba07ccfa0a718e74ae50dcfa4ffae8ac083e856eb013ee8c174a63132938e013d0efdc32000c1c114fb6ab50dbf81f20a4b212f17f514a47923224fa757b6f1e
- SSDEEP 192:FkKNtwdBiXu1ZpNtvFAKqks4awuxf6W4ZfG05Ogl88+42v/eFZYdxh0MAxj8M3ik:lNOhZj1yz4q6BO05k42v/ZICM3B1L
- TLSH T1BD62CF211A18AB31C450A33DD4F70E4DB860E98886B1D072395FE6A9C5C0616393DEFF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bg.png
- Size 224KB
- SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
- MD5 21eb6b8232802f32b6483eedb96677bb
- SHA1 b390f01600e521586e210936a4b57a6b89e66a7b
- SHA512 5cfcb0278e5e7473dde396ee34115a3f50a9ad195d99b53cc5cc33a169a42c8f729806491fc0fb607719139081fa3c774c37b1638de1289b73c0c4c80768cfcd
- SSDEEP 3072:7MuA+f6FJxlUhyLg2cugpbM5Q+jBre6cAJqmm6nkrw8sGaDy7y8bRzUnKdh8BfM9:7MuAWojcVdGSf+4BML49RzUnKUuLZ
- TLSH T1E92423876BC391F4590BD65FE9386BEC3CD4E7EC82AB113C931A42424D8416B85DE8F2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\e6fe5f30-0c21-4d38-96dc-63a5f3347f90.tmp
- Size 2.6MB
- SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
- MD5 cc79434c290887ea9f9eb97967e3ecf6
- SHA1 a3c9fa2a279a6a30c7c44240331c500e37b3e004
- SHA512 49bfd073fdbdab7ac6adc62a3f2a5115fce06548d124ed355f40e8234329028499d840785bc7b2e55a2f3ce2fb9d77bf6b2c3efd70508f6303ed0ad861c27fd0
- SSDEEP 49152:uwEkdF+R+C0LfbAeXf4Lylz4wXH5wtC9HP3W1FPhMZSXUq4yP4wITCvhbgK96H3m:ugTYYLUDLylz465OCB34Jmgb4c4wIO0Y
- TLSH T134C53341B62C4A21C023E737C2904F763FD9D5309F166BCB8263E4F665E89822F656DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4036_581317953\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4036_581317953\CRX_INSTALL\manifest.json
- Size 3KB
- SHA256 49617d3777a26738fb68ba609ed7adc762ee90f8f7602931b03f98cb4f4d5859
- MD5 7d6cc057a802fbcbbaf05aa771570bd7
- SHA1 797b07981294a1de09b5ac104ca5253f8b2f15bc
- SHA512 3b71f107fcc85fc5b427b708daf93393e9a57b50d0447e02b5c364d7213c35aa995588377895504ec5fbaed5891153d91110b990b27a1eddfda44f05392eb11b
- TLSH T1FC7151B6E4DA597706F457A89CB50717F200A36B8B8E4C4F7BFC90888FF9E20201991C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4036_581317953\CRX_INSTALL\service_worker.js
- Size 65KB
- SHA256 d3269c201bbb37070527e852e1f4bb2c4ebcf2977bf47ccbe2ae32923b1abd11
- MD5 2d44877511c50568241a09149feba8c8
- SHA1 83a9ce2e717ccd3d9a8f13a4e4fb0269747c3ae8
- SHA512 118f0b5db7ccd4b64f927b2900966c990b7170e7b32c3aceb542c277c8e5495b73a4416516899f56c707f960bf49013218d1d65a66692431ad129569373f3d0b
- SSDEEP 1536:6ka66ka6xmgm5C4jUXeC8L6TqDy43p7I1u0zFObngR0:6ka66ka6e5djCenm2uspau0460
- TLSH T194633A9C79C3F4B58763B4A9802F2142F23D2E45149D58A0B726C9E5B868C4DE33BBF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4036_581317953\de932af914ba00303d4a2778a383ac9c831101e2.crx
- Size 4.2MB
- SHA256 c8e9651b963f95c499f283799aa8ba4a2023970bad575445fbabb71d87195b3e
- MD5 4f0b38b8a40780423e30605d0fb6e51a
- SHA1 7191eadfa7d447c8a73eff0fea9d5376ee5aa61e
- SHA512 587f2f9f921c96d0b764d0f2a5d2274d53ac3ebd6b72cdb0fed672c77172749f9355f2a1d41081fde558c5e2664c64ed5ba439aa2c6d9b17aa243c450ee4dda7
- SSDEEP 98304:SkfpANJOGP0DzXO7OIwNDjAE0YK+DAkx6:SyKNfP0vO7OI6AE0YUZ
- TLSH T171163377F6A9A112CC27C8755323A2F42A7C141354ACFD2F90162526BEE3ED093AE47C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6692_760238638\additional_file2.tmp
- Size 941KB
- SHA256 1da2f4dcf2282b5a8075726328b93aea1912779673c95f1cb88b5e5d150243c3
- MD5 df73b635db2b132c4cbb155184b49b8e
- SHA1 a9221e43b701e1edf6b1a764e35fe143512669a6
- SHA512 48e74522f3752f74e5e2b9143b054d0b0c8e81ba34e451a3c3f20bcda06c0db150ba5a5fff28fd1b471f310eedbb8143fcba2657d5e96bab474335bff4e37904
- SSDEEP 24576:rjEDWBUvZmpgYfEqN5Edpw73j5eR465ZXS2Tf57HTSIDx8D:vEDWQZxmEb4j5W5XS2Thb+IDaD
- TLSH T1232533501BF1C07EC42207747540B61B8D29E998D50AA8CFBA6ED3790179D8DCE68FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7748_1667978821\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
- MD5 0566b67d5fa120d6da250a92577c8873
- SHA1 0baf54c5f6a7b8cff4c82d22be9113c43a099c87
- SHA512 9dcb904ef68419b2462d88133e87d6f4258d8f53f05ed12868718740d6e9467ab2d8769a79727c3dbd01c6807aa5e4863f1874465a7dc95088bd724f9d897fb5
- TLSH T1CE516D6D716E2332D0EFCE2E04C6860EF8680E9C50489454BAD506EF8905B9C9DB33C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\AmountExtractionHeuristicRegexes\4\heuristic_regexes.binarypb
- Size 633B
- SHA256 a10f65d7e0d56702d6f08850c8bee9bd51af17f4be051900ff2b88c9217e425f
- MD5 f1f50fc7b156489a7f5ea400bdf4e360
- SHA1 b7a57e1afc583451e4e21e27e25cb2e306e6bed0
- SHA512 85fa5bd86a3e478b50a642fce45e6da4137898bcdb320e5469c8bc419402ea5eaa952a41b171a478ac9ecd38f58510576ce35d1847ed89bca8bf10c5d483fc17
- TLSH T10CF0ACE23A11B4089B2C1FEF6B8474665FAE8C87014DD455E1CB905BF4966BC6F17404
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\CertificateRevocation\10613\crl-set
- Size 1.5MB
- SHA256 2cb3227c6d1754be453c30fa625a61d3bb19a539e2c7921435dff618645468f1
- MD5 7007078e2346a580b16934b1ca6c1e65
- SHA1 51f3bdd1a983185c32151dd912bd054b13124d34
- SHA512 cbc9ef9b28dc6e3c43d73a36b704e2137e64993ad010553c619a3e143fb815fc29bc2ef986fe5d74458a405ed015ca9d9a29fb91e3b0f61bccc807a01c0e029d
- SSDEEP 24576:/+PdQq76fwLxOJwKUYp2vsr0XJbbJFuZrc1abKRxUWQw2VrJxGDl:GVIoLxYxT2vsrofJFuZr0abKRKW5Z
- TLSH T1FC75336F66DF7B18CE6A38DA904A91430F2ADCF1937558FB1A91016F0D931D2FBD1828
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 9c707c567c6eaa9656514778ca163e816bfcc167ab51a352df9dec2b6e3eef9f
- MD5 3964694c8852e6a0df95e49ba3b8a0ca
- SHA1 6ca82cbafc15dafe960c884ed7ff1a8748b3fa02
- SHA512 268ee3dfd79421e2f28732c492bb87824c8f22100174358cb79d36833264260abe3d9255eaac06690fc6c2e3c51c6b683d5791f632421e846037055f3fc818e8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\021a4ce3-b859-4747-a5b3-3ca659fbf40f.tmp
- Size 203B
- SHA256 f1e862e2c44222ddbef96f6c2a534d12ac3a26d72e62e90955c89b2bb6ee49bd
- MD5 5bc9a6e9b46f0173bc992a020258241f
- SHA1 86670441b4cf67cc292cfd391df9a19b42a1d7f7
- SHA512 716f47b5a59e0610e0cf337ff8860741776d5303a68a3cced13904dcbfa6daff3c3c08a3522f1bb4668f8a19f5083d9484340f829d9790778d335e6f90d1041e
- TLSH T128D022042E97E564A3E5E4B2B7753BB7112ECA2200045D30A0AE826200AC1880726B3A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\1538eccf-dbaf-4672-9394-83ffbc4ad20a.tmp
- Size 171B
- SHA256 08418c1f856f533b5ac2dbe9a005ed4fb19ff3019b1c1c0c31366f334b4d5fd5
- MD5 89ec9185955026b2429f1a607581a63f
- SHA1 f184f9b81c7d6d876b3b41cef1a74de4acce3f7b
- SHA512 32a03da7cc92df660e8e4214a21d35054734132fe749b9581ddf31181a7a1dd6590e94096a07cdfa7792f7ab70fbba59a385b836164ae749dbbbf4d0679ff964
- TLSH T193C08015F5215D184C45547DE214767419270541290061A840C6188D44955F592E5915
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\167733be-b564-4e9c-91f5-82cf734ecdbd.tmp
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\55b7d577-6dd7-49e5-b627-15b66eb86649.tmp
- Size 609KB
- SHA256 c732bee48b4f5bc7b9352590986ef3c9ab766e1309d4265849077013023f8975
- MD5 219ac84395480af1bfcb4cad0fbff608
- SHA1 622622337b764510bf11eace493568ff57f9bcab
- SHA512 ebf2cf395cef1dbccaa5257008bb1658be7b47648052a475c78fa24d0926691f5a628b12a61dc718a4d60b37dec207362e6a6b218d2f769daf4b0692ddcf3351
- SSDEEP 12288:AGrEQWyO48V5Fn9DNRfX13QsQi+As+3A8t4e2QTmUBTnzNGwUJYJSX8s68EaCiWE:UC5iY
- TLSH T1F5D497AB868C2CBB5F8136D560CBBA5940C2701FAE8D7E59E780CC4CD2A59673B7C117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\8ed9248b-34c2-46ab-aef8-c6b814874f21.tmp
- Size 203B
- SHA256 6f8faa454636d6f494ea5b44527eef17e94f1293c4f7dc4e472f4a1192da1faa
- MD5 ab549b6db94ef35325cc321f6074d340
- SHA1 c7ec180a7437d48a7f047fa55e5c65f04ce63a81
- SHA512 14768ebde71de164566ae614a94b023d8d9c7e4f6daeb9d7c3dcf2f8cff15f9f41f3668fb0f658a9f94632b0908787bdfb5c4110dff9c71b55b2359c22cdc805
- TLSH T164D022205A816494F0A4ACE58374BFA33E3C893201346939A0AC0626201D0820318F36
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\9da0b41f-4e97-4798-9277-b16b7f46c533.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
- Size 35KB
- SHA256 f2797bebf54d401b7c7c601a2bc3057a2343e8637e7eadd5a8a7294a063e8ff7
- MD5 d237e8658d7f764803fe37423fd21cad
- SHA1 830f54b0431af44697973ada96fb6f0e82a6cc67
- SHA512 a6e6bca73ae790761d07a2074a667d44370d6eef138c88c5d3db6e96b2ee0b75dd0194fc6e5dec57f44e7988eb04eb336b26d99b84f5ab474b6283b5486aeeff
- SSDEEP 384:MddkNxJRBGdSwKc9Rzw208rkQkd3gulLPNLK7t+uQepNJhxDe:sdIyXXZBS5K7W3
- TLSH T1DAF2D427C5026CBB40B453E5B4FA661BF746232F1A848D4777BCD84C8F7592B3296B09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
- Size 257KB
- SHA256 f766e50e79eea4093f76c199ed69d152e685a123a44ae500dd6448907ce16ec0
- MD5 2a3dd81dc1022fe3f0888a2dd7196c1a
- SHA1 bae14de6fafbcee28ea49b52fe8a3bd4f1a6ee23
- SHA512 d85c0d4366faf1be254f3aa0fc44296e5db78733d292512969cc994f1409ff8e7370e253bb3f0ae36f1b2def0db72b1bdb458c638a0e26ab09f4634ce74cf1da
- SSDEEP 6144:j2bAAEWxDCWouqLEzTSAuUFUOSpXZG8RI8/e1FAmG:j20mlCWouqLsDuUFEV8UhoFAmG
- TLSH T1D8442380AC712AB8D365731EB83B32F9AE619F6B514DC7490EC25FA7120B651D8079BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\4acd5191-6cbc-40a7-97f6-bf8860f1177b.tmp
- Size 48B
- SHA256 5b1125e27a5479b5f7be7f821ed2986ed24e2c6f40b4ddd2cca5392dd57ba74e
- MD5 9f8af22c2736b0693ae90e5661914493
- SHA1 890c3519c8714cf2d30a2d40608294abe015d149
- SHA512 1f3ef7bc2cf9c795f09b20a7b1985061dfc9960b4a5480f48833fd82004077cde5553baae0ad8aca6e9157eec881c21e8fdb0f91138f2856d0331a9e934d7dd2
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 264B
- SHA256 b43bcb1384dd31165549b2a1a346103fc1fa30deabfd8cb69f365a514c15f7e4
- MD5 4802a5ba8f5a3da6a6f56274154fb396
- SHA1 fcdafd0a542124d84edcfbcb4ab5538fcb377e9e
- SHA512 3491dca4c272acf912a70b231b8ad9eb52b701a5534431e37473708a8c6926f5b019e80cb3b3f711277993cc8919a0f0e6c64f863ad1dcafa8becec68d7dcaf3
- TLSH T15FD022E4203B0232CB28043801BF4290033B3C2A40311E0920EDF1B35DECC74AD76834
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 264B
- SHA256 22e9dc53cf5bb8e0f0f201d0d0a82b6a74c7cebd25648a42978f0cda95e282f8
- MD5 f161dec55243ee011cef240707a911cb
- SHA1 79bae2e97c045b38a3e6c3a8bf53161a6674b665
- SHA512 88452d136eef86d72ff3240e71233234cb3373506ad5059bbafb305b8a0c6ce724e4b95e13597a65b94124235a6f995778d2632246862f3093b3ff0ce79a467d
- TLSH T1EFD012E414EF5136CF590D34523E4D54132B2C2510321F47148DF56685DBDC5ADB9170
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 792B
- SHA256 a59b90913b0ef196a3dd79265d4192b0fec0cd9ca9a0856e792f0f64eae154dd
- MD5 e8162c101e019456d25707f7ef6d502f
- SHA1 51f0744e50a6ac2e0703085e4a3c4a2590f40022
- SHA512 eba0432c80f0e428b535a36bcad57b13caeb0286356142e1bf33c727194c08a44c0bf519753002704b03258865599bd4ecabd5fdd14ef573068b38aee878af74
- TLSH T1E20178140CE52267EF050DB0F0DE4D99132A5C2194364F532657F0F1896BFE88822036
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 792B
- SHA256 368d2e2507bd52ab38b0e5fded5907969f5d7d069156dc79896d1f88ce36ea2b
- MD5 8f75dfeff409a83ee1b2e0e07b1dc6eb
- SHA1 a91e4b511e42cfbe41095591062efef9923f181e
- SHA512 bd9e0b88f32050197acea6101d342daf4358f6fb5f984652b1567bd02bb19cf3f3761e88669f5e7463de411b2860b02e485601e42f450b08335feacb4d3206a9
- TLSH T1ED0178140CE92667EB160DB0F0DE4DD9032A6C2194364F436A57F0F1DD6AFED8826036
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir4036_712700985\CRX_INSTALL\reader_mode.js
- Size 112KB
- SHA256 f13bffb4c8373667ab9f08bbb4c9be6ce884a96f9f23048e4de39519155dafc5
- MD5 d3b26aadb2a13fac5639e7b8cfa479e1
- SHA1 0430675b92fbf4fa9343839b9d201ebf2081a457
- SHA512 04da2964d8954657c2795e5b3262be2853ac54d2cc8072780af14fd703f954c929792326725eeca23181f6aa4c296c9d8a5388da87ad5fde68286f55d9f88402
- SSDEEP 1536:Ska6rka65mEctzRw8qxUyIVGjYG6xpvAI3z6A0k5miSZ75U66dpXdd0yUY70Lcx6:Ska6rka6jszmxnS9lbv93NddM3prX+wH
- TLSH T1A0B3D9ADB3927199928320E502FB0047E3355D451C1A5038F669E5DFBC24AAA62FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir4036_712700985\CRX_INSTALL\spotify_frame_interceptor.js
- Size 5KB
- SHA256 38f24dc260400dff44c04d95244dd245578a618965c692edeb103ef6d46cb5d9
- MD5 6158e72a6fe427418c9b728014d24453
- SHA1 ab9913156d73cdbd9bcd2044312c63ed60d7056c
- SHA512 779f509793263791d31f8e997af44013669990b246cf9445a273e2778484f14e5d949b0f062a2794e189c656b60aa21a9b343e32676dec63d5f42b9de2a18422
- SSDEEP 96:xSVa6rQaSVa6338bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuisb71TTta12Ho6Io:xka6rka633805se3m4XFzVJFs31wx6z
- TLSH T127B1A501815C4C7D8FB5029A9ABE235212DE2287786BD4C4EFA3C47597363CE9217BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\bckiheihmdiaaoadimffbjbjafkoooaj\1.0.3_0\wallpaper\preview.png
- Size 464KB
- SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
- MD5 b22722b42e8b196c0e26ab8a8c6508c8
- SHA1 2c4de3caa4409a164e31837f6bbf54c99d922c85
- SHA512 a0904204f795dc7cdc6612867a87f60cbd27d1edbc70007e1fe5c4dfe83165ca287aed3319409a0829815e5175480e085775a9a3285d1d20d629b28641fddc99
- SSDEEP 12288:lrGu17lQ0NW4Lwq23Po85e16slc0hyKQuhZSAS2T9PPdHNCPsOP83JDxj54:lrxvw73H521IKxh9S2TVPdHNwYDxN4
- TLSH T1A4A423E043F7207FC6678D44F640C86E15ACF52ED99C58CBEBEB401541AB8A4ED1C6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
- Size 173B
- SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
- MD5 143783193921e1837732e486606ff9a0
- SHA1 a8ca45aaa634df3957187cf5622eed0df97e15ff
- SHA512 cf4d60b699edb0d417a6f15a38cde0209977e1a5871a798040bdfa525f03ff67fba8f51cae3b112eb5777494fd7e601ef04190541ef4f0b4ef145af286daf37d
- TLSH T1F3C08C1C5A80BDFD6012739A66FEB4511BA7326AC0143221BB15CCB41B08D6B34BA789
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
- Size 502B
- SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
- MD5 aff453c164b18b5a3c88306549db09dc
- SHA1 10c162188db62c721df63930a6a656791b4dd4e5
- SHA512 bfbf53868f4382db6873d4d297938b633d029fb4c4e05a3ad7fce75d45c7dc6091a9296f3e42dfa507c614507207c2482af5aabb8d7f0840c8c5df2fa05bc499
- TLSH T146F09E57655227F4C87044AED7D7351613713AC2706842582155CC646CEC10A2378BDA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
- Size 47KB
- SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
- MD5 12df6852e9b0044df2753aab6356cc5b
- SHA1 c4d5c1f67bbffdd245b421e2a8b7f55db1e8fab8
- SHA512 7a74fcf50c0dcd031e96df827c86b8575ffa5ef9da4d1be730d1760748ab250f53e6cc705a60b1c42c3f19403aeffad4e7100e86a7556688d0452557115cfb9e
- SSDEEP 768:kpAtn38+HSEWA5W847Zrr8VEo3Of2diRy68hkxkh6GRohqksVZm5pEKr4VxOqsVY:0c38ZEbWXVGR3Of2ymhkeh6/hqk+Hm4x
- TLSH T1772319A56258687E0AC6D2ED925D1313912450F8691D84ACB33CEFDE260FDC6127CFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\favicon_opera_one.png
- Size 2KB
- SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
- MD5 723cf51fae375f557b2f891a2ea603ef
- SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
- SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
- TLSH T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
- Size 86KB
- SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
- MD5 c8b19bb6ffa9ba9d07b010ee2483d6fe
- SHA1 db1af85512d439f749c1fd64fa8f7dfbbe5f682e
- SHA512 841d08ad1dfd23a85b3749dcec341c665457e0648509821ac140fe0ed753e8b0ea4a24e7b6ea5f06958f4ddb0b65f7e58250b783eea11c321fb975fbea63db46
- SSDEEP 1536:PYHgfauhQ7F7yEPlL65+aSWr0WUvpyiSBwhmSvGj1S+f8+:PYAiuhQOokiSBwhmSvGZS+f8+
- TLSH T1969308CDB6C7F26293E390AAC03F101FF23A6D19740D4454B626DDD1782658EA236F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
- MD5 bf24b39c7ecacb4ce180d5013d771066
- SHA1 8b05f38ef028f9a6ca5411dcbc347d6672c252a7
- SHA512 2398ba9b4216289bb2de142d614f312585f1e14e759d211ca169e1e54248761a78585f8ffd0de5f9112ebb349140f0346994b8a52a290ae22768a80d19cd8a9b
- TLSH T158515DCD26176426C397F654D206052A4F0841A72EDBF6E949306CEF9C53E0FD6DD760
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
- Size 1KB
- SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
- MD5 56868fb04ec3f6436a450b0be0c49947
- SHA1 3114eed847366239e1b72b45af410bfba81bde4b
- SHA512 a2211ab99b6d04b7f0a7c5dddeb8156c7c24e8ff0b2860cbddb6273d25089c7e066ea6be363a610553ee2b275ba4f7750f9456b30251000596544330d8262dc7
- TLSH T1CA215B5A35F53633026149A2670793CEAB0C11EEA4BF347BC4918374AC344FE8394DB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
- Size 839B
- SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
- MD5 112b4a4c6143b507605be0de6f359ff2
- SHA1 4ad368eac9b4965eb0389d2da4b2723016c8c69b
- SHA512 9afaf96cfcde9688664d33f37168b9c637e414c3fb768b0c70cdb19cefcb42089e8f464a8d32bcc21a140414c0557fbc02c12a29a5eb662405d55ef7f1781b2f
- TLSH T19301B567C4255C230342217CE42B0719F970E14B6E646E2F3F9D845EAF5E47EAA7238E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\11232e1b-6ea9-40d3-8886-7d2ea2f1352d.tmp
- Size 27KB
- SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
- MD5 20592c0bbc8cff757ec1ba508ee277bf
- SHA1 7465050f95649e3bf662ebad10de27a9bef6a3dd
- SHA512 c50dc6adc0aa4f0b80bfcc9bfa774c5d1a14e1cd3e889c924d3bfdcfa16c96b34f80dfdadde662ed87c0f33b37f59eaa151706e949641a24104c3583fc962cbc
- SSDEEP 768:1VUpNy4heVwCSvh97oYHSI4R7VIO8BkM8s:3UpNy4heVwCSvh97zHSR7VIO8BN8s
- TLSH T149C2FFC2C8C54658EDA95F3460770D3D466BBFB9FEB8B54E8A8CB0717BB32C20426546
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\444d34b4-48c4-4c15-b926-ffaf5a599e52.tmp
- Size 27KB
- SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
- MD5 c7828175f89c5a3ada16fc7817c80af8
- SHA1 e6e6f4dd36fb419cb311093dadf8acb61db1d30e
- SHA512 b68e7b8c42c6d571487841ad41148f7452e970b295516fe025744f7bbc8d0d7986699b41d5f71a6b43fd4ac28b6a216e24c19820ab01817c4bcfd50677fe7541
- SSDEEP 384:OwU2+wy7Pxdr6zfM1dGSwrI7dG91rfprU87MJzeax:f1+V7jrI7IeywMoy
- TLSH T15EC21EE360CA08D9FFDF25F155861ACBD09BBB774A262178138363A5D3E4D20D5ABB01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\49adc0ea-cf0f-486c-a144-32bb0c37a2a3.tmp
- Size 27KB
- SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
- MD5 ee77c4eb6b9e8b98db1acf41ba32c064
- SHA1 c44316ff0f61c9a7f27f72bc31925ab992de4f6f
- SHA512 ac0d2ae2afeeb0d82f75e86af6580c804c53abe3701734c7ad5e34bdfa4aa9144fc293a4c3d32207d3f0c70b9e3744ed8bee09cfbf96dc8ac825734537d04818
- SSDEEP 768:90haQ3glH/EKEi+B4MfgL2BYb8Ohg70q6XnKa9UgEUjJY99yVnX3akrtSX:90haQ3glH/1Ei+B4MfgL2Bo8Ohg70q6m
- TLSH T1DEC286C2D8C00264EC592F75257B1D39112BBFBABDB8B24DDE4DB1757BB32D24126A02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\a96a6317-d6e7-4cae-8247-8cef8af18614.tmp
- Size 27KB
- SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
- MD5 1f17cac9ff7b6851ed5bc95c2625596e
- SHA1 1a2f1ff883d5110a96e252b88784a00789e88add
- SHA512 87539de5cb743b9823566a3c9bdfa8e43c4d78db761b40215e3483a8e0e155af22f057c4de290d9343459ba44a5a5cefacd53aa4fdaf032ee16f88e7039157cc
- SSDEEP 768:+IsX2btgY8GIZbTbg4wjs2W0dWvlSNqv:+X2btg3vZPV60
- TLSH T117C2D773FF4CB61EC5C832B4C04A874561AFBF8C61725607B97C7E997B4E0438856A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\b0bd9dfe-0ee2-485a-98df-8a3ea124638e.tmp
- Size 27KB
- SHA256 39bd99139f46534251ca30ee1eafe846edde8f96356642e04b68a9f2af9799b7
- MD5 4b0f69f3622e2fc1950b2116b5d46c41
- SHA1 d4a08faa52ee3600fc70e38d915050bf06c5b80e
- SHA512 5926cfba0a17a4b65773cb1632fdf5da533a158fd4cd58e63879e16e91d7dd222214056941ba0bf80c654764bee2c5b7dba32468aa933f26da74f5fe80b466be
- SSDEEP 768:Xj9HowGSjwSeroCPAmQn6ctJYcBqR97Lv0qcG30hhAd2sS+:z9HtGSAGqcxqcEdj
- TLSH T143C21D9362808599DC24AF388436DE7D626B6FE83D30F50AADE5BE773B732C25015543
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\d78b01a9-ef9e-46dd-97ba-82ee76c41245.tmp
- Size 27KB
- SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
- MD5 dd8e6df155a2ff5f53f81679d8701c70
- SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
- SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
- SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
- TLSH T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Local Storage\leveldb\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 61B
- SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
- MD5 4df4574bfbb7e0b0bc56c2c9b12b6c47
- SHA1 81efcbd3e3da8221444a21f45305af6fa4b71907
- SHA512 78b14f60f2d80400fe50360cf303a961685396b7697775d078825a29b717081442d357c2039ad0984d4b622976b0314ede8f478cde320daec118da546cb0682a
- TLSH T139A00254944498FF4655836A05654463C7AA504780285E565B24115E42A25AD0450947
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 3KB
- SHA256 177a853619823a8f5f22b27008f38f37a78bdd07beccf6075bfcdf1c8b25463e
- MD5 bebfd2716813e5a1a44e2ba8159068e4
- SHA1 58dc865dd707a21e4f0c8f8b3f8c6554c4404ce0
- SHA512 2a9936dee37e767b8752aa2701e5ac1afad17da92698c1d35f6046a146758de98acea23f2ee49e27cc5d2f8947fdb4a55184a2d1bad3088179ddd65cfe7fb3f5
- TLSH T1A6519FF783F55A3DDA1282F4EA146E1BCD5E1411435C3D6E89E45E17A3E24B1E14074B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\b0bc5f5b-d352-405f-86f0-5adf84b3f677.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\e91088ae-17b4-435f-9422-50cff7a411e1.tmp
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 16KB
- SHA256 03081a50305c37d1d05787f59e6a737c3bce756da5664b16993362038b05a4ae
- MD5 d7029f760a29fbdd7c799ca1326a0cf7
- SHA1 7bd5ecad2f7c4d7b4596c36e758f92f7b98a8aca
- SHA512 2555af0dde3d3adec30aa6ce36ff228b38585a064874f0a3a66c3d17c0ec0da0fee8a4399a447b6e1e91189237996b4f141a3f5e9ef61af87c7013d60beee7bc
- SSDEEP 384:hjVLxhRrTSSY6Xu/C6+XXmOkvMiAOVgmQqYYrK1NJk3VbBdn524j:hjV/Xf0g4j
- TLSH T131724247A9A00EBB09D3D66AF550F7AFF6E4042493606E85A7F9CE1D02CF2DD74129C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 49bf0ee1b3f5d35ba7ed635313ac0f78ddd2ed1f30f8a1a9b4eda0f0afd15823
- MD5 252762768d4c350b3aee1a58f3f775a6
- SHA1 e4176abaaadaea8f7ccd11aa399678d673e3436b
- SHA512 87c5c1c7fe08767a709cccdf9b26cd4cbf1b60715b65807895c32a33e9bad1a3acd09bc89fe7ba92f73cd981dfeb9577a1b034a4fc7a597e890d0be955800355
- SSDEEP 384:orLxhRrTSSY6Xu/C6+XXmOkvMiAOVgmQqYYrK1NtX1fBdE524j:or/XfPT4j
- TLSH T170623247A9A00EBA09C3D66AF550F7AFF6D4042493606E95A7F9CE1D01CF2DD78129C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 16KB
- SHA256 1dd02409b631ff3d59111a7f94a24bd77a0de9488bd67731ab73c1989cacaaf2
- MD5 871f0aef85d6cb4344c4c9e7f5c30551
- SHA1 09718e36ac8315d073d8e92a4874098951ede308
- SHA512 aad22a50410eb8a1ea465a9da08388d7564ee168450c93a045a526790d6292fcbda2e0c29e0e6d32b9785d28e3645bc7396b3f7993a64ceb11ef5352565ac818
- SSDEEP 384:ZjVLxhRrTSSY6Xu/C6+XXmOkvMiAOVgmQqYYrK1NJk3VbBdn524j:ZjV/Xf0g4j
- TLSH T1BD724247A9A00EBB09D3D66AF550F7AFF6E4042493606E85A7F9CE1D02CF2DD74129C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 88b628582c8cc22d0fad8d736656f5b4e237af6c5096f61d714017feaaef7764
- MD5 9e15be2821b6f5e72423b24784c60f89
- SHA1 87cbe5e089475461826da4f2e99e73d952c2b1fb
- SHA512 0c0a58fd86a0915cdfa71df92bf16d2294d2074061dd2aaeb57315ef87a86ce2d53a8579b9b28246654073068cc820c7b553eb37f99e08aa88336b2de5698cfa
- SSDEEP 384:oiLxhRrTSSY6Xu/C6+XXmOkvMiAOVgmQqYYrK1NtX1fBdE524j:oi/XfPT4j
- TLSH T118623247A9A00EBA09C3D66AF550F7AFF6E4042493606E95A7F9CE1D01CF2DD78129C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 8f441ad0cbb6ae8b732fab9a1c37e40b307fc55ff1cb6bd3fee29e1bb9134673
- MD5 e0aa57da475b80bda34a32a7806f5553
- SHA1 29c609f6e726d06a01bfd628b041964c0ef415de
- SHA512 dc5efb6fa21a2bed886a95354d14c594424142d33cd8bebad4e75b59edf01e0139c47dc3b55f671aeab0e58f7a5d99a844625484180e6ea6f8ce86b3e5185b86
- SSDEEP 384:aqLxhRrTSSY6Xu/C6+XXmOkvMiAOVgmQqYYrK1NiXVZBd6524j:aq/XfU14j
- TLSH T172724247A9B00EBA09C3D66AF550F7AFF6E4042493606E95A7F9CE1D01CF2DD78129C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 10KB
- SHA256 75a19ad8939cb3467648a32f3a05892200c930aa8392660b05324b1c216c2ee5
- MD5 d448918ba0af2d09f4822097f1eb9897
- SHA1 5cc8f3a55dfce6fd7c38fe97f27c5cfb05fcab70
- SHA512 1cc5a1e5804139700623f4aa1d14e7fe5f41b174737e31e2f334e433f141446386e5ddd8431a070cf0aeaddbbba321da85c67740c6218818f309bfe6ca336a14
- SSDEEP 192:BYLlLVLFLHL/L0L0LyL6XMPXP4PwPcPPPPPkPsPuPHPWPYPSPsPZPFwPkPiPgPqW:MxhRrTSSY6Xu/C6+XXmOkvMiAOVgmQqp
- TLSH T1E432314B99A04D7B4DC3D665F650B6DBF6E80020A261BE95B7F8891C05CF2CD3923AC3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 070534b585085aacd46abd9c13f5612e42050ee203968de212bcf2ce306d0087
- MD5 9eebeecaf527467a3991bd562e7ae52e
- SHA1 8fa2ae8e942e6d73e4fa26e75ecd0a00f95d3e29
- SHA512 fe319ac2d9c950e40b92bb6e9bd13a54060c42039792624289ed6a5b1af5f4a60a873c18e30bab19d0af1803d7328de2317d494659aa4b05405146bfdd22592e
- SSDEEP 384:aiLxhRrTSSY6Xu/C6+XXmOkvMiAOVgmQqYYrK1NtX1OBd6524j:ai/Xf+14j
- TLSH T172624247A9A00EBB09C3D66AF550F7AFF6E4042493606E95A7F9CE1D01CF2DD78129C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 16KB
- SHA256 4f38452c4eb937c56d8961df2190e08e502e04b8fae135bb71a9e1fa87ba12f7
- MD5 85f57f5874c94909005b6a444b77d56b
- SHA1 0ef423e09d9ed2e9714b932526fd08fc4aa15e21
- SHA512 04cb7e70cdcc2891272a56a0a7c33a97e9e7f6249628b58856ba0ad6932573dd48efb30b5559965840633a9c588b4ae3da56eaba4e55f407b1929b401a1ac0de
- SSDEEP 384:JjVLxhRrTSSY6Xu/C6+XXmOkvMiAOVgmQqYYrK1NJk3VbBdn524j:JjV/Xf0g4j
- TLSH T104724347A9A00EBB09D3D66AF550F7AFF6E4042493606E85A7F9CE1D02CF2DD74129C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 208KB
- SHA256 cef35b0965f9d24e356a7f3495629b53a2639ba05c2566522c08dd72a97824a7
- MD5 a3890f2dd99ecbed377e18f486957dd7
- SHA1 6df705536ad56126ef90be0519d96e31f7328b0f
- SHA512 d9057c544ef384de892bf7a6317d1674f1facc2666208dc902dc3ba4164ca8862db2a074cb009266e5d8536f03d81f1f05f226de4929bd631a656ddb5682c44b
- SSDEEP 3072:XUm6gGVBe8AyG8zuunFB4YRNGRoW637MtZD6TwhiAAaetAycHlqg7sMWzHew0UA9:kbVVH7rMjZAH9go7HpxA9
- TLSH T1CC243CE6D89A4D7D4DC996FACC6E7777C9EC02505AAC2E4897FE110C03476CA102EE87
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 91KB
- SHA256 57111cb9fc9c226c4374910a9cf25e316ba89dde68aa0a6c9200b16c3e58ee0d
- MD5 18b6d7db93cf8c1319ae40fe81d64104
- SHA1 a512118138a01d152bb7ddd1bd3ef538875f44c2
- SHA512 e093adc3c22a4874f25812722bafa03d9224c7e1f057c635008dd0a034fc8b8993006a6ce51b4e97a2824277bba9e1e133fceae4aeb3a7a0e8a6d5652f43be1e
- SSDEEP 1536:LHxHuH06i2H26hHajHjhM4HguVHicHKIZH2HD4HYZtCHiCkvocXTPHUH9sO2mUH3:D6gGExVKXFB4YRNGoR3b9
- TLSH T15693C7A7CCCD8F758FD98BB8DC36A75B98D40415ABDC9E14A7F9404C4386789213F286
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 91KB
- SHA256 43df66dfa43b06da2a8920369f613d4052c41794792d55dc537fa8a0d9f497fe
- MD5 57b80e217b77ee1858dd88c3ff8e9f3b
- SHA1 98705e5d651d38e2b637fa1357238d091388832e
- SHA512 6fcb79de43f2db79a84bf9d9be17df4fe0e93e63e908edefb8fe7890cff700ff2d198c3a8ccf09d7478168be744eb4dec673b2cbd32864542f63b1c1a8394de1
- SSDEEP 1536:YHxHuH06ifH26hHajHjhM4HguVHicHKIZH2HD4HYZtCHiCkvocXTPHUH9sO2mUHH:j6gGExVKXFB4YRNGF5U
- TLSH T1A693C7A7CCDD9F758FD8CBB8DC36A75B999400059BDC9E14A7FA404C0386B89213F686
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_0
- Size 48KB
- SHA256 68f0122722c313210ff6801859d2d9462ac68fcee356b68526be978443dc6618
- MD5 1011950466d0d3693eadcbad840ac50f
- SHA1 b4e26ea505998c9eaec31f36ca6eda9d6bf2dc57
- SHA512 b16d7c472cca1d190ab17291c638b95fb2ff91de3696110ea841c53c69197c1c5ef927572636d4fae88b60b38a523607d46e8880e34805f97912df2374cc652a
- SSDEEP 1536:0c38ZEbWXVGR3Of2ymhkeh6/hqk+Hm4bqheO05dAzGYBB3it0:V38ZEQi3Of2y/qRG6qhe9+
- TLSH T13F2318956258687E0AC6D2ED925D1313912450F8691D84ACB33CEFDE2A0FDC6127CFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_1
- Size 114KB
- SHA256 2df6aa1cfe5e709bca1ec13e3a47a0cbe7027128926a28e1c22de6d5e110d7ba
- MD5 cae6087933cde7a59282c9e7f9a5d420
- SHA1 addf8ebaa42ba268356c38ec3c5fdc697ae426d2
- SHA512 4b7aec309d7024c25afa7181fd950247327fce365b2d449e2fc01c410a28d2d6de3ff0bbc97dcc144564d0db1ea8c6c471c55de079609b2d5957d401e15a42c6
- SSDEEP 1536:J41KFYDdU95RcCW8JLeBnfIwIOpS1VutEXqUHnrBZFCwtS:AFU3+78AndI8S1MtEX/rBZFCwt
- TLSH T15FB3C74673A8C63BCA7603B50217675B373185893F87D31F256AD33E1C2B7FA8988465
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\2ecc2c9c-f706-45d9-9d9c-610bed554dc9.tmp
- Size 72B
- SHA256 9d0fb5f5207c74f4291b2fc4b856414a3d6ebe1b8d396739797e8a514eb55fd8
- MD5 8de97601349f6b960740916329cecf4a
- SHA1 1ce969751b5b2d0457c2c614ef2c81770c6f588d
- SHA512 aa0ac9d673b98ebd078ca462c68796894b91c53857edfba8f9781d5eaeb559ba54161f87abd0b091518a27ecd1b2047410249f6213d98cc6e92417a97e1794e2
- TLSH T14AA0021182468221C51116F52C0183D81204FD358101475376D043468C641505D11284
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 48B
- SHA256 de7420450226a1e1953eca9332491eb07e7c82d954631601d12df83deb2f1b87
- MD5 a13e0004ea83c5fb0da01515a948da6f
- SHA1 928ad49858046462443276574b8f3a5a04c3267a
- SHA512 e7a308666c79ff305f655d916dcb6da3d7c76a077ffa892b7577b77bb0d8d8d937010fbdba10c588bbf0196c7ee4a5667d4338f7009dd5f92ad06ea838d521b8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 72B
- SHA256 be17b1aac4b44b5d066dc3b514d1359ef150138d144369ed53a64f705a334872
- MD5 48508cd530c2cc4ea96f503d22beb75f
- SHA1 22103e714cee9ebde74045606972aedef1d4436a
- SHA512 eaace91707088b231b3522794a8bf970b12ac4502b07c266053310b2c58e6f4b2a39dfc064618b19ec80ff1fc750baba4536e01e1dc0d6e5da8fbb29c12c89a6
- TLSH T18CA00220014AA002D4190BB0199BA5883781F82154400B1374E0F3D59EA20546B81102
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 288B
- SHA256 df372c660ffbca59a19198a5270fdda5f568aad7c168137da83335cb1ba1ee42
- MD5 508085446f303ac3ba7dd21f26f036ff
- SHA1 60d95084bb6d8b208944f3a5edf566efe57cadbc
- SHA512 482afed3ef729929213d075d2beebf0de80dd81e0f9149d80e0bcb4010e2d1f58c3a36c62b4f5103886eb57bdef95b0df7d10d3a7e38a6a2e6ad702ca19ed292
- TLSH T1DDD023374D8451CAC015C335318349853331C8F0D71C23B1619425751CB1E714E45047
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\0f18b326-6810-4b68-a5f4-0dd0acd8e50c.tmp
- Size 381B
- SHA256 1353fff3ea3abb6afbcd701bea322b5ad212e208a0f04ad8a48355fb37feaf8a
- MD5 9159898e6f845e2b82d70a9816c8fb9e
- SHA1 b44411d127f1fa6694537c67f1b6d2d4e9e331ea
- SHA512 53564cdde749e8a332d854d7497b1cb023b01263d7a5367243565daba8f2877f7a2211719535b1897fa7045605ef296e75782af4a5dca91f8f032d31674619fb
- TLSH T1EAE061902335945F57C2A5034601F77AA65245D8CEE9AF1706A9D9989653F9C034D017
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\536ab9c7-f1e6-41c2-8a50-815652adb07a.tmp
- Size 381B
- SHA256 1e5b73ebe6d0cf51199017b38c89ff378d481dd6c5844fc41d4c56727569bb9a
- MD5 b74fa1747a86aaa4361a964ddd38de8d
- SHA1 b3c72e4b000518415fdc21f44803a64bd607ce14
- SHA512 d6494362e3f3eca1cd62d4d1b472733d28ec528b04bc736767037bf2816aaec97e43cd2233764093ecf952b2b50023145edcf991c1eafbcbccf802ee0c98b83d
- TLSH T14DE060A6030D07B93D21BCFFAC0020BB2281708E5F906EA10AD28B38D358C091FA0EC0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\bd8165ac-ce93-410c-9404-48db0c94c9ed.tmp
- Size 381B
- SHA256 6dc496a30da768f387e4fca8326e85db22d916127aadede4d48845cce2a37269
- MD5 935be66a41a9df8e695bd9b57315e573
- SHA1 f059f48eee44d9d6b2d67de766826443cca59d18
- SHA512 ff6fdd490229c4c7a1654a9d571a60b40819e02d580ef45c915f6c218645958e836271263ac7c7b6d919750c59cee35251bdf4da7ab16e838f72bf8faac1b2b6
- TLSH T11BE06A4F25370B571107E7043CF4654E99D441155D5A4B7883C720208985300796DCD3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
- Size 781B
- SHA256 e763d4c6f20a7945ce1cddfb1249eebb9c853c4c88986956bfefbecb93e9dd0d
- MD5 6cb64c718eb823a8e8d9a575e9b9bbbb
- SHA1 ce3f8083d62759c982612e4ea5deb0cedf263206
- SHA512 9af20dd75b4103a9633b972b558652ee05da13b13dd8e5ccef7b38d49b09d232ac35f43b1efbbced135a2202a6928cb95be86a25a9c0db6d8ffbb0e73cad9f18
- TLSH T15B0125F26641309B6C5199CB58A154AB0CADC9AD91454A4B3B826DFA96B0F8C80B5D84
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
- Size 1KB
- SHA256 9610cd6f593245febe2995709d08104bd94c2e6cc30b63d83458e1b2b21ecd5d
- MD5 916a8ddbfd78075634a4867c4177ccb7
- SHA1 0079bf5707e6a646f974494a238b150175f0eab8
- SHA512 6b7b5139e9d42ebcb12417309a296777d8f852ba731c444ef1bcd5081637135810e0f766b77b9a7479a2ec295ed206649df4abc47072cc8b97bc57f99597a3c3
- TLSH T1ED11B5226426DCF87160ADBB8F11600BE1CF90EC79DDE6949942D96584E1A857C8D3CE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
- Size 493B
- SHA256 df1369c08f16ab953e6aefaf2eb578639208d9ffb72ed92553b09c10e7d190e7
- MD5 8bdaa6ae6b6eb17810a8b4ca9c9f867b
- SHA1 b4372eb2aab41dad8959e70c221a37bcbbf813e7
- SHA512 42c7a445f58073420f7781b93849242800cd57c579a5f3d23a9b0fcb2f009ba97b176f8d30e36773efbb9d2df327913d7908a9a916163effa541d8e27844b794
- TLSH T138F0541AC6B2C166211E87828E2E70EEF0BF9760C21C9903BE924B037708710D1C3DB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
- Size 781B
- SHA256 cfada97973fb42ed8b1c790013bc2a5a625e7d5cb3229b61d32b12934f56bb0f
- MD5 027f844a52a3ff590cc584afb681bb07
- SHA1 7a645d4063e097cc24bcc6d90d19b1c29b3bca72
- SHA512 e1159dd0c22bdb0e6f5ef00a73e6c1cabc8dfc3bab6062d12ba5b9f749d81acea4558c2b98c7a3c42e9d6efbd4720bd6053fd67e4323a7b06ff010becde04347
- TLSH T13D0175E45B6FA0AC4DB873E750F24E1899F351C07E6013E6471046B4E26172605249F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
- Size 957B
- SHA256 0691b714d86ef3fa9010d6426550ace3c870012d5b6c4c3ec0e6974856ab0a56
- MD5 a9eb77663865d9725bf20f5d70aa29ad
- SHA1 556083feffdfd3ea2e7f5bfef6677bdc0c4e7d77
- SHA512 5cc3cfc789068f0eecba10d869f797b4ba50913fad19e6ac39aa9d8597e40f05e570ce1f2ae24216798af55ac6df687e1753503e2db92db2559450861b7d44bc
- TLSH T11311C87D49610D4F0C1345252A44A13011D0E65FD67CE5FC474B5CA5E43A52C8B62D06
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
- Size 765B
- SHA256 6079a7d272a827765a14112496bee4d640dbc700ef972ca35e295398a42a4773
- MD5 2eb5e6ce4306c8acb0b875217fdf8da9
- SHA1 b6fb20455f3f716e2e0259c3d366c464438f3fda
- SHA512 3fcd12f06aa29e3585111f2d8707f15fa27ae5952e0075cceae0e81c4ca07a98f1e694101e948841a73fb1778b0d00def742e27640de26711b8a100befae0876
- TLSH T13901BA20166D5713715B3E6C788339F5223F4C7323056FA0C6A007A0B48D10E0E6E58E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
- Size 605B
- SHA256 bb6a1fdaccb72d57db057c821eb1ae1a32825b66369da228b48be8e576f8c1c5
- MD5 110298cdc9bbdca6e432c83c4bc0900a
- SHA1 a5c39fbb844491066f12fb23c624f82e387cad16
- SHA512 22eaf4d8d03612864d62dd01f889632410a3118abc2f81b1e8df7908af41c2f7b7dd5c3fea36d19a074a34f9d47a0d0dd67ad9d08fd25ec499444661ec07adf9
- TLSH T195F04712A42DD94A802C453876812BD281F1198A24ED2471A51D25CF5371BA760D0334
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
- Size 1KB
- SHA256 9cd4e0e6fa2353d7d39f87bcb93501bab4b48d9de9ab971577457641666ab327
- MD5 0467d16d71a3b72b4872aa92c17b3bcd
- SHA1 a490228aa9790623bc8db2b08a46dfbd3e0b4f1e
- SHA512 fb97ea12cb7a86416d91aefaae3b7df041119f38dab85020207a7546add244b9cc8bdf439db85425e615d0cf09126c70603799b9f7217dbfac9e2ce47a8a3661
- TLSH T1BD21E70F26A7AE2CB68122008DCA838E5313C65CD83C977BC91B821890432254B93698
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
- Size 1KB
- SHA256 b0f995daaf8127296959d026811a7f2c80a25951ed46fec94ab840b95e251540
- MD5 089dcf5f396f4cf6ce18307a2844f7b7
- SHA1 a6ac9c9f1c1eca621768930d430fc6ecc2fd6106
- SHA512 dbd7ac446aa7a37de872a15a00e655676659cf71e0465925dec0b1ee4c85a960c7bf8ee5c67b4b6886ac0ef2eef201bc305603894bb07672ce6086a885b2906b
- TLSH T19721ED2D7147B3976D140DF54A8960C45A51FAD297083B90079D37435911D2E3AA0621
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
- Size 1KB
- SHA256 8a5a8e3cc439dee25e5463666cb6fb674694955b43bef1dda12a2bca2eddbebc
- MD5 b3b8ed42a9f410910b78a399cd60fced
- SHA1 2d766487d59374850e938cd4ce0a518b4a5461ac
- SHA512 a2a1ab4ff6d140b5a52ae8bfeeca7db811820f62f00987ed17c9b435eee53a814124233431df74cb9707ec779d718362100eea06ea9145d8ad4460f6f44e430e
- TLSH T1DB118666A478313D8197EBB9C4493211273334939747F672AF5385A4FA38A3808500B6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
- Size 493B
- SHA256 9fd68ad37947655d3b8a3c62e71dc53f03286ae73a3ab6c3729c7324f8231a06
- MD5 bffcbfd5f4c53ee05f1ed45576212bbc
- SHA1 857aef14efd2eb1f973536b69bcc9e40880957f8
- SHA512 97e5b6d089d3ff80c82ef9adad7cb753de8f829c4ffee98d1e5260d4d3f4f16941ad79372399c1e3d11f04f72c17e7ac20da02337f927079d1790bed24326565
- TLSH T193F00EC980D2865ED4026F9D2962F2001B0C2411705DA308A2BA0743AEB89CF38B59BB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
- Size 605B
- SHA256 a90d477565e271c6617845ccde1aeb755ce99d0be015bfe6a32eea08da0a88fc
- MD5 d9ccb5ca92e09ed101829fe627c0d976
- SHA1 6b44ad1b3268c96e9a80b76a13b9c97bec47e166
- SHA512 5962a21866c8822df90796a06f1a5fd3a510e97b6d21ca25c2b94175c6a0ae390286881848367cb8470388afb412cd430ad8abf03fcfc29a9a2a0d88705f4adb
- TLSH T1C8F0410F7E3F98C600B0EF1C215D9E89BB2694B9A20422F7CC5BB2107C1E206C6E15C9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
- Size 637B
- SHA256 7330d3dec8dd521df76f007258121f11c445a11ca7ee96c92a0c560855ad827d
- MD5 4143a0ef050c42002048f71aa68ec429
- SHA1 d5f260acef50c288be6b975e7b7125e8f85efcd4
- SHA512 d18a56d2b1cd48e58a3dd57167996873a7f228eb0cc1ba6a42fba559fec60fe176c266d63cb9c3db1056d05884a95886717c77433cf0de1aa04170613e694b2b
- TLSH T1FCF023AA9C54905683A418696712F3A428B913A794D3B45119EC6742555E5742EC0B34
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
- Size 637B
- SHA256 0c2b21e452595d6b4f507323a40d6c2f478cd966411635066e65e1aa55097c07
- MD5 28dcac11ecf22e620cc1e07fce3ec802
- SHA1 19d74a221d4f10cb8cfc2ab343694929377670da
- SHA512 3ce019a6c2f085109e658ed7d1025b86c58b343dd2785c3b79be55eafc6b6db81ffe39e24516e613edec4b774a32308622d2ed717f453ea3e94d7c8ffc3d1988
- TLSH T1AAF068254240C451DDCEFF35E4C5A21751866633E27CC31830F48A8D1BC126B0DB9B49
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
- Size 637B
- SHA256 3b71477689468b670d97f1a4bd89c96f4bbc9f7b1bd10ac8b70cc8262b2f6d62
- MD5 0ce2069cc13955cf5c7b6f89f6b6db15
- SHA1 d4899cf94f69eceb5ab684a73da9d8ecb0d69a9e
- SHA512 0e526cec9c8dd074955095bee65f44a61626132574ff38992ff360196bf7bfa6bf9d130ab3e07945b96b18c235a7b0de72cfab661f5c48636898ac59db7d0b78
- TLSH T1C2F062F7ADBF451E2BBA554085F77D26F01153A529A08DC83C7462A68A03028EA804B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
- Size 797B
- SHA256 67c6cd4805a71cb1f6ccf7ab5e7f6aa470358eae8de05d466f4a9ddc789c720d
- MD5 1fe9ac69357cd268887e844d70f6f932
- SHA1 47b5c3a68aa5ba575817ee91147a0340bf92b61b
- SHA512 3b328f4b78cdacf25f15563ca9353613b07c60f8acf7f93c278b2ef22cb40c53624679db3a30c9d48f9f5a7a5920428e51b7c31cc05cd344ed8f40806d6e4696
- TLSH T1090175EB5631EFD9137284E54B87FD3EE51BA9821E0F30D1D0148B80D37AF8020067AA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
- Size 829B
- SHA256 ac89e9b8946766516ac044a8b99de1893151343c7f42169f4b5fce37ec985963
- MD5 d7fd8d54f63c427c1d4f5edbc51c1fee
- SHA1 bc6a40995cbaf88a659b8904e7b768d2952cd9f6
- SHA512 1ad997565e2b6465b4bcab5206d2c51f9ae6a7b1fc92450d9dfbde8c2dbb472e0a570120e3840eacd6a8b41b42cafa1e293763250c247697ad19f5c82c66c990
- TLSH T1D20186F44001D556F9111824F0707F45F185DB2CC71E3AB2795D6D93863F6275AE6C01
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 276f28834ca747e8e84a2f0b8de39abeb0ae85b2c1ee84bbc088410434240d40
- MD5 a1c77590fed68c7428bc06a4588a05ee
- SHA1 50a1d98f755962c3ea73281fd150d28600cdef20
- SHA512 ee22b06e8517c35b0da168895fec78f81a8d23b8c0addc1ec1b723c257e03c30a6210fce8c81d2002018a848fdcc4e9dcd89bd4df85d8e10b935d53e07d339c2
- SSDEEP 384:7hxDQFMUzUBkqf5Qfqp/1DHCv4/BSvz24Q5ZM6IV:7bDQyUNqf5QSN1LCv4/BmzWZhA
- TLSH T1BB72D04CF004D0507BE1BBBBB06D879C2D72C9523B4437BA466E9E8417781A3537C9B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 2d1fa30240d33a70f119509d3b1c78c59e85c2d597bd9596a51009b7f3a9d1a2
- MD5 fc8d4c399a7b03ed46b2fd4ba1d4a76d
- SHA1 c649ce382baa62046a3935d4a5f44c20a99c5458
- SHA512 53b7642e5a0e4296cd4e07b3aec1aab4fe39ca502cab42a1d9e9487105a2683646115015191a6833c4d78928e83d879bfd64061c9ee3779d442c6dcecd31feaf
- SSDEEP 384:INZPRbahwlrSVAaD3r1a8kI5mZIgKnuNOwi9O132SHW8vRHu:INZosrSLDb1aflZIhMGUxFWAk
- TLSH T1CF62D107A541A72F3257F68CB49639C2AB310AFA9FE1DC16B4785D2178DF2BD046F064
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 cbfe6528f89eaa28608170c5989f26032af9e38cd8e52786575049d4b9bbf839
- MD5 152a03a923f538cdb3eb22504cf39cbf
- SHA1 a583a3f7c522ee86504ed982800ecc17a4e18d0e
- SHA512 6ace1a42936064167124a9f7210762002a4031b7e842180da0b5b36d3dc33cc46db1fa8f6ca213888c99e1e263aea230af839429643923764e7c1cc1ec36e4a4
- SSDEEP 384:qeLMUuI87V3JK5dEFPjIFrn4Wh5MU4ePMIA:q6MUh87qQiTIEPy
- TLSH T17672C0310023BDBD4690A1E75652E735ED01CB8744336EE6D1CD99E18DFA2218FC05B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 2a870e45ef7df73045035a0246871a1c8ae466e10b94ca8050d15deed3e0de0b
- MD5 f58d631c1a7eb231dd3f4227cb210943
- SHA1 d1d2ad19574980e96396970a77fdfbe24715fd0a
- SHA512 cb75785685a855ae8b2f0a8edd90cae09a7b6ec604c40abdd906bf31e0f45f74b2bc90ec0f3cf8d64b2354585f1150a5b564c46ec34ae60c31a6cfc14c9dc364
- SSDEEP 384:tDKO2tVHgb2eIY2K6V7XlAOxCX7VxUwcIyCeZlSsgzn80x3LpPNm7v6j:U/VAbDIjHV71AOIX73rcIyCeZAT8M3Lj
- TLSH T11172D1E6BBE38397FC91E1634B8E03E295471D9A00A2D9940614D1DE95EFC273AE4CCD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 5ea661b7a4c32d2222bfc045a201fec845cea77ea67c6a3455e09e3a88ece67e
- MD5 11aa5223fae8c222c5201999e176abf4
- SHA1 8953d9e5b9ff9f5537e2c8a00af52ef3fdf72949
- SHA512 9156ba8e87878f0bc35f20cdb129c8caadc9323212677bceb14e517470c20669c605979ccc466bd5afa4ce52aeacfea4c4058bd09c52f12397c069f70cea5f2e
- SSDEEP 192:EPYAF5mI+soUmYsXkWROe+Q2Bq+Mrb2ZbFCOFsoTTHUYvTLnkDSbvN8:w5mUorzkWROeoBqNrybioTAYvTLne
- TLSH T1A322B0D0C12B98993A699C81B51B2424FE0955C88416F4CDC46FA8FE5091FC3F5BDA79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 8252d669ac0ebf43e8c066247cdbe65e661120dba13a0ee4fc6881db709b25ce
- MD5 2b7e0554deb3faa7459a6dfe2977677c
- SHA1 518da0db9eae7186b17e963de66597cd84802e33
- SHA512 8a769a6cd5b0d90dab6ac0e27be3f9e85ca9a64fdaf75bbaeec834f88ec5630daf78876de09910d400f0ac385789a2cb84b7034bcbc48aab495aeeb0160bbf87
- SSDEEP 192:QtAXN2bmDIJm4sw3EwnOXsVfnhQfT+KTdY4ajJ06tFYr+S1Id5ygZc:QyQbmJNwjOXEJSY4aj5tK+MF
- TLSH T12122BECD45987F00141F6DF48772620223921E25F7DD6540E2E6D8CEB6B856BBA3412B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 c705e6d61fab51aa90dbd554ab55cf0d9bbfb9aa8cfaecf13420b08a943c874b
- MD5 3d759ce7c6296ba571c9be866752ddc3
- SHA1 4c17d38e58528b90eda8d86c06e6b572ff7dc4f6
- SHA512 b4286b7f453c08682f565989ac84ac9f11c7a0a1d999b2a9c76c566b6d563eac4c9cff7a6efaffad598bdf4d45649875441b1b38bc186ca3efb0cf4e2c1f2592
- SSDEEP 384:H6GfwqXCL0OTZhmV5o06KPgrmZxd4AbuluraqBfP:pwlgoZ4VnPI8xyc2uWqVP
- TLSH T17962CFF75676ED46EB20451344C8408A9B31F5A235BBDF2014436E87E74D42DF0ECE4A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 227fd8b64563c516c1c353446e63689e977142e899878a399e725526170eb823
- MD5 edb8f61de62125795a8d86570c2911ae
- SHA1 3481d755355e0bbe22babfc54593cb4266c4372e
- SHA512 782e2caa28445b4a3629e97780f0f930d155b0fe7f491e26a931880b8f7d6377879bf8588ebf3455b3eb65dc1301676e68ee88aed6016b27b6bb7ff82bee9a9f
- SSDEEP 384:PyG559d2R7drHs7+HdqWBv4/vM5bB4okuYb7zmw1:L9d07Ru+Hb4/U5bB4okuYb7zl1
- TLSH T12972E10E4FBA27264ED7A7BCF5AF48C207190885F4A9327CF4708E0275DE6390B76850
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 5d7936b3990c7e466e97bd60392e05c4332caf4fd93173f4e675a6b3aed98945
- MD5 fe8f3a11f2930e30d3688f8813e0a33a
- SHA1 cb35290dd4677a9413ecb09204bede99b1795ef0
- SHA512 01cd769f04053e5f9a066621b2aa001803c05ae0332707e2d74fab53629c85db91bf572287cda6fc60171fde4be9db54541cbe3a7a8812206edf3cec11955885
- SSDEEP 384:isNvn+wQTkLFZ2kAs2X2tnganDhe0NiWMSopQE4YUNtMb:isN/DW4O2tganDhe0TMXpQEHUNY
- TLSH T13D72D016F1BA4FE0B7FD8CE8CCE7511A2A8D744C629C0B0F5D4E438B882B496A0351C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 5cfd9b8ceabfb0fec7e4eb6ecdfb70a7f36f2e471f06d3c1f004bf698bb82081
- MD5 80771eb0633cc45d1334c2a543111a7b
- SHA1 2e3f25ecd99d3550bf46d5303aa18e977706a3db
- SHA512 c6c156d79f226b095338bcdddedef2a738db57e4f4590fb63648f6b24e7a033b87c8361e0bf6642380816feef043e152a000a82451adcc907f3cc42c858f3ca3
- SSDEEP 384:XeMQc3Dv4CK9Z/ceKNOHR+Nje2YxNkFHw81kZquLXD1kEoRu:Xey4CAKNOxPRxSFHrktrD1loRu
- TLSH T1C672D09B12443583C406C799C8DC6D5183E49D5F234BC1ABBD18CB92F2AE7A2FF06695
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 879d2617b45ad25403cd461f86df184f7c812489c4a1f975415f85010bca6fe6
- MD5 17dbd761e2896f543f1212b191b85ae0
- SHA1 af04600f74d1ba65cde9741893dbbd69ce023558
- SHA512 b95c93a79cb585cb0525074054798b19ac6a296d77a5d9c9725d6ec753150c57e8bc42ecd2bc8509a6f3dc5dcbca07880e43d99e36a620a7862416f4e7394b53
- SSDEEP 384:USu+CLFdMIfB11ToYFnQC1DbB4xPzYIC0jlnx9i4LT/+SyA7W:ffCZCIJfF6MQPzYx0FTFb7W
- TLSH T18972D01AD7F2A418A7964220D6F418DFD604E92FEA94B40F1E711AE9BC09034FA702ED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 1a6039d093320170560c9a83e672cd183d959f0e4cb452bbf7d6111cc544131f
- MD5 47dfa07cd606252c54fc48805a277978
- SHA1 703020725f18026ae67fab68b42855994e30c8a6
- SHA512 79afcbc99087f7b7687f94978d3acbcd5e5708690d3bf3522a3fa649d8a7164ade4b917d1636469fd6fe32d3dbefe2d85200cab81e8e4c98a2880130c3a4b030
- SSDEEP 384:OpDXFIhFWzM6KjNeLa3ih/FKMnKcCZBHPYlecE:8DX+PRjNeOidoEfoHwlecE
- TLSH T1ED72D0B4988C883D8D882A7BBB86F46BC07DE46FF70D6974AC5CCE260599DC184573C0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 8052d0e9c554e585adfd02814ff24130074244d5ee39370b4b3359e8fcd10c88
- MD5 b7a48774e138f3fcf19645830ea64dae
- SHA1 96930f461fe4be59fc3fac84d277fbfd4fdb275e
- SHA512 5602ea7fb952d882a3a79f8bed35e071a38afe7f06a395dd9c1ebbc40f8d38ead2300bca9d612648c63f0e83b76a7d22150d9592c1279aa424eea0325954b833
- SSDEEP 384:uBKXAjwj3aDY5p6z7iX4WIAtuxG8dYIveTmA0+C+KruLpyqPl:ujrDYrm7Y462nvQEut
- TLSH T1D172E196902350B1C06F5FE019680E26D99B58236F5F47553391B7FFC41C4158ABEABC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 4eeaff561921d81e6f2cc72af8b09b40ee59d7310e3efbc24d6665ab1a36b8ee
- MD5 791135dda67a3a291a892eee99e43771
- SHA1 fa3cf7420aa04a3a59fad340570ebc90964c8704
- SHA512 9828e7b56906f4fa0094f4973b6244b9a6b30257223defe3d805d29d6d7bbeaa1632f2ff915c8ea4f6d8b3b6687d1cb9d7c7447a9dddaa512f9400a6a407ba38
- SSDEEP 384:SmUyzSnkJL4EQluB1+dCoZMQveuUB9ZSqltUtp1a3yal:SmUymnOkE9oLvru9sqltewyal
- TLSH T1D072C0615740030F2874EEEADEA416B23CB34213DB574580EBF1A182947467F65BAD69
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 8e6e5d47a968f144266ef3a9fa72120292694ff50cbe5effe95861f24517cdde
- MD5 7ecaf4ef44f57700619e8859f76c83d3
- SHA1 b51c34af7144ac5d4892fb196f05356b8b78126f
- SHA512 26763d45b3b8da8f068c57eb1d13a37aec305db785f3fb8c1524b710d25d647b3af9896eab6adde8c4ce2a76edd1e3011147b7ada2ce311f8be14452091f5a3a
- SSDEEP 384:XMs0lDVTVigp34C32ZvGVz2g4JzaphS2f4rUy8Af3BviT5DaYdyC:XMvlr334C32ZvAKJzC02fKb8gR2WYkC
- TLSH T13E72E152462806FFFE340F0715F0AE66558542C5FBA26A557B28E851AA014B7409F8FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 f47a0e51559a5669264c80c3b0acdbff0a60c2adb155f1fa9aa0d62d8f543554
- MD5 20abdd651da62c3a5155671050ad68b1
- SHA1 a2246553c31d26a42ef5559dd94b4f8e8fd18195
- SHA512 0939f74e69ff8b5d958dc745e21d636c080edaa61377ba96b8fdb3e3292264c779cc740533deb22456101693e69b5dd06238c747f6446733d12c5621a7371e75
- SSDEEP 384:M/wraKZj+7fl+KI3oeGoFlYgW354CXao5aGG:bQlvI3oeVFjW3WCKuG
- TLSH T1E672E10197135A1662D1C13E38E4ACBE45A8371CBEEAC32C2685F83C147775EDABB498
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 4c7ca7246f668d00d7a3e7266229e177b859a2efc7ba66569b5526b599ade626
- MD5 cff3b40e942ee933de76c44573568427
- SHA1 132dbc697c8a98d4e8e9618db6edb48fd5fae415
- SHA512 1d9542129c33ba8632b1498bfec092b8060ac072a8d6f8e76d60b30c2e2c15fe4162233d706281992cd5c3960f8a77799dd7c2eb0e11ffc05299cb28f4bda757
- SSDEEP 384:g5Q1+tMQ2hHzfyN7d12/xwqroK6M8DPOJ/g:1MMzJmN7d1251r58DPOg
- TLSH T1CB72D1072362EDE88EE1539744000DED76F0A19D4D59F2FD68CE8232D477D2865A92BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 c9dfe51016bc311040a3ce729d9d8b628504d8817a13388ac547ef1476e8e0db
- MD5 439f86431224788a2356b659c07dccc8
- SHA1 14b455b40d5c5a0a6c804c3c5d71fb4693dd7526
- SHA512 20279e2a70fc4a07fbf33e05478e7c0fc5498cf6eeafb4693926bb95a5a817bce85e698298ba20997567234fd420433debb917402ef03d55c774b009ff6a3ee7
- SSDEEP 384:MxczDjyL1CZY7nJupfz6VkWkPn65vyKlZczJ2x6HbZgLtM4TN:PPY7cpfm6Wkf6NycczqYbZgLtMKN
- TLSH T14572C05A6722C408CBCD259F85C7383CF096B52A526B79A97A6F86F09C300931574F77
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 1de645d8183b6fd07cac1c1acc0aac86168f6a98fb0b91f188d48cafe7bba449
- MD5 194725335d42dd6306d46ff040330ad0
- SHA1 304c34f234df57dfce6d49eadbe3954d577a9b38
- SHA512 591d67ca36b2445a9de4ce387d072b428fdc9d7c55b1eecdaa4bb537d836441c7c2b5fefe5a385be1b9394b7704702f3cfc1aaff6d83d746dfbb2b28996a57ec
- SSDEEP 384:XWCEoFWIUx3A5l5qc2QMAbmVsmpg21uMihhhiVkgxDbEj+hWI:XyoFhUqXF2KHmpg24MikZDb4+EI
- TLSH T15772E1A5B6275DEBCC1D1BB8383265A7F3608742CF8D03889108CA3BE557398E7D6527
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 7f6cef0fb311b0f9f507acd8f1341066b21647e0bce91be785b24daee635fa9e
- MD5 7c41f81adf71b51c9a88ecabc0eb6954
- SHA1 3e49d3b71f7551f9118c4e873159fe07976db410
- SHA512 7d02aec376097fe04465b18e9b4da992a7fad3c25319c5ae721de2fed7b80cc5277e44a9bed8618e21c2632428ba1d16f895d48668b6849eb51f8cf6d477e048
- SSDEEP 384:BXxMjSYFTVUkwDeIhCijJ5Opf50WYNL8dcf5eGhKdBNlO4ycA:BBMOYFTVUkwDFjJUNi8dcf50BNlRq
- TLSH T16972E1BF3A0AFF1CDA23DA08525D9BF12D4993197396D5E1C93825D22ADF692DC20C90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 0fc8ea263104b299f6d8f0eb0a800e8571f4dc10a3b58ad052e194f9f3f1d46a
- MD5 e9a5266e1c3a1ecac3c3df26d47ccdb0
- SHA1 f5ada8f690b41e72cf370128cf2b4b94a4e44f30
- SHA512 439774372f54c937f4fe8d1103d6f3de6af77c8fadd99c7fbe4e27e66c0d825c8f953a8dcec773439c500e9fcbfaeeeb54e50326b09d97208cfd0cdda85d93c0
- SSDEEP 384:rccVYSfLyjFZZ2KyksK17RyJX5kupjBxOsu+KGhokY9Gm:rcUhRKJP1tyh9Pxk+KGhFYEm
- TLSH T1B472E171E34F841E94D82BFB39E528E687BA366CDD3005C73E255F0F992834A630665C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 371c5520b309c6e50f4f6eae1eae6494a0cda88d63fed4db3f76bc21c14e72f1
- MD5 651cbd4ac09d079538700f76bc60d886
- SHA1 8cdfda90afb8b9ed404b4f403e872c83241eb744
- SHA512 603be992904453d19b50f8db1211e978f063e8f4b2ce2945176939cba68226e0049ac5236055e82c557db4d57f7140863a090b02344704d5f4de460adbbb188f
- SSDEEP 384:2xN7uoUVV+gzyfeThS/bOIg6JyqF41owpycujaY9hLkpr:MunV+gdsCx6JyqFQoMMj3mr
- TLSH T1AD72C0F1CB6D9D8FE6CD718272522D4941809E2A6F5C782BF3CEC661C73094B8269D39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 493B
- SHA256 fdf679b2d3bdd4964e00a7d0c1fcedde97882fe4ed01714d3d7c872afd94186a
- MD5 3ff72cce67d1fb31e348096df5222d5b
- SHA1 141fd62b37cb6382de84c4559a373985e3fd7060
- SHA512 0297d20c00308ac23aa162c40c0ab8bb87420da9905c876af7674724949ed967370e273738475b313d46d0510848866ba955dd93cd2e2d3f293af5bd4058a912
- TLSH T132F00EF22D80B112C23B58A60B11D231B3A30E15736A8C5B0C389648AD8892A695B93E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 605B
- SHA256 6efe8f6f751983dd0c26ab6f6fa839691a1f9b0904fa30be9c52da8fbff6171e
- MD5 f3a41de2c837dad66d9fd7cd85dccae2
- SHA1 e3687f3ba2445c0cc0b04380e798f79bbe1bfbf9
- SHA512 b5986ed4f92bf31ab52065d9c9577c21137441d4973875ae1d21e368e22792f7ef43df3ec1771b870bd3f0af473f0194352d95d7a67d27dc9434b3d262e87230
- TLSH T1DCF047661A2954EA42978314587328F8DCB4012CA8152E80CF353E19743FB083225E43
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 dc6b336042edaa5ea566c3e71dbd1247bae301ce7db93a65ac2007d171bec716
- MD5 b845f27129a57a36c94a8bc39b10db35
- SHA1 e99531e81fd1abeb7cf6aec2e7de353e29bfd6d4
- SHA512 ab6b0b070093b0177e19fb11aee3de05874e17f1f9581c7e36e1414f53c18042c21ba6d132314dc85e438c02d8ac6538f30164afccbcbe043376dcfc612b3c97
- TLSH T11A118605C04C0FC919750D6674C8E1DFB55C9190A9A264424ADB2BFBD69C8B3946D372
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 4c638856f8d8eaa5dfbc5555eb7ed251dff347f7be0e75e87d18e6a49b7a913d
- MD5 c65c82f33c0bc56b3aa72c3aee7da6d2
- SHA1 e0ac248ff67dd74a87639267fa8cec3b6d554147
- SHA512 ad129f216680617881b4619722525efdf1ad1c08cf01e3c1f637ef8e392c748a6fc03b72328f1e4d5d38b88a04b953245902e8b8869c7a8d9a393e623c35d7c7
- TLSH T1522196EAD65E32570ACA8F9077F9A5591F32A8514D06C858D682495847E30C7C6C7D8C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 0d0a4263586ee3823375bfe97f7f5db80011809bae04bd588df2e0056022966d
- MD5 d41fb377bd08036afccd803a7b02a959
- SHA1 fc7ec54154e57c3530bfa2ed7b81204c3a16500e
- SHA512 fcaaf4d15b92e5563ea6cc66ec3b7db3dbd07cc0789870dca318cd3b26ed8b04dd741866c75ee6bd449367b7240ffe4bbcf2739c0dd13b7dc4631abd20c6f411
- SSDEEP 192:KcLZc6Wg22ZHlNhuzmuKk0OkNItixHbNOolgDhuXVXHW7n+50ujyoJg:KcLEg22tMzDKk0zKtixHThXBHW7c0ujq
- TLSH T19D22BFB6B8CB90237A5923C5DE2A92C24B916311A0B5BEC7F24D375971DBD700ACFC15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 d914a286175d83b52eedc76f6af5f48e8d35ee2e8bceba84f206feb3a90832ae
- MD5 0d9ec40d3c76ef29d16a1efe387b5035
- SHA1 25b6336447c8cdcbf04548c9f652bceef1a81d51
- SHA512 21893e4d4471442acc3102d99dfc684d5cc7279fbac18f123e524a12e71b6b16c47198231c6429532802cc5441bac3229b0da94cd2cba62c1b56ef6866842feb
- SSDEEP 192:Axp3kLceWVUmp9TnAvJ0p6bODMXo1SbfiDXpQBSXCkh:AxpULcFUmEaDMY1Sbaysykh
- TLSH T10E22BF8897C0B6B8670F7300D912BE224552868FBE179892F979F3766EF0ED5C244D5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 2bfc19e3e96e7e7e8ea2cc931e0b63ba8f31ec43714f86c825576aa7dfc36f1b
- MD5 7767f322fcf382ca01300ab4e53c6dfd
- SHA1 790734d1aa5ce0ea4ca29c08e285bd1223ba82af
- SHA512 2fc1bc57580d05ac900ee6f75b671a2e73ebd74c2f6e8bff6315c7733b132f5328d2437338b69946dc6edc3ee0acbbb2923a5a7cc7e81f4075bef0d1fa1a0e14
- SSDEEP 192:IKBkxffg0B/eajtAVetptiwotmRK++4cbSTzBI9ZsbcE6cjmCntdK:IK2Rg2RRAVWtgqKirGObL61UK
- TLSH T17E22AF69303C5DED30237524AB062095D7DAE664B31CDA6B96910F43CAEB4CD362299D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 31d3401845207d0e845cb11cb2159b4a5e4251fe32f5ff32706a602ea4468269
- MD5 e905381c894a621ce761dd4dfec716a6
- SHA1 3407176e2daf75c32ff0e6bcfec2820cb08dc463
- SHA512 fa8754eba98bc1b26e166592f787add24373f7c760810fa09ae69ecf87a3aa27bfbebf00853ae922c36d6cc84ab897eb75ffd2f1135b618927f0729d1c196416
- SSDEEP 192:rhoJusoJUN8nKvxc3L89rM7NeAhpefomodtrBly0v6pTppexOkr:rhouJu2nbwM7jqyBlyu02P
- TLSH T10122AFB2B9072E6670F99D4C2D199302C4DD9D06C1ACA0161F4AEC7A2458327ABBDDDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 e998f72f3f683a4b0a0c765a650e2337df925912634b7390b09f2b814a3efa7c
- MD5 912a02a0184d8f1885be71bc45a47d87
- SHA1 328e5925274cef7e10cbf732051de2e8db987afb
- SHA512 e21726985de8d6de1f96f6ea5db7970addae3b6c981ae2fed6d54f28191ed709830f552e19910a09e615404cd9d920fc274f6c3d1f208595cce382255ff621bf
- SSDEEP 192:LYJ4hnhQc4AcEb+J1PZjdOyPXwzj83ZLebrGEzDm5bsEQGrvNAbOPjfAVWvw6YDr:Hd5c9JRxdOyPXwzYZLebrGMDm5bs+5Ar
- TLSH T14722BF1883E47A5A0C453FD1E4DE0987C26243CFE97A28DC595F7C95B528D2A1C03F8E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 033bc7fa9672055c2f32fe63e997dc29dcd34fcfef45f26462fd2792f3d81005
- MD5 19417f33df23c03048b4fd20d6bbb67e
- SHA1 78843c4946d05812a37ec9f44d9f767b3d387f2c
- SHA512 a40469f1b71f52d310d39b23b6dac704ea79468ca20f99f4ede24d2200a53c26d556411d372df3332f9df0251c20bb356f9a7530521a9e927f9e18364f4d8838
- SSDEEP 192:iFxQWGvcm03F/6QKPnTNWQXctqUgb/wTzFKYUIW/2lIDseNEthzufjR9YO0s87o:in403FfQnTN6IU+BlIQNEbzu9YOIo
- TLSH T19222B0EDE2D7BC32C6F9929CF630386EA0497A45B385839866CF005187CC579853CD5E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 09ad82d471ff8c2ff2690fcf8222363e5073406900d161bc22f8579f5cfbc32e
- MD5 c3d8a27b474c7f1137506dd4ecbc839e
- SHA1 91c18b3c7fc33667fc71d02caf8511778b8d73d8
- SHA512 79475ff12cb4fbedee28e220fd12a791b9f39c48ed0aee41d558ce413ef6f70ade7868294d4a827bea6bbc3503954917bb80c7d9e69fa80e54bc63aafec21188
- SSDEEP 192:ENBK+Wsw0rKTYcNgTL3h6K7yIOhypF+IokEK9hf0+QvQZMnFoYHKwBOeNqN6RjR0:wK8KDgTL3h6K756EnHhs+QvxnFoYHKwC
- TLSH T16422CF693E5BC4630EA207F2DB5E58BA2B28A0463F51D7D0932FCD67C452F0286B721D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 087a0309dc5118ab17645e188b3a7622c0a30f4d1d338a78ea68556372157239
- MD5 f4d97939cfc77846b0db4d600d10fd9c
- SHA1 147f4ed596d57da56d9ab89cef9e008695de0140
- SHA512 94c6d5bc5cb4fe3f82466d997b5b77b84a2a7f6ba955a63747afd4fb48edd32f51039bde0e9e4c6e761881b21757c0611ca40f0d1171e2cf8b8595d8909c4ef3
- SSDEEP 192:rUlaxceTFKjGEX+iHT5/wDDYhP0A5xoK4uQSt6tHOPNKvxLNFQ:rUlaeWKj1+i1of+PBDoK4xStTP0v9NFQ
- TLSH T1E322B08A2F5CAB61E77C9034E53FC404F2D36C1FAFFC09664441B9D44BA252A5C6B612
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 fae82843ac3f0d693d3bf6592f6c78fa19488e53173b9582f8006b45a8f6e559
- MD5 7218f3ebbaf1b2a1722e45c3813968ed
- SHA1 0a5aa63d5a7444f4316f0e7e25184112dc398024
- SHA512 ea35885108aed726956aaf7eef69a6b2b15dda6bab9613e79a68cf7623381b2055998db98de93b3d376b64cb43968a133b61a8380c9c19c43dbf274bdc589df7
- SSDEEP 192:3yL9Nl06JGKh0zYsU0Y/BVhNVzQtliTeyL36fUfidc9m3khHDnEItmQzICB+5/uf:CL9n0mvXprNxQ6L377morEVQzICYuf
- TLSH T13F22BF977AD5A7705492ACF4A5BBF898C1FA18C912E03394912C7E617404D72E229EFC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 6e800d82261a4911c148303ffb3d04f21e70cfecb32e1f15a3967e862ff857a4
- MD5 9b83d8e567217407fdd73c4d03a25f68
- SHA1 f8cf60677ab01824529350f9c1a5f07ebdf1ca5a
- SHA512 164703b4670e3d10a676360c9b289a29ad76b2f7d53df87ab4bc54f9fd18d380994abc1be0ed7e3c3371e900e4849aace9475d22d5a528176369dc7027106333
- SSDEEP 192:FF5WXYIOqEFJnTQhcB4KcYPNtmHTxyJjFiQKUuuygYorwXgkS+AgRo:FKImEj244iP0gJZZuuygRrrkS+Ap
- TLSH T18522BF4041D82C4F21AB7F9BCD11C958FAA970A45F141700FA9C56F08E9768A3DBF66B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 9a58abaa70ec8885c285be50f4a2d0bdf7ffa89ecee234175a9560990c835d55
- MD5 c0deea032682c094821714d19250a40d
- SHA1 c83d6c6860a48fe5e253f38e6c973351ff49c42d
- SHA512 c5ac47bc1230ac6995c79ad9b73fbed387de04725e40026044331d4d926638ab43edb5d12e6f834b79923b066a63d288959c020489f278c0b5553f949bc14c37
- SSDEEP 192:YB+onAqmoyHcLPwjkl04bTldaqrLXH1Kft2UhD7HKx5D2zXsZor9E4:YBpnA1oQcrwQHbhdPrLXHDGqx5ybh
- TLSH T19C22B0B161F56B978A1546C1D27D0655A0A720AB41C8D08B7DFF07632DFA0EA34CF6E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 7eb86bd2caa841de839a5282d64b1d7ae628170da58c8427a9b66b7d86000803
- MD5 a4381273b8f6fb7a88dbca2b7f895615
- SHA1 e28b9873688fd1da9692e360147035bef9114929
- SHA512 4101942b354580a8a9969f4527769d85f221a7f34a629bf43ea3ed36aabbe541b41a36a8086d7c965c5ccec7b09dffd2fedf36771ff96032a52d39a2f2d8c19b
- SSDEEP 192:vbreZVaNDd5DpmRVeuuqQvmLm5jJ2LKQY410FRyM/RSwX+uoC:vbrbNDdtpmPuqQOLS0K+rM/RPX+NC
- TLSH T1B722C02F53AE50D1A105C0B3FE63D014B4CD14AC2B2772BD6EAC1EE8BE3D1452834194
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 3350ecd27adc84b90f53473a89b13fb2a6ffd42b4d3c9ab1e9d3d6d50ad43264
- MD5 c94f1f878aa0ec658e9a723244db60a5
- SHA1 3261025c67d03f2884fa42f4405f105ecc4747ac
- SHA512 74c4b862537736c5e17e0fc4a8bb9b3376eeff22b1f19f650400e530283a17c60d25c2c8c0cd6464ef3ac2f574cf63a51e7e2fdc06f9b6fe6d126717360e2767
- SSDEEP 192:wovIxmMw4r/1k5YUF8neNyUYt9Ais5ilKICEWLh6hlurx+TO8qv7rs9jPfySx:w7jr/16bDU9hsYnWQOjTrKrDx
- TLSH T10E22B0281CA2789A44B81CE7579DCAC54533E2E26FCD8ADC9D1BA1968DC22B4D70C1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 bad14b1aa9f11fe8cc4ff6b9511c07da44a8079387aec4817b66d3dd2f6cbd03
- MD5 6a775425a64e16965dc3786564844f94
- SHA1 252a071573de3671bfdedcd8cb69d64ba561fb35
- SHA512 3add8183f6b0e857d72e325ed8c480d8926be823cccfc1288102777e72f33b9ef0fdd3db98e678cf8bebcc57025c12cddec9de1eb8657c0fbe2791982d323523
- SSDEEP 192:9DB2msfhU2aWuRxNLm4DUwIx3x0yMyrT7yI6LHCY5uqjByBfSqC1tPXR9LLQ:9IDU2aWuZUwmx0347yIOCYV9yBa7DJ9g
- TLSH T17F22C03E3CED1376DAA574A1BB8D286F0D8D118A4C502DCD43C6C5179FC095AE7463CA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 6a43b61919866a311e31149069ddd7f0d52e6844bad4630656d61b8de522a110
- MD5 f060fe7fc752275cc0a56105c3474ee6
- SHA1 09d3ea58f0ceb06d0f7282768a8eceed9f761602
- SHA512 84914bbca406a0e173871ab3accd51e1c2674e88f2c05544f274fe56d375ed342e53c486f49971d04bacf3b4737aa1b31e97e6fdfc6ccd9c90ee619b2d4cbd9d
- SSDEEP 192:hXe8P3NScolaoLImFVxSURkAyYwYzvooUeWRbH5zS9EFR+wwxXGFwqf4tRzkGSA2:hXt3MdladmzxSURoYzvFBEkVgXGRzKA2
- TLSH T10A22BF7C9C0B981ADEC505B297A65AB4F10BC466DECDA5DE523209F29318F68F1CF0E4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 0c11f4dbf7da7b76e603044acc208f6d9600d284b7340963a3d2fd052e3f1724
- MD5 532ab190ed646b45baa3fcc815eec1ee
- SHA1 4ed5d3ab9d975c7566b1962232429e5f45b8a7b5
- SHA512 e78019c856a864978b053aaf91ae527fc531da0f741f67d3c0f310a25892d00e98e408bf6013797c4915d4d317ad8a5f8a54060a62e16acb7927e563f494f22c
- SSDEEP 192:ZPWTw6RjixeE6N62QxZTKdV268f9mnnYqTMI516dzKGXoPatdhZeirnTYcikfpS:kfRjixGNOKdw68ihTx10haatjfu
- TLSH T1FC22CF4430519E4E8E2DABE2735D6211A2FBAE0496B251975FE09CEC4410F519BCFC8F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 11KB
- SHA256 5ece9977cc42d210ef3d3ba5dfad9be0aa9bdf2ae6fb231076660e520ef01e9b
- MD5 55a4154d6d714d076fbaa4c76d75dd40
- SHA1 b0a5c14bde36894020cc2265d091a0ce8b7685a5
- SHA512 62bc9a309dfc15b072263ea26e91a18e94ca62bec57e750f6ed03c526d6065e9163fff8e8b5b189d5d2b32c69176840203c40f397b5959abebe97932d48c9814
- SSDEEP 192:27Ayk7w+Lqhikzq1emyOzPwLRYScjuwaPaK0IA5ZJpZDmpxUUNv7cl:4Al7VLqhpE9PjjuvPaLI0D36ptNAl
- TLSH T13C32C0F488E402017FF0F424DA2EE1BC5724E34729917F7827A4D85A771AB696F58A41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 11KB
- SHA256 95112e624d7a50fc5f439bb1b16f4d5cc4788f65fc5c342b1320096b127c0358
- MD5 d06d929301301bb9e3a2f2f1363a129c
- SHA1 56c9f75e378087901af5d685aa6faf27412e35e0
- SHA512 1d384a17c1527df8b4d3b3d3bf1071254c4fd6fff1a6dc740ee0e4a1b5dd754d2aead646cf51364a08becb6f5f4a5c3d2ce14424b7dcb89a9e31e3e469285e49
- SSDEEP 192:DsPvKxgiw24GBwX8okcoQQ/zQHF4aWedBCesoDVv9u3+ZIjgb1jQ2Ud3YzYlSdtP:YnIZ4n1kcoPzQHF441VmOIkts4Yl6tZ9
- TLSH T14732BF5B3A68071C6CC476EF3B805DA449D46F569F90CE3FC87C713EA9C092ACB8512A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 301f74dc63abe622732bce2fd859ab7f74b30bece21de48fa3e8934f0ae394d2
- MD5 02616a56f68802e913c471223c8008cc
- SHA1 92f45e1c5dcd1800434f2021ff5998f26e9bb75b
- SHA512 37379d5a22dc9e770bdee717d58579b00cbdaf125ce16b45d9a45794e7b17c7e795741ee1371394a6a9217861481e2e8963a84547f887426c3759766386c5fa9
- SSDEEP 384:k2TnvojZXc1Hu8ym2qVFHHjauUwiLtRCdP+JX9v8q8r7dlSo:kmGZXT5mVn2uUdwPGNvLwl
- TLSH T11E82E12E1EC27AE3721FC0E030225576D03D1ABAAED0CE9B5C2D697636DF388C525164
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 ea4b04ca1f52b5765e9f1bb27035f812a798a692bd0a6c03359a73a8e67bc4be
- MD5 90f8b28a70dbd7c73e28a87cda8397d5
- SHA1 f57f596d73bdf3d98bc45c16a506733f27a2f640
- SHA512 a497d987976acd93d3558262b47bc924806d9442c4fb0fc16339da078df1a0322a8f442d5639adcbee669fb98851232b0be0d4395babb309e8a89889322a1f3b
- SSDEEP 384:tt7EN8na+FPr/lACwPM3AjsF8AGu9fft6NgYRMPFOq3jO3:77U8nf/lARqJ8efft67RWTO3
- TLSH T19D82D0D489972C62B9BAE9DACB757850B61FD83FB500560DF38605B0A42E4FCC1F212B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 09bfd4664a1a1934d1a7289496b78a4012eda5af40e2e34c97f9069ba31517e2
- MD5 0601154177d780df88bec921cc4fbbc5
- SHA1 908a3cd0607cd068b2dc287123a73f3c0517cd1e
- SHA512 453e53e0d17a77162aaabc419159c7d8a6fbb466732fa53d7f4594a4ed05ebd12ca58c40212f20aec349363b7ba26696ba42c117add0d40e60d583f2091a0b38
- SSDEEP 384:V9FzyObl0J3FtPCOdpxLSdUNV+3qFOVNYBxxPCMq1L0Jvd:BmOly3FtPCuf0Ue3qFQNYBxpCMq1a
- TLSH T1D772CFCA97F9318DA4378B375817F084CA8460384F2F11A6E56C8502F3A75BC8AB097B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 d3a399fec5c50968cd6168eadd22a057b7e5d8f30b86f81e2b24c13a819413ca
- MD5 e5c51c348168abc837368383c7f033a3
- SHA1 928563d8b8f13b20c8ba250eff4bb33593d65cfe
- SHA512 f56bfdfa77add63a7c7d76ad2d294737fa68c653a08e737a7e345930b1155935ffca20614edd140fb6a1374706d84a248505649af295eaa38c8e0d3e0ada22d3
- TLSH T111311D427C33B5A6578871303DB29F410D7D55C10AE1A4563C7946C4F4C27A85A99A36
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 733B
- SHA256 02a648a97307a4113bbfc0fe0035e2b8d4d424f41d8f640277edcb44e24a85d3
- MD5 3f16fce6c049b1644a158eee30faa046
- SHA1 4804a75d5427d8fd31cb904724157e9f4fd642d0
- SHA512 7b49640eab19fce43f5eb111339386485eb9cd612cab7ea1eca4825ed4a328699d967819c47619b40a55d5d2b44b666276e286e212c18b95ee9c81f9974512ba
- TLSH T1A70165E70C8EF14FAEF12325EB89A03D3CA4B1B5A5991A805CD81815A8226C52EA2304
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 909B
- SHA256 f66845af6ddf7628695fd70213a1a49731f410a1a01b979ff30bd8971a6e3d09
- MD5 7711687fae38fdee21ba96200d567fa5
- SHA1 20cd1d52f9c4e8a9255c33cfb7e28272e3f29806
- SHA512 f3580805734a15325585072daa6664d7924f49595a38e1b1b583819f115f1fdc7ccab98c269bdc05066b479458f6c8ebb06e19e1cde31eb462d2969446052f8e
- TLSH T1F111B728D3A1904B361C06058E08D659D2924453E0A1F359D9F23870F17BF6C4589BEA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 957B
- SHA256 f707a93c2d0627836fb1e739fedc16106f6822241fc80927fedd1eab7e4617b4
- MD5 a38f57e7db31a56ac8a691f286ff5dc1
- SHA1 b32607004cb86e3edd325ad1f016b61177f223e4
- SHA512 9ffc6dbd392fcbd993d2dde1a2a4b9689451ace26c4c3636f02ce61b7f13e7f742fe52b2631108ad0e921aa8100ad1b439b44a5f7e651b1abc7540f77d2f1b65
- TLSH T17D11C8CC0EB28509F9440BA62DA96F57B6EE40BC124C28D5F4932840558FE5CB079342
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 2eec18fcd3cca00264331e94fb16b3747a09259e8f710bb988e6fd036bdd7bf2
- MD5 30db129d0ea734a34d69e873b706d749
- SHA1 6d8c28a8826428d1caa84604bd5c725788e3c984
- SHA512 0288ccb8f420d17b8ccf3070d704bd54117d3549a2ef722fb1e8046bc6966082baf9fffccf9dd4c93ee81eeccd8df0d98d119f3443d368cf1a503c950420a6a4
- SSDEEP 192:mz9D257jioDBIZP4GvcoS7Si1RlGvpvpx/KmlzISf3CpwKdIo8wZv:g9DCjxiFNvHS5Sp//KmZtf3CmKWB8v
- TLSH T1B932BF247285B39293794CC58FC2562E36F612A080EADA8933D91783D71BF4E360F9F1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 8921f7c8c3f41072d3c080308038694b09be90aff9c4a98471cd710dd624ad1f
- MD5 a03f4ea75ebb25892e9ee8d2a87f0714
- SHA1 2553e9e87c98a73a689d88b5c76a4aacc0b6d3ca
- SHA512 ed78d65cf61f3a5c7733d2d9d0f472142012e832622539fc10b94f909e18ba0ca1398e722bbeae2c5208b302bb72dbb3c317a73888ba2f5fce8e360f86f2a5a7
- SSDEEP 192:J+AhrUp/2ERA6F0eNkurP7JUDV6zvvUyxxAdIU2uub4nSmkyS4lc:0AhrUnpBNkub7JUDeXfx+IzCIyS8c
- TLSH T12122CF8905E6369CEC91B36B738183EC34C95803FA4EE20BAB6513D1191B59FAC29803
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 8c636764a14e3ec7af6d8abb245e0addcb6bee177617b4c16c57f6c2ac7171df
- MD5 1761bfb97a9867ed95b5d9beecfdd245
- SHA1 bda2196935d555b5470b78b0c14486f1f195f09a
- SHA512 ee231662a7258a00ebfa6ea4f58470b71d469a8e50e896365e196ad7221c7fff9a87a9231e2ad4eb7c7fbd637d747c8b9929ca166f91b91e4d6376719eed82d4
- SSDEEP 192:9DHUp8PYGqih9Rc/Lm4514FWJfH/5IGmLEnPZUlSwP6pg+4nF:90eKW4uKfL0EmM86O9F
- TLSH T1E922C06F2EF8C5EEE1576442E057567BD4044F019B9713BE1B30CB4432A21FE14B59B2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 11KB
- SHA256 3f56eb89cd8f48ca3c6b9ac152fd541b2b7e7ba70895d7b83a88e7c41856de0b
- MD5 85dba04dae858aaa5e2c62fce4ac6120
- SHA1 e66a8a89d19369a06c723d2da61ccb7409fb95d4
- SHA512 df8f3d5e5351fc37f0fd9422a812e26c410fb0ab0ffca329f8ec10e8ddc5503685d97b8465c8d879a065b73fc28a1827877b5082feef242ca4b318ae4c7063d2
- SSDEEP 192:NTiRWKVToJtFb23PuZ/uWcIZK8I78ai1lADCGry6dpd0+86d7rRdDZ5N69EujgLZ:sWKtCtFbN2WcEK8KG0CGrzthrRd95NIK
- TLSH T11032C07DB0FA77901986B780768EC9E94D5600133715B32C44E858277FE13F642A20BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 3a85dfcfa50c57f2a5d29ee20e04294fe5577477994ea7233125df86b3df3a9d
- MD5 9fd26de4913457ab314a0ddcf4f95c3f
- SHA1 5dcb93c69f97c0692ea07dda64ea436dfdc4c14e
- SHA512 2faacb4bdf31bae12479b7627c979a5ca03ae83fdafc6cf565fcd315cb1915a24114e12413f0b04dec7048e7edc16dc18489f37109e5a4cc2415c28f22b10d64
- SSDEEP 384:bRHvx0TQrlSRrSrrcjgOx+Q9mxfvuZ230i1AuxCXjcVX8SyR:bJvsQrltrrckOCfAyicV9yR
- TLSH T10262D05208213FCA5468A035F80571D9399F793A7FCB5F592E8E2D8247213F42AD21EC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 11KB
- SHA256 274f5de34e7827425368ad74e242b990b23a4b43dd51967881c92d5dc1ac1a94
- MD5 e828a36e0cc5c25b3c235eb934a51560
- SHA1 74304e1307b0b21d9bb4ac5f2eec791514974b09
- SHA512 8781ca8c01032abf6897639eeedfc2d41ad2b265d38c1a5228afb458e54842585fa60c94145907aabc88f96728304c6f7ed81b246a87558c8547b82dca365228
- SSDEEP 192:DJ49o2wLO2wZkfEfq2CIjZSlKkrm75OFj/UCnTqYQ7zj914ziT0AxrzaejGV+kt:t49o2wLSksSqVYKb75qjB297PvTtJaeI
- TLSH T15132CFD45DE1C7E7946AE3068BCEBC273C20BEC8A250A4361B09E3D2C7D9CE441487A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 11KB
- SHA256 ee8f35421143f527e7dcd87d89cbf25dc06ae194fcc1d1ff6beb85c881a4b1d3
- MD5 7f539743196c7e1814f8c8689cf3e721
- SHA1 3c1f140dbe4975d35df8a8e95c096afd73b7a236
- SHA512 0dda6de9c8a23f3e670bbee1f43070bd97a187a31d16bcda120da92ddde590befba356d3e6ff38ec526b7bbec91675e0117646b29e1b0d531b47f67477234496
- SSDEEP 192:dX5Wgo4UhWbaTC5mGL97KONu/sCOSS35gOLbS895jedO0JSX400cnKNDtzZF:5VdLoONu/snJ/5jeA0JSXR0cKbF
- TLSH T1F042CF4FD2407DCE401D1891629F467B5A57C36BDEEF5099498E269BB0F300B7F282AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 50057ea5f51adbe15b7d414aa62c74011847d286e22256d106f9f63e97656ef1
- MD5 a4abfe12c008f2a90533450ce84151aa
- SHA1 4b47e9e64d1f813648d4606bfcda35adcb2692ee
- SHA512 f29fb7ef1c1086accec93cda0f0b0a236b2249d606878ae23ec1f21f4fbbaab20b187752e5770ebd8487c218860c34cc005c496717f6b39684f2b95335258f62
- SSDEEP 384:GZduggLDIw38fSSTPtO6dODodCfHCCcQW4DEdVwHFQ:GZkX5sK6tCfiHzdClQ
- TLSH T19162CFFFBADC9A1D060E62A1C05F2F82D2447590860FA05EF991F679E5B61134F5B1C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 98f50c475d6c4056400d94f5be57e666fa841cb4daad83fde7c3ed78712df669
- MD5 33175aa960c9be26f566dc0d316dc15a
- SHA1 b8212911c9f076a505729e85025296e01a196ff9
- SHA512 1c3141b5c0c1c26abc056af383fb5ab00a13546f8f9dbb85efe545a2410ec0a1bc33e3a4c32424b93f7c6a7f6e5909eb459bf9eca8017eb79b12086eb9638e83
- SSDEEP 384:Snyh/AKG98ePTcihllCBMsKiJi6OhMfjoMgxj7Sj1:SnyxZ+HVjIlM7G1
- TLSH T1E462D10CF06059DED73F781A8B7D8C698256C5848F0C5DD26AFB23FB826B855895E10E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 0dcedc940cd626dfe02daf460e046611be343cc518f7355c5fd2c338f7405fc1
- MD5 ceef551a4744801a43ca755cca1efe22
- SHA1 9edc014bdb994c7abf50aae8c6bf8592d35cb9f8
- SHA512 54d742b9bceed50942d509b32e25cba1f2558be73ae561d8993e9d6033ec6ba9c88e37386597637acde7f701fadf8b085975f805de156cc968dfbaacf1d91b92
- SSDEEP 384:K7W8mrN6H1uF55Mk41SRZVhP26bA3UkqlEObwy+9ZPUsv+SGGLYv9MTbXA5KU:KtYMAE6l5UZTIBMfKKU
- TLSH T17782D013D5726B39586C62509233DB489ADD2177627F088CEBF3A0F2297173621F5EB2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 7KB
- SHA256 c06f67ec5d601aa2d7cb54d6f43b3c923aa0cce861b0d184483f9cafeabe3cc8
- MD5 0aed2eab45710292a06ecc38ee66eae3
- SHA1 19b466ff5668076dc83f02e2589129933ed18058
- SHA512 776245b43b25c2167e362477265ea67aa4a7e6c691e0d39cb1315c77fe940a5fae3b5759cc0944a90d35261d36245a8922f3a2e6b46f5ceb294113362627a86e
- SSDEEP 192:1jAVXpswP5FtDTAsdwsFVbtO8ZeBp2vfCTHFusVBKTD5exEbBXBj+:1AVmwPpVdwsFVhOO+SfNs7Ilo6BXBi
- TLSH T130F1B044AE09D1C2700EB25B2FD87B8957BD2BEE1EE6334C15D73639D8668CC5657404
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 12KB
- SHA256 810981f7ed0a46e3ffb4de33de80412c70175d415a1820e3b829039538bd6723
- MD5 dad5e9c8551ab27753291d75b4637e89
- SHA1 528016385551409c75b86799b49f80b58399185a
- SHA512 b9939989e30d90121e416f21d8b8b3e011ade113dd78fe605cddd327be670118c9cbd48424140e84d8aca7238219825e6ccea5d7f96ba568946a5630dacc166a
- SSDEEP 384:UnAgSkcg7ZmJL+1vm2TjF+NWMa+N5kdh7EHuyd8Y:ytS64LiO2/F7MaGYQZ8Y
- TLSH T10542D0455C8B1BEACB02638EC2F22E59B9E869F827C1FC3210541F4E62B10EF58D65C4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 fe8d5c86e5eeed0403169a92ecff873cc8d48a8ee63c5f503aa9443b38cef26b
- MD5 9407ec5044067c2dcbad68483b699b1f
- SHA1 1e36d2181ae14557f2fca3e37aa2402db3eb7d0c
- SHA512 fa912d03b8489f535c004ad9c7d7301483a4a710c507036c5b1cc3961111183a6b355d6ca8570052ed13c4a10f502ac4624bee26f2743be9127385495161ccd9
- TLSH T1ED313A2CD431032F85AF32B6401379D3497DD74761BD4CA354BA292D08DE15F71426EB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 11KB
- SHA256 c0f3e8ffd4a2fe29f1013f6f6fabc4bdcbfdda3b88328be1d508188b43a84a22
- MD5 10e61888cb39f134cd76ff4767bd5947
- SHA1 58fa775370ed5b291dce6830378367832c6bbfe0
- SHA512 b26f2af14eb25212ab34e8a1e8cd29dbc30a992bedd713e9e7e4f8c42e69968cd64b74a1891a4500051fc5560e5cfbfbac19904feb0b15b1ec43e88e244b3872
- SSDEEP 192:X9u9pLXYZ/DQkbYHPpFxkRtkkgBzZrU2Ezznwe/sqmh57fcMzSZs8:X9uchQQLQ3vEzznwe/sqm7fF0f
- TLSH T1ED32C0362CF9F0650CE2E9AB3205E8FB4EC77D07E19964F93032E46A5C18DD8B781641
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 12KB
- SHA256 5822fd56865dec30685b6ad1ed7eb0062a65a8ec702b33f495d26de096ee73a1
- MD5 50a3bffc61acfb2bac952e0e41b70ebe
- SHA1 77861d773fcce99ccc00b34fca98d0779d4fee85
- SHA512 5c243f8ff207f423c31a644ad4d9952af0d4b6929a6d1526cecc73961663d778a871b8a7b86353b72cc601733ba43211a7e508b0cbffa3005a2ee484b3230b56
- SSDEEP 192:ke6R2/7GAD2qMqwE77ws9w6dNKVYTDhtYeYlyxT+o4Lkj2Yk6jQJLJWdLduKrcqZ:ke6R2/7n211YldNKV8hye76LkD8S7V
- TLSH T18142D039A43087EBC3CE7AC4D57F769168EACC2D2125A387532107A8BDB088906D4316
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 940876bfb746558529ed095353aab232e942b45e3702157c494c376c1abe3ce8
- MD5 5216843c6c7531c3aa38d4b7cad2fbdf
- SHA1 bba53f1f3fe852ad94df2dc9a2e7beeb38fda1b8
- SHA512 d3b91b7e8a4d1e77168a00b83c2323a84de42022bfcf0fbaf48599ff863ffa9449af894472378e19990743dccfab154c81159121accf1f7502b868161ea5cd3b
- SSDEEP 384:pGvVnF9jahSiS0Wr85yJvtVM4kul2uv+NvbYzr:Y/qSiSoyJvtu4XyNvEX
- TLSH T12282E14CAF46BAB4BD2B2CD844F8997EE076A6181371EBC60D52DB11A0C1EC24FBD704
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 7b0fe357b2497b5decb000739419a2e17f16586b1fafdd989f4cf40d39b5597a
- MD5 e6425d80de912319ddaf8062deb872fd
- SHA1 2b702ca1f8ebe9dd40077e07922f5da3aae988d7
- SHA512 d24c6707b0f858157a3331cd481a994afe346a8b0e9a3f05adff0ea010d49a5a27af94933fba0afaedfbf32d7ae80a9b620ddf4914137d48fd99944790a7a558
- SSDEEP 384:HoVtjzynB7TYDG6ySP0MFa31prCzhvWth8i29IpBL0ukzqIv5MZp1z0:Ho76T8yerF01prWd7Ipt0ZqIMZp1A
- TLSH T1E582D01903755CDC9461B248A79087BF7CB3954BECAAF14A9FC42EB63077B8131F1A92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 8KB
- SHA256 2d13f0fcce8215debbf60547b149cf3b6e7bf5550c3b5ef23b412be3a49b8ed4
- MD5 1765846f79ecdf5ecfb3b487141f4910
- SHA1 f7615c7bde8eb4ea660ad3810e55b2b8ee724fc0
- SHA512 9abd8e1ccb67efc8c46842573b960414efb84ad6a5550449def8b28d9efcbcedb4be3c451e449b8713b335eb26177b1519081c2e5b7c8467c63157c2aeed09be
- SSDEEP 192:4reumQ93L1VYHqUAWKaLIFHKrHWg6/E9fX023g1v:4/J1SHqUAWKaLIVak6g1v
- TLSH T142029E4C86728D467783DB8E7D17246FDD768D489708A36C615CACA6D32C510BE1E31C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 5199b2ec59d10f9e1e2d61ff8ddb5294442bf5b5818b7285028e6185f8356b15
- MD5 899661b40c05c5459ca00555b12b3af4
- SHA1 901ad7c9399e01f4969df7bf5859b0ca2637e365
- SHA512 db2c2244e26da5cd8095c85cd17cf7061fb4e4ce0bde0da60eb7f44dbbc609fb79888f98b38dc8ad26ba0168d9dbc53e6b0f9498171b97b4ae23a9b7c53ac310
- TLSH T1EA310B29A56902C790FCA7D57671E807BD58C7E55391321E990FD4D864722B08AD807E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 d721a244230fed8712681148dc7a86415c38526d44e540a4d650e6d5a0f7b96b
- MD5 103b61403fcffac34354e79e495508e4
- SHA1 abf0ecba23abff76d44863b4010292fa9fe78e83
- SHA512 4907f95450d199dcc656491f8bc36d0de948427b8f4895b497b6d16e6d6fe038f59956056abf83fe00e3d7b6a4e3bfe818335e3f42eeab5c888ad8001e2394f6
- TLSH T1D4414EE70B9B935B0943B45A21D15FB09F4240F4AB16CC753DE206111E1F75D19EE34E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 13ac486bd620e1352d38f76a70e72b6b30b876a0539d21df220cdfcc2b16251a
- MD5 ec7779a024e9061cdbdcdb9e0c977664
- SHA1 f630733fccf357ab4916bfad2d59ddab53c0ad7d
- SHA512 65fce31d1e9b65f90d0def9a388a5283d477c4897bfc9ca0f9f780afb9761ba91f622d6f60f19ec223530ce73417a4c59b46816299ffdfa20bcb6599eecd8b3b
- SSDEEP 384:yHwaezKW95GbVWLZtluNN3qxCV9Gqjl0l/ag0yZHmpA4:yQPzn95GatlQN3qxCVhZ0Ug0yhGb
- TLSH T15F62CE85120FA5608F87C02558C0F71DDA8EB0B1B547652764DEBBDB3834D92483B78A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 8KB
- SHA256 1fabbe75ccd5e5d8497a5af177ef64299c89fb0541cecdcff12c079125981c6e
- MD5 84c2cb93736c729ee39a82470913a02c
- SHA1 a5c11403b65f2603506247dfde56a989c6c7541a
- SHA512 d5a8e56d5758fdeb9c411a8972802fd780c52a0380a48bc03ae2d313c9749abbe41626931fa4e9cdf4f6f6fdc8c630ead0ca64224d8eb54efdc5748a5bf263a2
- SSDEEP 192:IDFuuuANLRYIZxSoCpn8aVR7a3pC25qcbtvlxX:IEu9EIZmpn8YRCE25qcVrX
- TLSH T1BA02AF1564F6F321D79E6F9137CA227B56F503AD4698A50E940E7AC88422012CB21AD2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 8KB
- SHA256 d938b4b6756b09462b94cb77637e5e33f330b0c55edfc9db921ec9c0ebc4ec06
- MD5 7fc7b74816318d20b5eb084e0a44df75
- SHA1 7c68a624d96fd5b80e83a7d73914680c5ffc6835
- SHA512 01252a58f1d8f8cd13ac865b1d5895f054fd05a3f1164da8f4d1bc4ef86ce9a682f94292677f8a7a82e58eedca82e3edfb32273783d507faefca5175076c1990
- SSDEEP 192:YPHNQ078YG2p7x1rytSIp2Bn0hWqbN21bLXOdladJQN7U:YfNCYDXWSasn0hWqbk9TO/argI
- TLSH T1BF02BF402779C1FEA5D4D75A86DB2462E140C52BA301E6DE10F833A39C1E2D3369BE86
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 e5392412cb57dd0dfc9d1cd849033cb9b4a044911e93008b99ba89e24725f032
- MD5 7c925c4ea05da0228eca52793591c0cc
- SHA1 ef85a276d3a86bc7fd42c3c058abe12c4ac326dd
- SHA512 a3549ae4b2ffcc6f84c28998c537a6c3d6e74667c1acdfdac2c41c434a1bc23fc257dd9976b68221d8c1c7e8b0680f3adbc3187874e74fb1e19e7bc2688db819
- TLSH T12F310A4AA60C5D19362EDF3E0D633C1B4B30810757DF7E53AE4B64234D5824294E7982
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 12KB
- SHA256 d93d53e9f6b7e6dd41c5c1161c399059ad9fe4a66577ff45ff6b8591e2043e26
- MD5 3f7a41169d1a4345d40f9672041c737a
- SHA1 b4500627e12372ac2a267ed3d298e0c81cfe80b4
- SHA512 bea27e92cb6b577741a8bc9f67f3296eb94eb2e69b14fc8ca96363bf1afc1401bfb3a5ec551e674c4adc5a34920866b0fe875d5acaad91b7765a3f01bb80152f
- SSDEEP 192:2a/VJ+bzxHkOYZqB0UdRXz9iocJ4r7XjVjZWrIRc7cWDGTNDpDW9HZ66CgnqylIg:X/GRmqBddRj9HcGrzp8sSvEmHw6CmKzM
- TLSH T14442BF7B189FA92DE0F5366DF045F513480E773D42AB460E79CDB7108771B602E07A15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 d87583098908472dde03fdbea90ece1f8733ddf6db98cd1c08194906e53fe629
- MD5 2b6aeac6c257bc677f156f4132c94f25
- SHA1 d1ed906b708e3e88132155c74014c807c0f78023
- SHA512 7dc34403e6543fec7c4c85e56296f0b7c657de593cca625359557a86972e5ef4db755e53a74cf7ac5184660acd4a1456aca30f9b49f4051586235a9b4826760f
- SSDEEP 192:7EsV0zvNCbthL8liGeNqSE69MKu5tok+wjGb/v6VPUGkWiyGDHNsUZW:wsKZkXYo9De5t6wqb/v6pUgi7bNY
- TLSH T1EC32D05B736373CA7B04CB32A837E5C271BF081893295822352FE2342E9DB64DC84572
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 11KB
- SHA256 e430aea096ca916d3414d2243747c0f8bc4bf2a619e834e65b18c8254a14a4ae
- MD5 3ee3ae9cdbac1843c3e29f0f4758c89e
- SHA1 10fab4b60ee2ba249216600d10ccf070ecaa0cef
- SHA512 888ff72d5e1090c285d104aef56ae012493d53a36dcae64bd3e1c7f71aee4fe984aaad898a9e3c4e88670fd6536edb183a4a834d804ea152aff3f85efa03bb75
- SSDEEP 192:WKdd7/ITSzBeUTjTiGdi7U51t26JBcFkJ14WJCZtmbZaDn1S9rry5NLGXVOdPMpP:WjcTTf87Ut2+BnW49aDn1wMwwp63AK
- TLSH T11E32CF190DC5F17B6F47BC682ABD709144629C3B64AA5A8ED0BCEEC06BC550DC8F06DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 13KB
- SHA256 1101f86860ae41d6e1f4521108e7174641ad674206a7bd88b37ac536664ff72e
- MD5 e89a10d99302a1e2334d6b63ab4432df
- SHA1 feb7d030eefddf82589cacc8c5c1c25dc905f683
- SHA512 c9ed14b2d817414e89e1cd862fa31958511af1e322cd09c90134157c5d9fe10fc10325cafbfdd7d607b279ef5b9a45bb94b44631ba305c1e2948d1d121a7ec18
- SSDEEP 384:28GsnxHNz1d8bjG9TzVgKZcM6T1jGj9i6uf:28fnVNz1SbSVgKbM1jGj9tuf
- TLSH T1A952C1907ECA55D232EC1F7A4A1B171EE910E1D8E3B46BA6128714F9416CE43435B3FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 7d51639b70029f6d17773bb693b8c7fd46c64a72070b9fef95b8ed7ae3ec8e3e
- MD5 60fb94970fb55b730d2d10b7b7bf7d3a
- SHA1 e4a51e7e5082133ea7b6fe6a8247a2c9d307b0b5
- SHA512 68e9ba5ee3e7b2c6230bc0814ffa9d187f86b96607a25bc97847bfe03370835e224e52a39c8f2b0640bdd485ab18839e8a77b067a4b1f2c36ebfc7e3ad9618b7
- SSDEEP 384:lqK5CP/Ai2mFcwxxkNSRvGfWLwTjqPWVtoNuVOLgiO6cG:Bz+uwxxkkuIaOctoRg76cG
- TLSH T10B82D08C65DCE5C361DB3853999B81FB332E9DF309FC24DD49B9954281A2789B411FE0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 efeec86f45e34e3fa53ab9254fff184971b5b6977d30dd600bc29f13e1606ebd
- MD5 893577e35f0a1bbee1cb38b9742ce74d
- SHA1 fd7bc4f2726dd7cb0b58089dc0e658b08f388199
- SHA512 0cc4128f5b83b15d85d78ecca0adc60c07e2f07e86301848044839332517ad0f23d432d611b89b51f9e4ad0f8b2c545c863001b3aeaabac03ad6b629572aeb4b
- SSDEEP 384:jKZ4TI/BW8TMCCrSKWXuC2k2wuiUj42Y2qj2agk02zvi:dTI/IIV2ij2hw32YZhZ022
- TLSH T11E82CF10AECAAC92DF768571819FAACDE981149DDBC2E34360D032BAC46D0767E7116E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 b7ce7a200bd396eac8a4164a5ecba59eb7fdd94b5dbf7087380037023e3021b4
- MD5 2e93cdb0be114a9201bf7c359784a8f8
- SHA1 0cb9146a7d62e396c00f68c6f3d497e8f3e8e146
- SHA512 a1c82517234417418716eef993df2b57a0e82341ba5e52b7f793cc14cfdd58fb086b194c2042d0fd339656f9205867df8c5e0f1d96bca40dc79d14f71a258b1f
- SSDEEP 384:yAHX4v/wsMExaZ5ddbQIxb5tEJgGxWDO3VcyeWvmtaI/IQCNvTWs:yA3bsM1ddb55tIPfVc2+VCVKs
- TLSH T19482D0DC2614E8F02CB4513561A8D93D6EF9C466C53FAC3D208AE90907353EB097DAE3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 85651ae0c8028af7bf7bcc2c30c115a49ab2820cc54f551a98bb4fbf1c4356c0
- MD5 4828453ec674e50853dfd74bc5fabd95
- SHA1 0355420db7fab1874e808f37006370e0231c5609
- SHA512 5e49c032b8802dff38abced7b20691dc974678b88d255a3a3a23c6709da022f646f3fa889c3167cc5d0ad13d4172bec3a6ec2caeecfefc49b606c11392c5c32a
- SSDEEP 384:4zTvSEbCTlVmTcQ4i+XeRPmL1wgXB4ct3kjeZFIcFEt3w:IzSM5ki+X8PmxnXBN3kj+3Mw
- TLSH T16D62D19D30073A365F6B7A88CA9DCD58891C0E17579C0D6AD4CBC952989F2D8338B8F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 21850a15e15feb1f029c93b0b48d1237c0212a5d70055b336f69fca128fdae70
- MD5 755e294f709b8bf27db6f848d58257f0
- SHA1 92abdcb8cf7c88b531e1dbb2a364dd1e68dec30e
- SHA512 a48e665064f2bfcd5600df813334fdeeeddd8602a1cba22048bdbda10578aba5db21ca0835b602f1327fe922f12e09260bf4980d1a37cf6172806c5848b82045
- SSDEEP 192:Q0k0tXQx7GYfe5r0rE/J2c73vAu1xYHMvPpT0mE1yd8l426atyqetNi2yj93OCh5:ccXQxqaAgrlcLvp2Ggv1yd87981apbn
- TLSH T12C22BF4F24B9B05211725AE86D39E891A824A6DD2F82AF1DF41F28574F119C8664FCDC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 12KB
- SHA256 f73c5d19668cb3b3ada0e9642e750f9f75aef700eddc8e96257ac3f236cd5333
- MD5 6e153b9487fd7f197db8943883734fe4
- SHA1 0b0f6aa908eb9cadf912eaee0d065a20dcbe8b3c
- SHA512 d6dffe23ef7ae3d6795512148407b3f5df1a6717119f0f053c9af7c4902956c46a67f425322951ad8c2841157efe518946b0efa9ba107e3a193be07ceeda142b
- SSDEEP 192:y5Mnt2CPBdhVXn0aSbYgjTC+rVWVSLKayFZV0d6pzNoPMIfNbOgW:qUt2CpHVEa23GpdZRpzNoPMIMgW
- TLSH T1B742B0272044E935810B91D4E93EB6397121910498DA364EE074BA9FD26BBFA6BDB01E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 9ad1653d643febb4c36fcf4e2c137e8662ad8a454c036539648f621a15127559
- MD5 5d80471e5e0a215054ff63453385bd6a
- SHA1 9d216b252223a2fbb740fc5fc9089f694ad5f9bc
- SHA512 1a187c0fd8fa660b56e4a607b9174c7f225f2a9da5d531e17ab7d04b8c7a3daf37b4f7fb063a11213b0d6dea714b9d28e20be61dd2cef3819b037d37e1a95368
- TLSH T1FD3129857C422A8267C44F432A3FB2C4F1373D2A03CE84196645B7959D1AE5157F7A05
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 c5e734a9135b08df2de1c3f82973960baece3c0ac4369a84b2c4700c4ba658c3
- MD5 de43316a455d1e3eaf289f4345a07c8d
- SHA1 76c94c2c34b583f36822be4cce3bbddd5ab06230
- SHA512 3db4d2349951ecee4c94231bbac89295af006f6330b02c82c60b8f9b8db681a60e22fed34290accd6bbce4eee4901dd71c58babb69e01260e77144fae8e7fa47
- SSDEEP 192:Ss01V8MAkpAPae/OqKSS1foOrHEU0YCaU09eY9wYGYKrn4T4:z05AEuPcwOrA8oYzXKLK4
- TLSH T11812BF00E16F16BA8CE4BF77F522F235260DA10FCABE3195E911CDC53B09A84189E1D2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 14KB
- SHA256 a4b33f21ffa059c0068b4c393c1dcfbb97922a59a89d46135d2854dff52e72e3
- MD5 14e666d942b8e2e2c1ec20cb19fc102e
- SHA1 b11961557ba29d05822a18422d67934752fb9bfc
- SHA512 2ea72f8268a0c61cdd4ec912abc6ddb8cde990228c804ee95399758fc62f8fa088667f3b38c53224babd3df373da0c18e2e02502700811699d2f77237df03030
- SSDEEP 384:1nXfAPCCNXS+yuJgTy6oblqY4PuNBpavCCoyWClwC6ZSq:hfgpVymIGlqYiuBpaQumFSq
- TLSH T12362E0343BFC669E2178146BD01B7E7258D0329FEB7D84E1CB28325AD654D8B23A09A0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 fd1503cae61904647953f4c8d0b11d0dd661c5b5aa7817f6343f193b0d5146b1
- MD5 88b0baa2300ea540134f42fb44657da8
- SHA1 6e2bd6d588c1aebf5c091821af005d64e9b6ffc9
- SHA512 136dcc799fa97e48cd968b245bc3c51c8d09cad49b5e03cfa01cfccc60d283bb2598ab5e4fb232b584be9abf062be3fa5976f739e7bded16360eccb093f46571
- SSDEEP 384:epHMA1rssuns1WNz5LeL4x16k5MhBqZ29ejlS1nKSQsQa:mHMWrsls1Ax8eMx9ejYwPw
- TLSH T18E62D02BD557D99FF4421C0676091A9EF9030385A40393E2418780BF990D7DCE7E19ED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 ae0040968519633be20cf49eec64e81cd72b992631e547215adf1ae0e3c5b2c0
- MD5 2b52a6e94c36e7ddc47f77bb40b01787
- SHA1 b49197718a7c09fdab40e6fe818726ea49c67aed
- SHA512 bdb7402cd9ca0f76b339bf29688e8d820d389ced660f358b592e78efbcfb95d7e7e1366bc2ff7a77bd61d5c22a987d4a5e3660a774141d35b1063d2c03323109
- SSDEEP 384:k+3kzL0dazfskJJBNiADf2ED5CZw0fTFUjN3t7s3sJU:k+3kLWawiBNiADlUO0fT+v7ux
- TLSH T11982D090E16789688911A1E016D6F735BDE98CB1AFEF08A71C16804DC86FCA4529E8B2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 12KB
- SHA256 897143af10b1ae6e6f4fc93b3e0920b4bce8f3ab77c703a9441277d367b299cf
- MD5 83f3cb0e9467279da9522d681ca2848e
- SHA1 b76d7964e53fd0f83d0c5d87e48dbf155d43af0f
- SHA512 4270eb63e897dc78683303d37cd49ce66e9a6eca3f50eae888033572e242dc688c91e9cf9fcc8fee2337109937eb5b9874b6c191eec51e508b95cf9eadb5a6bf
- SSDEEP 192:lt1CJgU71PlVseGWUcjGHxWQUWDL4Ps0AmmtCr9zCqc2udkQhsIOiWkzzpaD5Z:ltYJgUFlT9UcjYxvhMAHe9zREkQGTr5Z
- TLSH T1B542C0E6B693F400054E34DEEA2E60D7D522DE86F5A1A43F55C90E7930331B79E3AC68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 99da14731443ab454e2ac787725b58c31ff617abc9d678fe37732ba82d793892
- MD5 56192014682df4488e1d3d627a2b2184
- SHA1 784005c735d7498b9819cafd72a275f64caf5655
- SHA512 58c242fb3b5e709ea8440c3edf7bbff46e2f52a8571911b207f089a170225b25da10a3a9060d97eb5437f3890e677b885aa2878cade0aef3cdef63d5546f492d
- SSDEEP 384:/J/o10HC45eLFZ05PHIO9vr82vV90a1P3v7zl:mS5Mu5PI0vrfNGa1/v/l
- TLSH T15262C081214D0A6B70290335ED38B64F392B6E81FB49E6CB5F550C60D91B2A9DC7E3E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 1d02d965263993650092f34c4af837b0788c00bb7a445742f190cabf44a8156b
- MD5 bff0f8c94fd01a1aeac2644e4d4eae06
- SHA1 09e419392ff4c0f47bcfd112bf0e2cb48416ed3b
- SHA512 ffaf34bdab15a0e544aaa1b92400ca71d4fa8698d80a8140235ee17fdd7f197e9ebef1b8f066cf655737d2f33ae98ff8883e26d344001d7297cfc8c7c33b18a4
- SSDEEP 384:V3f1ur+ruB194ozh+KPyKzOWl+IqUXHhGFFujvPrDtANVNldEr:V3fsr+CSo1+KVOWl+aHhGiADhEr
- TLSH T1CF62BF5481ADEB7195F86FF8878F500F853D536D9698909898634088B387D394C7B9F2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 7KB
- SHA256 9f0385f95c8eebebe62a681b0d8ac4d7b0e32303a47ce53c4971e1f13037015c
- MD5 8ec4b3c0c3873e33cae562aad1020ed6
- SHA1 a6d30987d424f67a6174c5b2b7e88273539445a1
- SHA512 a738b0c47ee15b15dbc6d0fcac6f456c86101d2c4ce63c7d9ffe05a9e4568ffc7c2b4fad5a7bba99be8457e1ab1216f3a9196f5590fcec4b7177b05099b72950
- SSDEEP 192:CuFB7OP8x5U/CsETC3LJLm2cUC3eSislJ7FXtPOakvRMJFCfeh:CuD9xweT0dLm29CH/FXwjJMJv
- TLSH T1E2F1AFF642AD4F0FF40B69FA55EAE8A16F112527C5C3E1085B63FD5198322C1ACBD48E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 4a6fe9fcd5748273b50a492205d7551976bf7414043140f200356fc3783265d3
- MD5 18b264127c20a584159e4dfebc9157fa
- SHA1 aea29190fa56a6659cf157048d109b97d2c92844
- SHA512 f38c62c88486a1e54d8978bebfa28660de2f546a858369d25111d0b5f7f4a18b4c74560053d7e4aa4e8fa711ced28319dc3409c0eac8ee3703d9e330bdf3bca6
- SSDEEP 384:YwGZezlXOL5VaeCsDEdsGC8B4q+JWuvet2THkIau7:ZTlOaeCtdsGT9yxd
- TLSH T10E62CF08F15E52B0C2163B771A9BCE2906AF9769381C379BC35493B2B5013D0A77B4AA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 f2c75758908e0efbec64df26358fd92583d773d2d14001377137bf56522c8f41
- MD5 c6f3e69f5d8877491e053d0bb965d464
- SHA1 9ea404018a694700f38747c89fb6805ed924ce56
- SHA512 03d2460d075706b84ff5751ff026ff24e967fe432e7180f3df822ec282f6ef01ed3c5f0ab497534a86719904baf87e058814e1d482a12946c754836ca5559732
- TLSH T1C531F9A63615A2B92765004CB90C58DAE0AD7FFA37833F054642309B800E3E36381EF9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 c98c997e3d646285903048c1c4a5e0706255214ac70f09dbc0ca822342e70e55
- MD5 6274d1fbae65e2e3b20bee032d79993c
- SHA1 699854276cc578d0bcd320264d738b4d34c7e871
- SHA512 fbe2590f0b56e882a37c30fc5b809f2a480c7c474d1acee6103185689b8278bd47325ae99b161c12b765a2158719cb1acc22947420f78dc531a218665c576786
- SSDEEP 192:ny0X/+UOwUnMdVF4J7z1NVF0PyzueJV7nezljhprnmw9ab7hLDH21ojf4CxM/o/O:j/+jwBQ31hkyzuOeZTrh9IHHuoL9RNuZ
- TLSH T14632C0FB5084963D33B0EF3AC54A2FD77B14EF9C2C99238269567536A53535C92C4328
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 14KB
- SHA256 5c2bda987374caf6fde690c273f23bb0674def300b92de9a424aa879c439f8c2
- MD5 e576dd15ce99269f32ce36de9eb8daa0
- SHA1 3eb4aa0af9ab1087585bce891d4ec892e07b1e4e
- SHA512 0d209f6a85013a92db211a3262d1674acbce391c8fb29b7de18ed01c92e4b08dc45b61439f40bd1ab5379c0869179e0314e2a8f889701e479a6fe30b0b2c4234
- SSDEEP 384:r3HQjbKNZT+X+ufsuRsT11NXK8dZPq+4SICGJ/0mb:kjgTTKiTfY8dZbJw8a
- TLSH T1FA62E1EC9DF35621DC3A72A57053768B2E6B27054A1F2E79118E743B4AB3CC00F11993
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 12KB
- SHA256 6a727b63c3b16f2f74035996e93f204b5c635244f480decbdb6e5b223832a49a
- MD5 c68c5efc805adda661edef1107d425a8
- SHA1 cc7ad11fed1b5110d65d3c1082fb6e7627066a02
- SHA512 bba70e9aa424096d3688e36f970645acb398aa94b7522eb3c9cc178a602ca15bf22cdeeef3e617a6ca5be0af726edd768de6b63dc2e35bcf77fda8952bfcb9a1
- SSDEEP 384:d4pG6pfeIuFqoqzhO8CpSZbR0vcabhO/tpwV:2kAXutqz9CpSZVCca9MLwV
- TLSH T13742C00043C8B1512FBB698D7DDA002A5936AC7D046C1170FB66D0A4666D722DC8EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 d16321cc18226bdc461eaab82c7a94b9b10f2bb2b560b0dcef0318b619e75275
- MD5 030a4f200962a41aeeae251c75d053b5
- SHA1 5853e9db01aedd3d7153adcce1f55dd11852d170
- SHA512 0eae0f2e76f402c4355154c48bb6ad23d7402875f8d23355aaf33a6e8e3eb6e54a01320ce20f351679f1be2332618819c4480a5848754ae16f2fb99a431daed9
- SSDEEP 192:muueR2ptcAWuaKXrA8I364/ZA1IpNpKNax+90soIejMwDd9KNP2iF:muD2p9WuB8BQ1IpNANzSjNKNPfF
- TLSH T17712C0D4E0984FF33620F67E79277CA471882D278EB48C7CEE5D982600B155FA6640E3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 13KB
- SHA256 41448a55b64286d9d8e40791a3baaf59f676333807576b130a0c75279b7f6db7
- MD5 24996911bd8f832dbf59d447260b4b2a
- SHA1 bf2aebd98291cf77d9aab121364d60bd06e22a27
- SHA512 4bf4f046ef35449ffd0b0380d67a612c97e2c0acabbaa0188769953ccef6c29a0d7d263473c3bc5c7b5b6725af4187fb7f3a755e1bb5346a2769abeabda88882
- SSDEEP 384:RHVqnHgKChsDfQ1i0Q4MF/Z7oiNlEm+t5:JVhhsDx0QdhkiN6ZD
- TLSH T1B852D0E1E9420F466F409A17C4ED477971B630F8BB93D46EB5E0532A7A13AB8035E44C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 48a12f87a98b6b149f85025fb76850c93414745365f4a5aa6f900db22a9dc688
- MD5 5f67136f5f1cd254a077fb499b0ec70d
- SHA1 2fc76c50112fb26cdd466b9d48d50d9cffc02ef7
- SHA512 a1d08c40f6b173528c3fdaf1af59dde25b095d822a69c09bef63e8dc494e0d52e263a434a824bd13332fd2c5d7a81db769a522df28fe3450b82bdf54b2c22832
- SSDEEP 384:KcJsyBgFuv2keMWUi+M48cJsKjpRz4UNxkoZ8AJm:KcJsRLlpGICkoism
- TLSH T1F962CFDFDC0C638796C5D2129CF683906839F2CC706D225BC6A5A31F531DAA65EE830D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 12KB
- SHA256 d52e2a99292d6f5ead341be7ca1acf369c79be49db5b704b032edbc8b565179e
- MD5 32c58210460bcb00bc22ff39bb069653
- SHA1 4353fdc5ae62b41c918b71350ecc0c811075e6ca
- SHA512 99c8f60f2de1578d0ac222a8cd01cf9ef085a8d44dd48cdc944754e897449911f3fd3f7303ba399ea53574ed394ecded63892d319793fe3725ccb04e80a1f09e
- SSDEEP 384:hUIM/NBSVp5nthRkSAtongBJyvK1/zfaE:6HYTthRwton4JyUfb
- TLSH T16F42C0B0AD26A1A4DACDB655235F383DC4069E4B9C66261B38C64F06E6427FC53086FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 db0a1cb53e2bbc60bb43fc538a665fd61b4939ff0aaff92f2f8745bae067a30d
- MD5 b66115f898e709b4d35498017058fcac
- SHA1 9bfafbf053843a095fb3562b9c4e494f5b73e74f
- SHA512 9d248a7767afe904c9f3084d494245382057db4454551065390f75d9a957cb84a1309846db77f0911d685632cca3e69bf230647547b40a30bb0df6f751346faa
- SSDEEP 384:GkNpiqVMuig8lBTxiwq6ZiBylMrBMm185xQZrQ8EwVQmBHd:GkNpJVc/rqbBQMtMmuQRQ8EUHd
- TLSH T1F162E11DF7647BE532F9635C9CA382DD6B013190236CBD851743BD31899821FB452647
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 dcd5cf9a2f53dea778aa6bdc09a144ba756889a1edc5e550bd61ec72b25fe231
- MD5 e50a2804ebc0aa8010590862b40dd4ab
- SHA1 495fa181555a66c5dc56d458a2eb5ba9fd54ff9a
- SHA512 ef3c0eb1eb1cd6b0b5e144c910f3df463632a23a3bdc704d03547d7f71f430043424ce7b01a1f1990121320ecfaf2d71e9cfebc834d59121e2ecc23ede19ae59
- SSDEEP 384:hpti1VlQpkJTXBUyivWjcS1DHDuGBdAgv5W5rurL/h7v:hpti1xXB9yIcWjuGBdAS5jDh7v
- TLSH T12472D0F77273B8B53A300D6F7FBB8765686184641C6CE832A145B836D9A98362E42D07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 b56f1536eb57ade5801aaf8115f1cdb2a8b42604a29287c7b30e2b08597f64b2
- MD5 9ec4058ee16493f7e326295c46ee5864
- SHA1 c3217e7018c591ef08c939f674de687ff17ccb6a
- SHA512 1e11046a98b0141f5dfecb7a5e9a3301a98e9228434ed6261c5f6e5da3ab7270bf922d7281a72d307987af4a5e72454a1c05d8e81eba3433090dd2a1f4719075
- SSDEEP 384:C27dMmRgx7nwMO8Y4m4dRqC9LDqPtSQiLO/JQ6MD5DR:C27dNRgx7wMOum4HD9LmPtS8/JWFV
- TLSH T13162D1A2F932700F3DA362E412C36570B9AF425D887948FED047D697E890F42E5AD6F1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 7KB
- SHA256 2915f3795f94ae65f6b239e6fba6727564fe2fd0b86916d013d0ff1d740fc81b
- MD5 46da7533d185ab7c53929a4f3fc6be92
- SHA1 08731fc394eaaf047f671edef2d65b8d41f9547b
- SHA512 366ee800642b96cc62b2f0f88a89c33148db91206273be7bd9c8f7256fe25c0edc135b8b06706f79b44d1c00b2c58dc98eb123c64824756b164ed523fe3dd64b
- SSDEEP 192:+iNj5ClG8UhzrTN4bdPJkNRf/i1UEOVK/Jz:1NcUhPMiNBid8K/Jz
- TLSH T194F18E872C7382B8E4F023FB759198081AF711184E13D8861AEFB1F448C7792969E29F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 13KB
- SHA256 0f3eaaf0a88a2ac335ed1422928206a271309fa5484b966d9b8b702ae6e15100
- MD5 eb7fde261df2117cce459a0565bcf891
- SHA1 0dda6087c7ba7dfbfcfdcc2d20830def9e1a4945
- SHA512 3bb272371bc6cfe0fefaf0f071d521f6231543a1849d8f1b36881d5beb5ac57f21f970f6a30a387ae6bf16e66213000ef4694b139b21d903d5c1861dc35b5cd6
- SSDEEP 384:fmzzwweyN2dgGR9ghmTI3MiWx5EhBBtazKuCw0:+zu9tRKz3MJkwKJ
- TLSH T1D452B01A2EE147E824F71210893E8755B4219252D998BD1B4ECCB9B4773F0BA39DCEF0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 afff5050cd4122ac110779828a1becb5a5ab86f21e98605facfab376d834bfec
- MD5 7b3188690b4248a2aa2f319766b9d921
- SHA1 fc8c22e8d00ee626e0571f8e2cfd9e6533e5639e
- SHA512 7d756b8fd5523509dada82b930f94172356ddcfd71d9aaa7c9d4f44f0805b44a684652ad2ff0380fe858d6e041d56a7c6dcbd555756eb4c2b892fe5a23c33dfb
- SSDEEP 384:ritWqWuBtk+UwRV+9tFPIXg0wu8G+3bgnh:WvXVtjSG+Sh
- TLSH T13462C03DFD8B49DA6314E74B98E884C81B1C8E7ECBDC6E7C55161E203855EE4C11A42E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 13KB
- SHA256 a4ad4f3ea63cbf22551b68c0e8b8ae32bc32268951a223e5b89c15aeb060dd0f
- MD5 51bf0f33727eb92d7232d8f229287561
- SHA1 f11bed7a390eda4d954ae5b1eba78f37547cc6c4
- SHA512 437238257c985840b9dec69ac14fd5489e80e74dcdab2e6685405eb10a9705ab4a18c8857854bd81151c7f29cd2fbfa89a72d1ea86afe43894d4df158566d234
- SSDEEP 192:L9yV0cLcFCBmAcPFLCpX+VNektAy6GlfmNT1GPzKflvwSH7OFqqOV2o6N+thlr9g:5yV0tQRcPFLEX+azGYQLKfXmeBVFZg
- TLSH T17652C03E4C2438C19F0933B67846A59C9B57810AE1B0332E09D67DB01EA2AF5726799B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 c5d9c2cc70c1f01e29c08b103d61d38766b1a64871369957c38512e142ef148b
- MD5 0990543fd37cd4874275366a8a61be38
- SHA1 20c173496e0f052323c7094a5c6d99a2e57bfab9
- SHA512 12123f26e016911f62f2b8632071680b6d6cdd01589991a39390a30f85c79fa2f374336c91f36109a7c260cfc5b55d51fd49087a7f22f1cffa07d558a511eb85
- SSDEEP 384:nF4J7Io3JVoYM241JzEnyZVbj/03RRugY5AmiLh87+W6hs:nQEUm24DE2Vf0nu5AHg6a
- TLSH T1EA62E1093FE8FB4189C00BFDADD992F4B42E4793EA844E92F1412A46E57154EDCE10BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 a06edf9b1c2cdc9ef0963444be723e860484cc03a410736e14f09f40b43764b5
- MD5 b3e6763e233a465cd6203b924072eeb8
- SHA1 7b906d5acaadc0669abd5f3bd999db8e36f5838c
- SHA512 34b49f3e187b9fc1104e101a3e280d3c977aa54025bba5a4b8453f21b387373f940cc6ec603bfd14bc44dcd99e936e498820b0c3a5d6370189046e3b72ce55ce
- SSDEEP 384:9rmtYEsBIeGNWVn+wH58keJ6otMxxnVPm7ixJAbqqwxd51v+1HM:tCYEskNWVn+g58k+6otMvVPprAbud5JF
- TLSH T17A82D1E28178A0082D1E154FCCEDBF3E831D6EF7703DAB1952E7A05D9203D87525A64E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 2f36f3992ad6fbe6b29ccc6d5c5119e49ab30e337e615c58cc624de75a5503a7
- MD5 04b7c5d6c28819a9df9dabb0bfb876ea
- SHA1 81554291772aa7179bea8c1a0f9996c480b0f60e
- SHA512 4eb62d24bb9b9e2cf38e0491fde3b8144174c8d30fcd2227c0b9118962b9bd9827cd32969b53da3f7131fd4d54021e486c541c4989afb4d3bab318a8acc09054
- SSDEEP 384:O+vKJBOTitnFL1rCIuUbYbLralbzXsR8oMGobe1DSKDnHXUn2:O7gcObyxzXsR8pIfDHF
- TLSH T11F62E0E9389481D355B917C5A024213F58AD200E83C2622AFA37FEF9D3E45B89BC561E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 13KB
- SHA256 1089a47f600dbf8c6edf14337449b10848d507301b3332d3033350e21b6c6fcb
- MD5 488b585117358f69db208a32f3c53ff2
- SHA1 543a2c81b087ba7e740cee0a0628c78b7b837f95
- SHA512 fcbfb86533a120a7d0973c45a480cb4528dd48d99580b44caa473ce35743caafe56e04d91305e9f4cd0552ca5612016b6fc5fa5342cf995f312338ce26ec5616
- SSDEEP 384:1R4upt+16wA7peNNvGMjTA7SaoZKkrBjkd4e:Pzpt++YN1G8TA+HAAjwB
- TLSH T1C852C05DE0E6646CE97B844C92E12F6DD625F9236C9F125D11423E2B8F3F1274373161
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 01a9f1b1ea0e001c5757ec77a5a389302edc7e4924df6eafdbc4c56eeda4184f
- MD5 fe40d95a3de848a8312bdc0ed311c6b0
- SHA1 f3d21bb71317c75ebdbad4a97f31bec90dfe767d
- SHA512 4ff9a94872ee9a51bfb95c92560442e9f0b7225f7beecd80e9d554157ebd8819afe574001b483360c7b28eb4e090e9196f2ba56a75c0819179e0e184f7d346df
- SSDEEP 384:e/GQU4VFkm2YZNWXqd7EZjamxoeqKhTRh9mU:WU4XBTWXqdoZmYRfTRh1
- TLSH T15D62C0DB51F35C9A966095D79E8DC7B6C7EE4CC6836D441E5089DB14838CEC3839CD42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 841494315b0fa22f2f1cf92ea7115018b987b3d775590068d0be25ad5b21ff6d
- MD5 8cdd7f433f068bd7a80ff1b597d02d86
- SHA1 c6a0dec6cb7e8a6e0d1639f2b76be2990a25e462
- SHA512 e7633f103fc9cb8fca2b76cc0a377959a3eb597093fe0d50b9612ae30fda0d27805b2421261b75db57fc12b8bedd69038f98c328f7c8d2a8a576e42393c35cb1
- SSDEEP 192:B+mLsAWmMDbIXWJ+R7eRFmxuCJw1vQyCHTGsNG3jj3PrgFZReFtVOVl9lAS1PWWk:gmQmU8ToRqCtxZ3/sZ0F3OFWW5CScL
- TLSH T18B62D01090233BEB67A25913E7968FB0C8913C2137A4C792DCC57B457C988ACAAE55F2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 0e8f575ca3d69d293333a38e58fc3b99b9d7211edcecceba3d9aee5c19fd5132
- MD5 c0183c168ec543fa99bd34953371fa4d
- SHA1 26c48a382c42259b7ab943be9cd1144ca2d269ea
- SHA512 42296d314a433857f0b5a8d978e14285038bd29d7c8af9e00060de44253b174502991c238dcf1f6eeb923fd03b73c32ade222651458528488b57016889245f24
- TLSH T18E21E78049EB4D886A828E3005E678A6D36193C0680BABD1B4B19438F8043C66DD4B39
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 a132b3498419d2adec5632cde74c83dc41f60fd41a64f88ad9d6657adfb153b9
- MD5 f1f34f74c9769f837af289f11ced456d
- SHA1 05f2e4d9d24755c99eff6a5ab55d2e4d973fb1c9
- SHA512 45c57d52a5f0054d290058314bbd9e11a8a02c21a52ddaff6b208c4a088751f017c88cb57acf39a8afaeb502b0a02bf3f661a1c59d0d677ca8de6d19e1ca5ccd
- SSDEEP 192:eUG3KykaQGMIZmyQDNlfGP5ZqhmTFXm9Bt0wdw/7Lb29g:oaVlJyEoZqhmTOHU7Lb7
- TLSH T18F129E21BE0E2A8EE7751FF6CA292B5035927A72DB174C80BD7161D03958C54329C9FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 14KB
- SHA256 39baaa16d43b3665cc325afa56f596fd61ad61dd3504a0de7a54e8872fb694eb
- MD5 fb0b514bcfd6a1ef03230b3b1b7da190
- SHA1 94c9d152c2190621f93d67ed8423df62064da871
- SHA512 a0d80b80bfff435cab814f672d3f86eabfc2ba05128504ac23385ac778aadd9a48df0911cbef567ea0e369e7ccbc0f1f335e7e1bb2469bc705ea48945bf58420
- SSDEEP 384:D6AEbOurJG6i67jXKg2bVIjqsD8dFtOzDTiAkhGaWz9CG3oH:DQbaGV2bkhgeqmYH
- TLSH T1C552D00C362A75BA1353DAC71C160ACCBF00D521B06DC77EA82F77DBA29381EB15032A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 f337d64a4b507b5ad8743aba4a2ac42c99ada97e24647a91d3876ceda035e4b1
- MD5 2ea236f7097ce77a4a7d3ff92c0b46e3
- SHA1 2a1bf02cafbede7e5ba34e91f2fd6614eaf5bc3d
- SHA512 bc258ce3de6c8e2207cbd8304ab10e8871635c5997af8d88e7298312f1f7f62e155cd604557630ebd750c465ca47c48fc201ec4ab4e79b831e44ad7bd2f8eae0
- SSDEEP 384:ZW2kCGxBlkYDwbofZY2icC9aa13Lxwg17F3vKv6ARBX:GBEbGTa9lw0B3NkBX
- TLSH T17962D18DBE276AAD0796DC8521FEFF330229B5019B0644101D49E298F89F3F614F7712
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 e38563de829fa99138cd75ffd2731cf230d4c21e7f4ed9910f587be22cc4a237
- MD5 1e4b5625b652d672dd1f4058f670edbb
- SHA1 7a3f493f90efd6977355f7cf7c7836055834037f
- SHA512 68918c8a6b346e20edb318368475dc8d464adcb12cf955bf1a97052207069193599a79f155f941e1787145c6af211accc98eec158b795af4a9b032ffad7e396b
- SSDEEP 384:MboExgsGhSolO7W3Txn37ip4E7di98rGWESLuE25V1v:JDhk7q37ip3dk8rP2Z
- TLSH T18B72E1C89F0721B01F76A7F6A4BD6926B4327E2F1572BE4155F4C145C7248084D392BF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 13KB
- SHA256 24cc370ba6e9cef9b649698758688a9249c0cec0de3d2edb59dfc793f1cef9c9
- MD5 c1c68804b7b9dbbd933d11dcd9be791f
- SHA1 1839a111c28659741fdd86581b0a716fca8436ab
- SHA512 45a930b8bd7bebf962624027319268cc99f28b5c79659d6e33d43d19a74e490c70d7fd78d81dccbeb3aa4ed8ad3fb14a90e0483e1dfa6be53a0bb5ebccbdbba1
- SSDEEP 192:Xr7N0u2SR3fdhV/TLb7toK1ciV29juvxxuZTLZToTndU8BAc0B6hzFjlopsh0erb:XVdrLba3A8ohU8eLB6hzFZxprRpN7F
- TLSH T1A052BEC2B1E437078B28A648F60F077740912D1DA626D6D84AAF65AF17ECFC7E8D5428
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 1937c0f0609ef2fc4f7c67a60311329b5b8bf966a933cec4b6100693c0eb8143
- MD5 91b9ffcf1a89390cf033915083cd1718
- SHA1 56a02834698eb6ce1bb80f4e657937e0271acb9a
- SHA512 bb81daf7948de97ebdbd3c1cec9e77a2c7f11ba209097324a9f1999c1e28258b9302fcc3e2debb94225c2619f0fb0fc5702fa0281ced736b7abe72f9f375c5d7
- SSDEEP 384:xF1v07zH+oQT/O9nKQd7SN1pahtaQ8vGf97tOJnpGi/mUQRW5TWJe:hvCeHWnKQ9ho8fRkpD/mXFe
- TLSH T12982E142C4B6613E90D34D9BE34A0716426A12FF4BEF91FEB35925B3614834715F2EE0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 1KB
- SHA256 98b88374d334800eda67187ba9ee10c6958af0083c6e1a000028215b8ddf98ae
- MD5 d8dbcf2b91d5a295954b5cd2e61bc64c
- SHA1 d3b7f9859f465cf021f95d38370fbb24d4a8933c
- SHA512 d78919e20a82094a9ebc492e8ed08ce81b7e02591991e186e60cb46dfb9d1392e8434e062f7d4a7650d8e82139ec17fb89c3dea49f2cb0b3e813e9c99b8a9e1f
- TLSH T18D2108E72B0B515ED3BA80B048B63014013FACB2E3156849A5E58C3393DDA95465CBA6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 29185c7114bfcad2aa5ebedb6f7f720f9b73e437c920ffc317f0b10928b9729b
- MD5 3fa19228fd7f0616d4269fcd24b31697
- SHA1 947d4125f0c9724105b81ecb7ae6379cf4ad6d49
- SHA512 9ff9f9c3f599ffeb08b358dcc9498bf68c5aa2ed53bc93837922ebd35959e787abe1fbb3fbc7d361938876469f96228bfa756f8067f9e886df35c8ae84e95e35
- SSDEEP 384:kLJWbsf2Rr9awcItWAWlZYodeOR0IA24gYtqZUOlIBV9AUE:sJWSyYwcbAs6IAXg9yZOX
- TLSH T15762C069F9E92B9FF764F4641D03717A48A0E734509BA37DF23D7192F7A4A0CC19A808
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 2KB
- SHA256 cdf7857b939ab9e5ee9dd1df41c99dce82aa41de5503690fd2c2e3513d02e77b
- MD5 8b292893d3a2eef71f846d24322df28d
- SHA1 8341689791ec55739c1bb73d93369d128782324d
- SHA512 5ad83d5198aa992228ef599075e6fa2fab90214462c3d5b45649dae02bf8523da97daae7061967039e7677550c09d1694c39b4fb55538bfd2b8e5f754bfa478b
- TLSH T14C413CDE7749D1C208E29B74D3C5330C6749246C8597899380E5DD335881D1F9DBF059
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 704f7f385938c017343c41ff4fb63ffc71cc83d4e3deebc89f8155de15ac7469
- MD5 9906aef124d0ece508686f186129ef6f
- SHA1 281ef61e85a0c391e3ac823a631e7a6b69f1c35a
- SHA512 8ac84c4dd58a7456aec89bff9261e81e85ca089dcae3bac507e564394b468d8ac4991e501b0923b2f9e46843a5e41db31821b3425a4c917199b13654cc37027f
- SSDEEP 384:OHoJ/wEalzMbqqTzZI8My4Lq544TaIRe9AIz+jLc:OHoJ/ez8Tzy8MyJ4fRAICjw
- TLSH T1CD72D0BF4271BC1C5E2AB811C53F2B5587A684C19B6C9E4F761585E9323853820FD4E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 13KB
- SHA256 6f00bd71f19637406f15c46482e0fa06dbe711329cc78b41aa63ae71a6eaaf34
- MD5 e7ae4dd8ec7a57401024de72419ca360
- SHA1 c3d0a3f0c24b5df4ed240a1fa017fe263b0c45a3
- SHA512 dc5b2be6ff15cf486e2e69490e7d8d4e81103ff4f4c92afcf94c0061c161759cbe4cb045ba2ade34401b83bedc6fc41d9d3a82c4d41440e09217aa6bbf61f1a4
- SSDEEP 192:/VqnUq1W10/zCAh4EoQ6Z/F1v9EtteeO+ZXDQTYYDcmK01UsXWQvFow1ATfCiv:/VqUc2dbHZ/FIROsXUEGKGUWzKwaTfl
- TLSH T14F52CF66D4B35BB39C2BFC2AB4A987FA26D40C3B164A0023A31B3C505451B73996F4FC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 8d85fe1c53dd038ee3bff2ad44f840b41809bb7b084a373a7ef2b138e84ba907
- MD5 1e6ee41c4a64b4f4500bf36157f7fcc6
- SHA1 4303dc73022fa58a858eba3e9d7e67f90d0744c6
- SHA512 3efaa512a921e9396fd8e05c66c63f645b8c1d0cbcc0687fb379f221c124973b60f7985f8c2b7594d48aeba06eeb623a2d627c6253fce824bffc9b2284bf136f
- SSDEEP 384:t/uirRGmY3oqlQNVyN5YUC4jMG5PUX4q5SCH2aXOwBhejWFEWj2o:VfFYl04/YUQG5Pzq5mBWOWx
- TLSH T14F72C014923DB71801D1839600F825092D5A92FB2A1161F5F9FFACF51602F5EF9617FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 14KB
- SHA256 266d99e0bb0ff8057b49c8f96d51b781047625be9dbf5c691f949625ad1343e7
- MD5 6f70aedea0a187778c57db8d72503330
- SHA1 f01e7b99b676f3c6674251ec2534e1ea6e471279
- SHA512 74ef66d6acab774867b1e7cc1746bc7e52e1e6deb60c073c25c9a006f7ff7dc9ba43d513c6736e93d626394b0a40fe22a57e8c2ce96009c9fb746f05f33dadb8
- SSDEEP 384:4emW0EMeYyy+XJM15Xg+fZjd8PX2fExSh5DKBZ:0uMeYmM157d8WLdq
- TLSH T19062C0C8CDDEF5367A78362C0634952C44026A3F66C5EC664DF8213D5CE1EE3296DC68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 1ad0959cdb2740426204151a1790367fa51ec3c27d72386d669a91665bdc8ef9
- MD5 9149d125f71ef11144864eac5842bd35
- SHA1 479fbd99219cca3d31bfe55ad674c9a39cef9f0d
- SHA512 90d0cd460c5c6c66e144df7f578f9e5d90b425dafbc94ee2a06c7166fc52eb27bc728c1fba7a48c1d3abf47aafdef81bf6908c5b7d03056b3a199b3df402d33c
- SSDEEP 384:UxaViCNvU4zKBIrerMk8lcmk/SThKVya8dv:EbiUgKBIreHok/9ydv
- TLSH T13C72D12F38D8B052674EF5D58DAE8FFC4CAE7684BC241CB99E1319C26719BC415CA582
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 f37eee2c60163871c798e6347da544b3fd08286263a16f88561de38d4671becd
- MD5 182b0b68dfd0a9572e8cba2aecd8a80d
- SHA1 8ff05a94074fe2dc5b4d003fe1b01e71f053910f
- SHA512 de49f8970bfbe0137495ad54f1d34e3287f7b255dc5503dc13bb828ad4163fc8074917ecc24b58f48cf74f2829a63f5b7b0230546f3d6457e37d74c05963a061
- SSDEEP 384:Q+kr09WMuWNpgJ8MmehKDq7zL9ufIppRnGSWuAVkvh/bE1La9Xn8uK:Q+kwWMuHd2kpVFM6ZR9Xc
- TLSH T12772C0E3D016C4B2B27A8281142173C39E654F0E437547EEE3A4AAE9D7B7CBA85754C8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 a5c70f6ae586270b144a4b7a72898d9b0830601ea7f4fb68c10242353eea0a68
- MD5 7c7598ee9ef283bc72c7aa6a92cc7db3
- SHA1 7e32a1f1de11d169994945c88d37a09a658db282
- SHA512 9c3ee5e7e2ee6f12e1d89c1e21ccb1793bf8b8262f29d16770e7d82378039b6f03d9884150f9a77352f7a01b807d5d801501feaa9c31f92f9b97130118b377cd
- SSDEEP 384:FEuG2s2JLeJ9uKvQpN4whuaIQ5AJJNGEytJEu4oAi:F4X2JS4aoNZ8aI4D5zE/oAi
- TLSH T1E072C07AEB03A6C86CD70B0634B9881EADEE5B801649D25B398E1E85B74EC611FA444C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 9KB
- SHA256 af6004e7091be3e7c04c36eb3849327347518df6cf313f5ba950b56a1317dfd0
- MD5 286affe8e69c04d58335d37164276bf8
- SHA1 5ed36e63e71a36d7619ae07ce5e389240badbd64
- SHA512 4ff101e55b3d8b1022e90532375e7f1b1d654a849f9db8dd612012b236f201220109c886e28a0baafbbdabd2e9e084e467dc54fb0537c6cb3320187a440aa0c4
- SSDEEP 192:K4yyY3j9iLwIN1Oeq73qNqAg+5y+LC9vHFikb3HjfzamCAfO:U33j9w/aN7aQGy+e9v1bX7+4fO
- TLSH T14E12AF935B8CC0F94ACF49205C8A6F1DE9D4352D29EEB7F4062731E2A81D669C26F825
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 cb16080d36680e813f8a2761ed830f9eebc0d23684e6ca289f4955ff21d39244
- MD5 a040eb0927c2c5f79e099e9fc4d0bda5
- SHA1 35243da6744cac3035f2bad410b33fa4e8042aeb
- SHA512 2383ccdb86114e839a7c4c99874b31e6c30513122e08f22fe80504f3fff0d5acc5ffc1b36855d9da8e7a49097873c61ecb344f03fc48f1195c267f0a19e89967
- SSDEEP 384:/eCFOBtigy7rIyIimxI6o8mCt/kDjiiQ/xkPNILY0A4KM2s+T2inZGY:4ty/IyIa6ECtIOZklI8j4KM2s+T2MZGY
- TLSH T19872E1A7C0D6428E962A58E78DD9B5CBD0441ABB107BBD40E87FCB068649F55A2027F2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 59b9e7e38952eea9e16349a8fcad02372124ab0c8f4994c19a32856ca84f37cd
- MD5 2d39c6f20df74c5c5e56994cb27ed2c6
- SHA1 61d8657bb33b6add1ce60e26bcfdb2f65ffa297b
- SHA512 19c7c4cc8891e8c7ad0cee488ceebb66109ff7db5fbdbad0c5cfc15f2711013303f99fa6146013fa9e843bf7298e3aa771173dc26515409441d20247b1b9b8cf
- SSDEEP 384:Idf+Um7IpXW4Q10who5Xs+0w5ZdUcukOsyQ2ANB44:/j2Wvho5XuwyQbjX
- TLSH T1F162D0B3C14BFD43C1BFFA29655F08B8515988F10B7C8A14B410CD3615E0E86D296E74
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 6c237a5362e53c2fcf701454f3a74c41417724cf83e5b9c83228e11c78d95eae
- MD5 da1e7eb373a516d5e125ea2c4a140c3b
- SHA1 c060702ca4ff00930b9606e595d16c38cacb4bd5
- SHA512 b4a31c64ca63d43d9ffa886642baa80aeffa43e445ea35d8da3ed9444fe61260c220c6d68081a535818ae32df2dce0ea7bc71b734c58a363b456d31a40b8098d
- SSDEEP 384:YWtFoLKRXI72tO/DoEfSVV1KIZtjFkvIQjACH44hMkg9/bwTC/U:42XIKtaDoEfSV3KOkCCH1MPdU
- TLSH T1C672C0BC5C99FFBF0D683D7B04F2858498F2A75A8067301AA55E5B60253E209585FCA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 1c56599a79ee795816e5dd39b7f647b3f196a5317ce30d26f6e210091ed1f8c8
- MD5 e2ea72d6af9956bb2fd98428dc05b217
- SHA1 7ce7d9e1b448fff8ab349f4b6260a35726efde32
- SHA512 73670300f2737fc5aa57d0cd8399293bd74a6a64b49b490b414393f1cb7eaff20ff1ff04b621d63fdad2837cf0409efdf7472a47db209812d2776257507b5ce3
- SSDEEP 384:1rNvpi0ayMwjV4geihGG6NWoFecJzrsMtB1U:pNBayMMVLkfzFeUzQoB1U
- TLSH T16E72D08FCF9342E98C24F3359ED1E7EED68966710D66EC57725726C054CE9006AE340A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 14KB
- SHA256 5c17c289169427ed17a492764e1c52decc9f937b92b8e55ad0ed1c4db9c8fbd3
- MD5 5c0dd8ead2d5fcd43461e359d3da8f47
- SHA1 a9ada0c5cb41ce606a0a08b0bd0f5824d1a6a810
- SHA512 796b9c5957fe2785c340de65639308598d283cc498ac79cf61e09c5c17ac9e528cad8c704e2fed1b4be4c8a245cace073d4b4ce9039150b296db38485cc7ad16
- SSDEEP 384:3xrlfH8DXrzXaFZb5KpPqWwiwrxSoSE4Rt2IJz:jfcDqFKBbkxBSE4RXJz
- TLSH T1A562D0CC2640DE2DF2486FD5F229F446108CBB25541CFFF918724D6A4EC5AB2E82459F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 81ddd7fc12b86ec70d03c423f625315dd91bc61d53b1d40a4a5321811f37a211
- MD5 05c1af5a25948ff8772029f8d9829986
- SHA1 61c9c97ec11d62618374e0c07a047b02fd2cdd90
- SHA512 a97f69baf9183603433f19a709b246c9c6764be7f6a317cdb214ecc8c7bb9487bd09af70142cf9a4654623fbd109ab4b61280d7a8fe001c30ca411f95bd7c411
- SSDEEP 384:yYHsR8EcqD8dzZmp2q4+koA9nXbQ09Ij2wf/+zRzenbTyPJ:tlEcrkwqvkoSfIjZGzRFJ
- TLSH T1AC72D09584BCC265D219AE37896F8DFD6C0A63D2D0F18BDDD00FAE85D23CD060759361
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 60a2970a46b2d8d37a3d4d3dcfdc33b653d7dfc2c6e57dca8f33c8deb7bd3a1c
- MD5 b924e90c51f067b3bd2cfa49c1e06164
- SHA1 50017ccf516771f4241d7878bdb152a47f4ad717
- SHA512 34255054d7edabcc2aa25a5ece5c6ff1fecb98042d1fbc28c32db32cac430aeca8866d7c2478bdb6584169aff11cafc4a579632a0d17539b405e6b306547c468
- SSDEEP 384:RZvOnYmxQJCxpNmUsFfDyAXj/5nK6WBqkZMLo+5ZxVk6p/B+3u51:RZvOnXxa3DnXYukvmxOIwe/
- TLSH T1E372C040B8F36DAB2811F8C5F9B85B87070126F197DDF8A1E60181E761E63AD4974C6F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 10KB
- SHA256 209d86adefc2168247897679d17bfce7595a767e8cc87055c0fa7fb884e2d122
- MD5 f30902df8d71bef607c73321a833e2bf
- SHA1 7b41e444048d7fab08a81509b1379e4257e08caf
- SHA512 9c55ef293b82cb4874dfe2fd64c51045094c6d85e0ed7da44073e2de2c8a3f22f436255095ea621ce592213e69ec7ac59db46a2091b62831884a3bb0ccb80da0
- SSDEEP 192:h8TZp/LrBoMmRaeyOJyYUDcoeBYgXdK1Fq1Jknsvh5nXG70y1oXnDJm++YKT/JOa:h8tBnSMs0MUDcrYWWq9vhtXGIy1oXnti
- TLSH T12D32CFBF95199AF00A59D1DE89660F8F977C4B675C9B408D68B22110751C48E08F8E78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 c75ab480ab2a979268e4a1e36de7edf0943d44fb6fa2437cf0465737e5d8ceeb
- MD5 d9195a2f2b522590beb4478719f4f804
- SHA1 6acf4ba28706a680535ad834d6be011fb0249f47
- SHA512 0d41386af7e6a60692a6fb38df1e9097cfdaa56ae2aae02a09b7e9fba0cb5fe8f6b5a5bf74fefde3f713fe900a62b06169252bd3aafc88b16dd7d935f2e47f12
- SSDEEP 384:7TY6t2uL1KFLG19xF1uiw6ZCq4kNms/AhNM:7TY6tp1KFiDDSitfHwy
- TLSH T18872E160293C76AC6395CE51EA989C1773C2F5B08F2FD94818988C04E698EE57CC7BC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 14KB
- SHA256 65b45b54cfe7712bb8cda986605f2d755a3370430d12dc26ac32689fcdffddf7
- MD5 9bb95e35c4c63ff185c0215695b6e68a
- SHA1 fec2018612b594a7ea38cd5f99953f3cc32d006f
- SHA512 3520db84f7250642304f7e0c66300e3f9c61034a3b809956695f5444d01d9ecf5d0a390f90517e514ea50aa894da961796ed1357f2cae6adaa5b9f3823c44b40
- SSDEEP 192:yermnKmULa0x//Le/U1tuHKKeAms11fCL/zeMRI4N4X9W6Noiw5C+XcSv:yerhx/jytVk/aB4N4tW6o5C+L
- TLSH T11162D0FEA2D4297BF9EE2DDC00B4C833AFB43C8424C16C8578FD49AE08D2460C99558B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 dc014844a62476a1f2d2a2de9f6b5144212a3e4820ca07352f2aeb0a23edab64
- MD5 3196dbbf67656591ff2da53980c10578
- SHA1 d720b9f0e0d5a5283da84af2ffa5376565973d93
- SHA512 b269d6eaebd7aafa402c0be00d71f9d318e55aed9df46291d229f67b622693852266b650546c3d53e6b5e08335b218afd24a14e39a833e107685bb860c32dfdb
- SSDEEP 384:UIhEqFhRF8q4l0T8UTGbxHe2MbhpOe5A8MmL/3Wsv:Pqq/N/TpqHe2Mbrl5RPWsv
- TLSH T14072D0418ED6778605AA6B30C21CEBE8623F4972065FF80427475E7B97E281F31B11AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 860cb7caa8aac7ef5e9e4324066c7dd2fc659822461b9e51d2f37ea32b7ec5a2
- MD5 bf363a53d0268b931fce8eebf34c51cc
- SHA1 ca5f6a6f5217103082bdb39e34f433ce039064a3
- SHA512 fb1353ab22fb0b1c8f97da6cd11d4419083084906e0a91dd4ee9e15806bcd1ed054b48ae5fb1a7711185bd5dba2210cc5a434e4c88bf06b64bac872877b9e942
- SSDEEP 384:u/EBLDfd2qhZXLu7u8NpoOeqKHnqoS0t/ftNxodKBeb:u/WL7ThsC8LoOeqenq+R7xjeb
- TLSH T1D672E057C88CC9CD2C3F2D07B6A62599910C21768FE9780F43D91C4AD3CFB052EA95AB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 b8ea4c0eb8d0988dad4058bed26facd9a47e7f4697bbcb67249f5a6ed3060306
- MD5 df619288f45b5f8c2195320ff7b1b389
- SHA1 544946f9677835e1928ba61ccaec429f4095756b
- SHA512 140740c0298a95f41e554dfa2b73e7c08d7e095116681eb298ed75c14762c007e57ba997325b9d82ebec9f5db63650ddb6a781fe2f76ef4021cf33c5f066ec06
- SSDEEP 384:7ZgdVFPrXC7wIJberVnJjBg1EVl/7X+Ic78ocksIkkAxFghcS:VKFPrX/VnBLxTLcAoc2kFgr
- TLSH T14282D0F7A01194DC3E994A5A660E8BC03E123AAB58831745B748E955CCFC7077FC617A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 d667c44d783f3ee18eaae9f959c04286ad6ebf7c33cedfba09cfec804c135823
- MD5 352f8cee473c08345735ff7d03795bb7
- SHA1 aafb7938134248fd1b790e21fb9a3e70bba4b441
- SHA512 d076e80f0d85f3de6fec0d879310869ef2d9f1dc5c0140804c1f6a35bffa07245910c705fe707701ccd5d76464634a828c2c3474c2df1f76c39c83bc7bfcfd4b
- SSDEEP 384:z0Ka4g9YsKCZrHrJbvhRLo3Nqbdsdlo7oA+kW5LCkIWnmnrlrSQAjQiGRoCbadOl:zDa4g1ZrHrJbvhRUydsdzkQdRmrBSrj+
- TLSH T1B272E0720A94C19FA7C49BD20B9744FE8321BBA267CC55B387DA5DAC63F275226C1D10
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 4c3dd487788d63256c8305a82b9d7ef9ae379956fa79bbc5c7aa21ab5b628bf6
- MD5 25bbae2279e3b37f303957b518d801c9
- SHA1 ae5470fc97fa51b3b8a5fa61ebd9a715235fe832
- SHA512 7b36e946edb53dc1a7dc5086e8002994f4ed234e6617baf2eee80d37e478e38743e37b69ae135dd32aaff1f855c62f179d3a2cb7607e37e41517bd409c5610e4
- SSDEEP 384:Dphc5zYErkoJWQeUW2Pd7aREjPIk1MLfM4wWNcWd6uHSSc:Dpy5zZ/gLUWgU+nEfr6RN
- TLSH T1AF72DF0D1045CF0E9EF7692AC71621B5FD37CB1185E87B7907B8C5126BDB821CA7E22A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 1f3193138d26b8244ffb114a9a972ba55a6cabe6452b29e116a55a88e6e4f7ff
- MD5 7a6b5c305afa2fc6177d68e06f811d48
- SHA1 80e317786fa34f0590cd991d458ada9548bde47f
- SHA512 98ff415db5458752fa7af7a0f95897ee2e8a232294497d464b8ff1b0ca63548c4de6ac6c2084573a776e797ba0dc93e6d2854ef8febdb4d91f43b79e63edf85f
- SSDEEP 384:Fhy08pGotsqg5+H9Og0+EaECIYgJV8WBospjBUArTwJDP7sEapdl9P:8JSKH9AaECIYizjLrT8bgE+dl9P
- TLSH T1D362CFC330DB4DDC30A5C56C7886221EBEAB212CD68D4BB16624DEC2464479F97CA50A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 6296c19b46b2267bb527f42d858105aa798701f55b212c30014b184befa94f45
- MD5 64d3214a25de0cfd19e31ae790b6c141
- SHA1 5b35518ff1d38dee1339a2420a81aaa8d99fe128
- SHA512 7935af06d965fab7dff24852d26641cbbf24cb51ddeb4183d77d6f8f1930beb6ffab933ae9e08edaf42e90c24b880824bd03b449b60ade15c8f1944bc63f35c1
- SSDEEP 384:m8nY0tPCg5MtbgyIpU0TILtmbcoug7gGupVdOFPShfrd4EwmlS:/j2t8y2IAbFu7dOFijRS
- TLSH T1C972C12FFE3C0AD8E35C4AD428DC09230C571228253D09E8B197E58F6346E8663AE4DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 2cd2e685898417e1d70057904b169e5132947c72c8f6e5fc7766e575bd3b8b13
- MD5 d40eea7139078928331d8945125de743
- SHA1 e4dccb445d39710c402e3eb48e7761ae06684447
- SHA512 b4713a24238e7d6889c5c0dd38d616bc22e455a4f71536d8f6763304cb4ebd4c26acc8649ede5fed740c85eb7a702b3915e91d04693bf4ec14f2a46964f5d118
- SSDEEP 384:oLDDVSo2LZF/UnAimoK9YDx685VT7yEviaLoScvQQ:obVSo2lF/UntUYDx9v3LDcvQQ
- TLSH T10F62D041F9859CFB1214B2CC3805E59972120DD3EDEAC9845DEBF73806B689223D5B9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 7c4cd1c82702ff3a20107b589c61e3c9c82e6584c96539d4c1578f35cae48b52
- MD5 bfc4876642d90367d173fade6975e78a
- SHA1 780d813e6c8680152ea36003b7c4e65a6f3cafea
- SHA512 fddf37ba76cf09c548cd28ed1b94ca84191f53658c80e110f035d94c23e85525431dbbe0be2c6d60330b195b1c01570272f77ad368cbb9fce4e83d34092a4716
- SSDEEP 384:/czzbcn/snjVBo/L3Txigang4AjPqCXuD4yGVDdF4gVO4gCClC:/czzbg2KDhagNT+DdG3F4hPblC
- TLSH T18182E045EB2F4637BB22BDB09E4F162E0C259AC1B02F155582DE3F231C7A5678B41905
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 3b29251ff2a8301e6002113de03b13427cb931df1cdbefe6d0400c187bfccf71
- MD5 1c04b0ef3388c227f14e60ad41a7176c
- SHA1 fd74817dad84b077b27fbf96f3db7323c77188cd
- SHA512 becdfa5bc458440831226df3824e45105704859227f8ccd06e8c2b79023aa098b9a32b08f220c6d1d24daf7b48fbad7993810e8274057afe7decdb6d25cd6268
- SSDEEP 192:szgRos/qiS733Cd68fgPXxTGweiuFRlL8oTRhAZpfaDJwlsSQlqn+4LNz9W7aT0v:nUlrd1ZTGwepgy4ZwKsS/n+uW7WR0ZkU
- TLSH T14572D1243D0576123B3EE787B6B9070969AB53154931B103C5FBDAF632B2C0EE5C0352
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 840ea06b837e3a782664bc319f4672beb1e816ae99d1a8f0996f2b0f189aeb40
- MD5 1f746c5bc48cb36fa7dc7058cac7e7c2
- SHA1 53fd2d4512a1867ef6d9751dffbb247560eb4f5c
- SHA512 0bad9afdb18ff5120f2b4025d865b72e6aa50d7310f3375459e777aad0192d4a4158cf5cc2cd48f7dd6a47b02e3754e75f8c6a2ec33bb49c9781df00281dd7fb
- SSDEEP 384:u96MOYWuSCKiVnpXBvVyV+ZBvn1blDQg8CATfadSVnrhTatuvOM9P/:u9/0eppNVJff1blDh8CEadSVn1atuvh/
- TLSH T14182D181C99CCCCB4043A1FDAE59F35D2A17AE7193D21C7196F0631679A43EE960DE0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 63c3cee9c234c4926a6505ad11a0749883f882a3d67dc0b96068b350c123b417
- MD5 d19f00ad2c35c3690815a156f41714a5
- SHA1 f82a6b627c7cc8b352a1d188c5a415e279a840f7
- SHA512 ffe6d80dc4e1f0ca455b1311f5a1f95c457fcd8adb7512ac23b2cdca1b9cff342480063a0527038b412135ec4ead37051840c00c9199def8601e5f407dd903de
- SSDEEP 384:DyBeu/Pp8E4Oy+nkrleGKTUK84pH8ta3ovjzvn6bT/oNPIXTxCA9:Ru/B83J+nkrlSUK/gaq3v8oNPIDxJ
- TLSH T1A562D0B18DE7CF329B7D2B8F7F3B01452FC8E90477C84AEC2ED948894415A9271626D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 bd7862bab3d89f2b5d24e0219dac8ffd089d484b9d456f280d97e59f090362f8
- MD5 4ce1099528d6b48301e6f6a9ae67a9a6
- SHA1 712b2bfabf7672e7a55bbbddff3ae4a37edd13a3
- SHA512 8f3bf91cc0c99e4e230a1432034277d597a983826f05ebe1026e059d0a53a427312d92eec8558e6aa957a6891ae772628b2fe2ade17f341e5bb6f64baa541d44
- SSDEEP 384:rytBti0PWVwc1oIQ/WJljojiqGlsAOzyVzvlmjwSqp:rSfPW2cqD/WzE2qszOzQSj+
- TLSH T19472E0B744EE00022F662D8B7EC93C23FAECDC116FC729148C578C914ABCDB95911A7A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 d69ef5eab18cdb5000a7d10fcfaa01d8c8bf5ba1892b888230b9632a476b98bb
- MD5 0c1c24bb488f9892b2e1e863aa0a80fb
- SHA1 c75ddc3f225a264c76b20e37d4f5080b0495cea3
- SHA512 2d2bca52d20baf6ee65743dc2d697483cf608202164d7e81e3e393887381f19bdc408a6d7dbbceea473b57062503634505a11e8df50fea8da0384c7ec76255a2
- SSDEEP 384:3kzxvUIi66rAlVnXcSyXOIU4c/Ffp61B8M2qtQpQKiGIiEoeL1:3kNvuZWMSGPa612qaQKiGIBt1
- TLSH T1A962E142F43DFC4CDD365D4304DAD0D1372756F6A604AB62FE85E22150B90C3A65B4B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 a2e06f5acd5da022783277a75132636b31ec3f6ec1d6f6a4745b29dd9331f511
- MD5 8f1b196b5ea10f4319df33d23854f69c
- SHA1 7e92d0a218d08b803ed03835a58b83f6c0e1a809
- SHA512 60e29fd9c81f12565a29c1278e145fabe954cb4371c63aec70348591adc59f423e54505842fdeb74bcef1e62f28fbbb2df03bb35a1c8f8f2763c4c01ff2acc4b
- SSDEEP 384:w1TFUIR/bYTeaFfSKr0FN9ioytQfuCMxKOF1Lrnyz+x3CHiUf/h4OOr:wZFh/keeVMdyus8OF1Lryix3CF/K
- TLSH T19282C069A2F935D04E8475F87B80F483636EAEF62CB510E1E35D72C0954360D6D9CB2E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 9b01a5bda9d0887d26ba13114becdeb851b846ee406f95b9568ab3b9094b3361
- MD5 bda232bb978201889ad7da10d5b11f0c
- SHA1 c255e94e3c4f47ba02ae15370c6cdae2426f4b40
- SHA512 b910166677aa6187437f3b6817798ce87b6d478316c355394786dd8899b966657fd81b28f6489eb432674749c63dcf3afc59bd8285a239f0ed7f9b576f82bcfb
- SSDEEP 192:5upcmG5dAKWZRWvrj9066p3tTkvS7nw35DsxwkrddVYfA86lhPCJWPH+pMRWRq:iPAdAK3H9IjgvS7aB8FxIfABzaMm+RWE
- TLSH T10972E1D41F12ACD254EE8A8ADB9FE849400603D3A5C06AE6E27D2B4C743D229770DE57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 140832e06ba9bfc2387bcaef72937e373b239f58df18a415b1b7e1c2f8be651b
- MD5 9855379e98a7f093cf12539ede846ad7
- SHA1 dde6131d3a63795d0486c830a714fc8a8ef9a2e4
- SHA512 3d3f92fe3bb8278ddc4192945f7f5fc9be9d746fa5902b4113e389330ee56c890bc053aa982ae13df75c8fe6cd4fd74b7787a41b9f1959a461f7e52a6ffa1742
- SSDEEP 384:/yskgrzednhETBcW+zc2Bp5QCL9luS5ijnDFI3wbUOYzQapKU:asX3ohq2hBpOSNgnDhUmKKU
- TLSH T11F82E076AA17A7D40244F1DEF134E0E7C8C1E72B8C04B867D69029A216B5D78A2C78A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 6a020e3ba137c43e7cf56e6142793fa988ac418c484bd4d38ad153cabb6dbc11
- MD5 0dac4f42858c4d85f4360a9fa7a48201
- SHA1 da81e716829292ee76f85e508fd1fe0cac2d5931
- SHA512 7889300ea51f2dc18f73febc512f6fe888e5618e93fde37b18966c88c0214aa3c61dcc914375d16f935cf19398bc891bdb2549628a1146af827778f71ce9eb5a
- SSDEEP 384:IO7O0TH2KKFWliiAzdS+UNvpDUbWwrvO0I/vFUDhMGvvpiYQnp8Zh2Lj2:IAO5KsSAzRwZoWwjOYnvvnQnpP2
- TLSH T1A282D0C183E753270EFC692CA21B8E044CBB4E183C8115B51AD8B361DEC9B299F931B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 be9b337b5254d4446197d24dd835e3237d6f6dc626dba4309c74d7a24a0765ae
- MD5 26e4d8bc2f2f7f7c23a0bb713eccf855
- SHA1 6b9c52c6cacd272eca4dd97c442f3970d87370f5
- SHA512 1bef88437ef6ef60f48e0229cf1a295a42b3b41ffc98649196e3c0c009ea71e4a143a640d866fc5cf6f7488899fd06efc114ccf5811b017be8476e5280377af5
- SSDEEP 384:nXgaIClg5o2NuHgi5QJZKNBwZGtb0MEEUK9Uyfe0A:QvClg5ZoHgi5NwZGtLe6UvN
- TLSH T1BF72D11398EDD43F3402BF2A563D4AAF2B0F5C54795722DF86CDB1852C4057AD9D222A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 17ac9953d6a06e4ecbdb6ace0f448098634ad16b76907dd8b35aa74af9caf08b
- MD5 654ef20d03d50f8ee2f300ad93434d40
- SHA1 0265d4b1163962fb854f963d94befb8b315d3a93
- SHA512 dc80be27316f01965d025629ec1aec0e1eed6ccf24b2ebbf3b72fdfed0e5ae11e211c586ae14cd1ff305b723f1c24b25370e60f94dbbfffb70e5a5bc51a895ec
- SSDEEP 192:WlmY6ROAfr266wyTUURMxLIqHaEasNFRljPbZ1wfRN90suyAhjHA6evYriBaAzlJ:fVROa5FQUfCEauFRljSRN9pagJTBv
- TLSH T13562D0D0489CCA4750DBF84633DD49971A599AA313007713E701EBF8332A19A624FD9F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 c35c6dac888bb23641037ad785d9cd423db919df261fa47253992842705ac358
- MD5 15dabe257a71379732057bb942b10e68
- SHA1 8d8322d2614549a10a504211c879769f0e0c834f
- SHA512 4c92a0d5af8598376b5c2056c923aab483139f4eaa51e4a7f8198472a6daf5193c73da785483ea0ada227991e64c9cbc5ff583f06b1ded35c630ae16bac503bd
- SSDEEP 384:Z6NDIUPgvsBlj8+ZJuXg484jBkDi4DPiFJmDmvs7fVwSX+/8:Zn8TdXuXVRjB5JFQDmUj+/8
- TLSH T1BD82E1E094CCE91344FFA864DBE5728A7C3B8F067C291AC75D6A8E93D9ED7144134E42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 4a6a69e7cf0f4323ea708c1f6293e6fd46afd24cc7ac1663e382b6fcc2fb7cf8
- MD5 694e2087845a331d721cd6b9ba826337
- SHA1 3a3fed6f7741f7e8c118c03bedaa59c0164a6503
- SHA512 5f5a1604f380b5228e0944b6db530a7e4ff727fcce65d4e61e31306214f2c464d3f55365335e3f613169c08fea12701307f53a732eeaf23734d1c8d143037c9d
- SSDEEP 384:ELvpdZU/cqOyCNmmD9Rsu3FoEb5o0Jo5gQOwPJ06tf:EL8rrI+EiTOwR0of
- TLSH T10A72E1A9E08D1E36161E90043FCA37E46C6DDA70CC5AD5B8390DEAD9ED69423C2F0763
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 1af77c54ebbab0df584a3bd61ecee0aec2c6309a3630e80a16e0cdd93aa463b8
- MD5 2507af3fb01431697175ec592907e1f0
- SHA1 8235954a144f6fc781be1f3231c6f507f7f8ee3d
- SHA512 20a7294fe28f6facae20e1e18f709745700113fcbaa95e826d9d39695ead4f8eb6d679cd4b467ed49f16c49e4c0307e061de9f099d3999151e1450397b985cc7
- SSDEEP 384:2y2Fw1c8xfBG2ZR862FutX2EC3UDAlV0eFRQgAqQeotEmWc:t22c8dBFmutX2EK3VrFQ7tEmWc
- TLSH T10182DFC93C0523A39329DDAA770AA7EF2DF65D31F70220E72081CED682451DC62D2634
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 15KB
- SHA256 9159e80c0a0941eb9fbe0dbb32f7db2bd70cc751f9870cc92d849bdf0c029d89
- MD5 721d26052c7e0e20f9818ad6e870e68d
- SHA1 c7ee664da0d109edbb1946d705b4188bb28bcfb1
- SHA512 1860fbdbb531eccf1b5b4ec7fb0091f1aa852153944ca85539eacf8a5ed5f3ba63110d0202d53387ee05960d6bfe0df490d705991cf19fc51b604bb6b2d61f0f
- SSDEEP 384:oCozRae5j9F4TKHoxjeEz/Og37zeSgfvSrtNwNXljQD:r2a034aoxjJ/FOPvSTUNQD
- TLSH T1EF62D1A65B4611B67C6F20159B4E77194FAA2952F228BF96803108C8F50E7DED01C93E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 74e82d3c18988efe5289d3c5b0031751e923e4afddcd3d7f21146d5c7350d94c
- MD5 e6ebde5b7d6d82bc65c5043bd81a6f92
- SHA1 5fd24066e605d7f100aa1b85070d0ca5f35f5f93
- SHA512 a990df8eb87da96783b3e1a7847c95007c643c3775c13a5353816fcb7e5659131fa78c066ca839412f84863b29437d76af9ea47c6ed9e427fd4d6ea4e0c63277
- SSDEEP 384:/N7DnXujx0BccjbzizsENmpF5f/86N/QHgD5DG1VoWha9Sm1uqZB9IIP:/6x0BcUbuzLmpF5H86p9D5DcV3h2Squ6
- TLSH T11482DF2CD5913A800912B972D4377FBD56640B3896B169033C3A2AC3F58A5283E3FF71
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 81d8d896f86074e79ec3c549f9b73653dd39b4afe60403f5e3a1b1016e33dcdb
- MD5 e682c6a07fe2b99261a90d9875d00a63
- SHA1 e18c458f1c945dc66ad7f7b18d750322056c6c9b
- SHA512 150cdaf9032712f3b0f46e318bbf5381267623481ac28608d139a96b0d9db5c4a3216658dcc551c92969c4d9663c78a271cb34e8006810d64781532cf61103a9
- SSDEEP 384:6qbrSDbdWFsiE9uZStGRzw1f1IrbwIoWPXGRWUjvAi/INzOp01:6qbeWO9/4sh1IAoAFjoM+u01
- TLSH T12D82D016ED5A865FAF3E1C04908AF770EE51D44C9E81F32C928DE871BEA5BAB0716350
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 2a42bca70b4f9935224f480fbf7c902ecbb53b1b98290ec50804646a06f5b38a
- MD5 19d5f55a1631a9b4f331699f2cf6ed0a
- SHA1 9799fdc4ca23d583570d129d45311ef050649e3c
- SHA512 a5ae0f8283f007cbf01c1bd06602f2b5354d8de80d03b07176d0de3270dbad3b2eea6f534a93b4aa9a5abbff5411e84cfa76fc514a3be703b5bb069e5903e037
- SSDEEP 384:CqbyGe25sLmi9oZsGhmUV+XAHR1TJpY0h6AZI+sDCG+hdsuJ5Sq8YGZ:Cqby3UHiy6GhPV+QTh7I5DCNguJPyZ
- TLSH T12B82D0F6E712F60011B25D17AE9B7905AC233E4486D872589354EDED482CFE1E3BCE24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 16KB
- SHA256 e4cc7cc06ae382b10ade303e09768cbd381c8a843512c57025fcf7f2f25ad2ac
- MD5 0f7bc14ca4c96941b0b492aa9c817cf9
- SHA1 ddad9c1fcc040ac474456bbceacb70cc8fa0f9f3
- SHA512 1890809936b77be756a24cad95b1b17da96348e4e0d3f3531194af7af51b9f354c9b16f56a04fffcea4ad994e6135f088e95536a562ec39304fd04f85b712c7e
- SSDEEP 384:QVVts6/dTaYeYFOYM2+3GefoIrKrRocvXsFJsbO6E+N+SY3:2V9dFbOY2GCoIrqRDPsD6EM+SY3
- TLSH T12172BFC99D33A404A6FB10EDBCCDBAF4F8420EE177286DD36AE1D433519488987DA542
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 b7b5a4687e21c75cf41840b201f9afa7574eab9e369203594007d50e9c880f66
- MD5 e822da953ac1b11ba0a0a3c3a5b266b5
- SHA1 31c6fcafd98c784c1ed157cc576508e7179e3e41
- SHA512 72f3bb9d51f0a002feb04564c630276201daf8ab86293765af9e5d5626dedac1732daf447751809cda0f54b3b3bb88a95d40a22695b43fc73566e3a348c84074
- SSDEEP 384:GCRcEGvR1YTcf9nfJmw4o8GGvNDwr1AnXtn53GyT:jOEGvR1JVnfIhEGlEr1OjGyT
- TLSH T10482D061D6B1A0F8704C8B75DB98FAD2CB7E427F475D810111B9E7122CC1B78FA5808A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 30ba543db617163e91a6667f6dd4dcf1ae917af5204c347cfc36dd60b84935a0
- MD5 f3fef348a2172e1cd205205dc92bdc32
- SHA1 7c41a727001469d527e5f1b5703d1089eb2f81ee
- SHA512 7d04ec59195ba93318122c52ca3179437b341e8abfd7ac0f49c4d664b8089e60a07c1984571aaf2d272e4ef951f52583c58c2b2cc922716174f5cb0831ceb3a2
- SSDEEP 384:Q8ox8BhWcZVpskXfpZWb0wbhkM+i/rbH15Spq1ingcw+KvFK/F2irf:X1BhWcZMkvpwb0Ni/rbVE8sggKvokkf
- TLSH T12982E133854720CE435BE776EEAB3759837160F7014EBA1E978426C62078A9183A4D7E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
- Size 17KB
- SHA256 8a6c5f57f24a103056a87837fc98ec85c0f3df464fdfae517aadfc942383a07d
- MD5 8de8ffcfbaafff750983f7fdb9acdbe4
- SHA1 df9d0c31b9da43a87ff951f8ecbb0eda9bac7b2d
- SHA512 5f76565840c494027489530a1a6e341eabb40c138079075e125f26b12b141acd3247523e69ed4f47b181b56d87539356ae4fa143b23fc0fe1d6ae322c8ba5cd8
- SSDEEP 384:J3/B2vwRL0pvvk5dd5XQU7LfovWv6fsb0gsKvAF4QgipwzgfL6ujYpH:F/nRL0pvvkJ5giLfIulIF4kwzgz615
- TLSH T15582D0988AC40E8ACB42EA6D1D7FB3C962708580DA3F0DF421A3344372DC834EAD8D4D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\a23a7888-f2e1-48a9-b463-1cff75de8835.tmp
- Size 456B
- SHA256 62d37dc22f4c6cdb3a9e719d2d39d7e6d17d7d05fd2c515d33432ccb76da2932
- MD5 b11358870445bcd820168252db17d066
- SHA1 77417fdacbe5759a39b3048845fa838a5f928106
- SHA512 b1f1eeb7d48913b9c7383fe1113e27d36ba423767fb51db8ece8295b373e822e4ddda49ecb3d88262368577faeb804b110522e351c36f447c8082d461333c978
- TLSH T137F0DC05BA3923089CF8ABF1377D3EB1C32CCC81DC8092E254AF345C42A020C4626220
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\d0206106-c433-4462-a0fc-32d1da137101.tmp
- Size 10KB
- SHA256 945476b5e76ddd365a8a5f7e60ad46ecf1633295b568b0aad44bb38724a3dcdf
- MD5 e328f0f73aab6581e428e225fb66546e
- SHA1 eb2f56617d245e1c42d68856fb6ae8e27df62f20
- SHA512 b374922d58ef616d7e1a4c987aaf09706fd42cae3b1e0ececb1af46561337961455a07647c9bd97f2433e318715827596a803c33a8d6fc4335ec4d3b32e3c27b
- SSDEEP 192:anYLlLVLFLHL/L0L0LyL6XMPXP4PwPcPPPPPkPsPuPHPWPYPSPsPZPFwPkPiPgPx:vxhRrTSSY6Xu/C6+XXmOkvMiAOVgmQqx
- TLSH T1DB22334B99A40D7B4DC3D665F610B6DBF6E80020A2617D95B7F8891C05CF6CD7823AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4036.0.1917145737
- Size 1KB
- SHA256 024e85fb16a161132b29e20200d85b9f1849cc097e4c2085ca71507ee3659a51
- MD5 9d5235154e7b93b1e8ef6012439ae089
- SHA1 d48297da6a8253cf1d38f307b0386e06c3268639
- SHA512 dbf94c96e5792f9e3832455b79bbb326e9501d9808940722c16f58c2c9c006f6a4b01735a3b60f1ac69f369614f24f5ed483384871367fae865e5462189be603
- TLSH T10E215691499158B5AFAACB7B71F03A2B0FBECD93720554A636EE000D1E9C775410B52A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4036.0.1917145737
- Size 266B
- SHA256 c7ca97ce63d77288bc3f9060419d1562699f6be632f0efc75b6c607b29d0d961
- MD5 9b4e68299e13c486176dca455777f3a6
- SHA1 9b555308217d7d0df6d0f4fab243ea3887d3ede1
- SHA512 f78e3c96a9a96bf2c47f26e0d9cda6359886924bb520acda8a68a286a5fd244d7ec2e39b69c50975e9c90cd4c45356a5ce42a06e80d9abc767f2f26e6e8da98d
- TLSH T142D095200A9595A6F0D4EF7D92247FFB1776456306141D70035C0B1941FE09E0355F3A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4036.0.1917145737
- Size 2KB
- SHA256 4304a0809b5a0ba222cf5ddcc5a561eb38dcc0358af704c09d53be7302571452
- MD5 77d029a1b6e074c2bdc54ccccf45a2ca
- SHA1 280451352d2937b32588336d98e7f935680711e0
- SHA512 4278f8efae640f50a74556e11c47572c6dadf65d92fe7b8548e03d618d374497628b40082b2a541edfa4ec0ea79669a79b71fde2d1b0acaed833e33e2adcd168
- TLSH T14051308188911879EF9AC76B71F13F2A0F7ECDA33205649936EF000E1EAE6B74107517
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6692.0.959245695
- Size 266B
- SHA256 b3ea1ba4259dfef0d2345df9cbd4a6e6fee4c55cbfa2fdbbe189c4a4532b9bb6
- MD5 db8786798a8fd6524ab303086ff32ea7
- SHA1 e62a2bed87002483123e96f8c522252eaca80823
- SHA512 4f170fa15595a50aba789b93b8573ce438891afba9356cf5412476c931ac78c5b54bce60de8b78d9df5ac0312ae0557d61b2a0064c5f61d0ee9094de4f269562
- TLSH T1A9D02B801892916152F4F67A5525BFFB01B6CE170114443154ADCE9641FD1AC0340727
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6692.0.959245695
- Size 1KB
- SHA256 beb72055a1a5a35dfee03c54f8c6c5076d12204eee9a9a317e87cc9e5f4f3952
- MD5 0466499abad93e8857743f8fb391e396
- SHA1 f12e8646da13184a8ef25f8e4aaeafdd491ff8b9
- SHA512 9e29f90f571a083384af6592b8df3a2f5c67753bc991e7c7f093499c6c597cf02f1bfaa11911c042e371d2761e12e31d598fed546c7863b1209ad53b5c93a31b
- TLSH T1EF21319148D168B56FAACBBB71F0362B0BBACD83720554963AEF004E0B9D7784207626
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6692.0.959245695
- Size 2KB
- SHA256 391570f60ccc77b5a2d226fcc636b55759c84a681410ec224e63d822e62ae398
- MD5 b9c4f9e34eb25ee6006fded2aaa2c03d
- SHA1 ad553434e34c2fd8e727689e8db3393d9d4f315a
- SHA512 5641e5822543a6bbe4ec1a15639072c944a21389527b5eaddc535f878885e96f6c3cf26367bba468ae2ebac302d41a40ddc903aff55e81d37fd7c407348c5eb1
- TLSH T101511D8188915878EF9AC76B71F13F2A0F7ECDA33205648936EF000E1EBD6B68207117
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 1014B
- SHA256 aeeeda4510de9b1e7cbd85d98e939648edb39fd96c0e235349641031eeec7105
- MD5 f7179dbbbaa54263b5b132d72d4ff625
- SHA1 e85dd14697fb0eda280f461469d83833905c6a99
- SHA512 cce163bece1432c41362df5d5d38fc9f6732fc5508efc9506364d06261ecf519e5ffdc943ae1a13eac54ccce2bec8a036cd512f37c54b43994712289fae7a015
- TLSH T1091125E6B52517289F69C3D13F34BAD9C3F7CCCAB89086D7D9AF144C019D26E4452380
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 1KB
- SHA256 9297d76a6df5a01bf2b7b0ec63d2d797ecfc82e010123feb1e9d0163c9bf4dde
- MD5 953dfcfb71eb6090dd98f589199f61da
- SHA1 e078fd00654efb5eddfd90fe0cc0b5d87cf58611
- SHA512 f8bb76fa74ebac3f113c78f3786e3dada813447f6d31336f36e11e5d144a68bca30c9f678e8b1aede93aad2f88781bb2a58c2a7410b864a04a2fbb559b159778
- TLSH T1E93110E7B16117289F58C3923B78B9A9C6B38CCA7C8085CADD9E500C018A27D48412D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 824B
- SHA256 9e2c140b71f192384f28395706cc960aa731b2066047c6ca33afcc791ea1e1b3
- MD5 4bf0830ce1a6cab3c7dbf6d2e09415b6
- SHA1 db99032afc02cdebb285f6025f8374b40f7b49ca
- SHA512 f35eee7bb880f7f60a6f44bff943d9f09a20a5b9d90f1f5bdddd33cfa695c6d795a9fdeba9ab0d6283eb33bf37195b04da0024d7c2d7852b11d85dfb07df37c6
- TLSH T11D0146D675252B285E9CC3E23B78B9D1C2B6CCC9FC9085D6DE9E244C018E11E0550390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 918B
- SHA256 49aa440eae794456ed2b5d6717f5ec6d9413557c48f959514f84d84c4d81d5ce
- MD5 35937c84b162e427dcfb4c53e78421cf
- SHA1 cd82743e4732aa3962bc8ae905b9f993949b019e
- SHA512 1be2269e40d172cbf62e9ece85f2d80ee6af1d4b6cae5cf5a213d3e179f5a2db12e84c99b8708223baebaba5d4ecda888e69fae9e5143caa196ac51559927b23
- TLSH T1F91100E6A6256B285FA9C7E23F78B9D5C3FBCCCAACC085CAD9AE140C024D12E0540290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 1KB
- SHA256 f3fd942e2c0d4959dd9313be42b26431841209cb0f3970c43ea5552bcc7a44cf
- MD5 cfdc129d8a025a15858333a42af7c860
- SHA1 9c8ecb7e1d455a18cb0bbcf9708096d0554fa2e4
- SHA512 9da4674a7b4cd3cfc87915f4f54a77a276bb4b22dd7a29ef55b8f58b99b8deb3bd299b35834980de340e229159d03585326c9c3bb5bea5ac0af692a4ee658ddf
- TLSH T1771123E7B5211728AF59C7A23B78B9D9C7F7CCCA7C8089CAD99E544C418A26E0451290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 1KB
- SHA256 6d2ad5e91cdbef9ca8526fbc28a023236ef252bd49b93739334dcfd0ab9e53fc
- MD5 ade0befdda766818dbe252bcf981d0ad
- SHA1 b5460dbf1a42a1cf6c8c80086ab781201683de9f
- SHA512 7343fd8babf574bd93b9f2fc8d942f95da5e696f2a6e188f3c9119f373c9b2356725a67574fc5e68c44b413ef6e26cdf9b8a58307fe975b77fa1aceb1b328161
- TLSH T1F821FEEA752167289E69C3A63B38B9E9CBB7CCCA7CC089DADD5E540C019A26E0441280
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 1KB
- SHA256 e22b30497efe4fc378fbff45a37c36afad1eaf8743fc791f6d247673652f86d1
- MD5 e7da93994711d67210fa1b4fee52d3c6
- SHA1 a6c8001054da4ba6849f3b232498b16dfc252d38
- SHA512 e7d1b9c3f0e5f2a51fad0c7d9451d0853a9c051898457ca135d7a531c46c11cc6be4a8206fc7ad8cf48cec188fe01328d976b6dc8e33353d9d349c16840f6c3b
- TLSH T12821F0FB75215728AE69C3A53B38B9E9C6B7CCCABCC085CBD96E540C418A26E4441280
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 1KB
- SHA256 f3c7ec87b7a0b32046f0124228a8cdb088da2a02121a04d88d9ee3f0cd10b055
- MD5 5707552b503eaa49796cdf3a5fd4cb70
- SHA1 c466accf17ac698ed8eb4da96c0bb06a3fb9dd00
- SHA512 5affe738e5cbff71215955f2971e30f20473a0f4451eb83ebf1e2fa662f2462a83bcfc73180a8055e193c2dc8a20451f3a37c2aff5764801251b154812843cd5
- TLSH T15021C1F7752157289F69C7953F38B9D9C7B78CCABCC485CAD96E540C418A27D44412D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 647B
- SHA256 86875ef610151935eb419c3a07f354a67ee4ffb0c11c8fc0f1658d9339a2d1d7
- MD5 d08d0221f988dc8ba7488c590e324032
- SHA1 117bf12590b2fe5b3b95119e1c8932c1de084552
- SHA512 af2b5179aaca26a2e89866723d2fc105abb0e3445f063decf9e1c914b753f661ae9c337b436eb41fca4ee8d48b859daefc94ea027a23b10d15557592f0eb576a
- TLSH T1AEF0D352753227389AA9C7E13B787ED1C37ACC84EC8446E2D99E241C01D520D4A56260
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 1KB
- SHA256 bfb199ccb4c227fb74205bbd17320e47f3014583febd9691a12606f17968ffa6
- MD5 f320a313243b1edcc7b0d8b47c7756d8
- SHA1 df9f0fd3442aee5163812c3717b66148b33f8147
- SHA512 e6f2ee814803c3bcbad1aede097165aa8cfdd9e345f9e4677c2cafaf055f6e7b3f2ad5ae67b72bc26eecb5b77e154ac64cedb415e954f436a9eab77379baeea7
- TLSH T1263142F775111728AFA8C3D23B78B9AAC6B78CCA7C8085DA996E505C018F37D04413D1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 737B
- SHA256 c2244a4ece49a102b3001fa489ae20270d36e2e41292abd3042a68c5e504f8c3
- MD5 008ad9427d414dc7a41d8ee110c248c4
- SHA1 5386f87cbac21bafb8a23ccb360dfcc108523956
- SHA512 2790cd7698f5604afe5d133892de800ebf187aa0a6f8fa10f44d10f3a618452e644c50915b82ef160e3e8694e02b215a1e5f8e83f1adbad1c0e78414c8edb113
- TLSH T1EA011082B625A7695EAAC7E13B7CBED1C3B7CC85FCD085D39DAF241C029911E5811760
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 1KB
- SHA256 0a140422aba16543fdf62474410a8abb5c39d553d28058036978863937b4c535
- MD5 79776c9e2a6bbd731d295ef4514bd90f
- SHA1 d0b406d4cd00bd40db548f272735da5bdb7506e5
- SHA512 6788599b437b2dafc8ece6ee0161bd53e48bc1b5d96f54454962d9cfe9ccf894073470e1cc973740629d20307c9b46d674a80adcf749945369a7827304ce566e
- TLSH T18D3131F7756157289FA8D3A63F3CB9EAC7778CCA7C8089D6995E540C42DF27D0441290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 4KB
- SHA256 724143a323bca346493135d2bf8fb52005746b04a4b822a4b42bfe5461cd80ef
- MD5 c53f3a3dfb48c4d54fb9eef043a7914e
- SHA1 e2019af4598682a37c43bfc7069d2dc788d4cf1d
- SHA512 7de7d84439dff225865166674521457c8cb8fecb622506a05d0fcba81647b76ca028994f61998aa4d96d50d944f126dd7a74ec91c91756493e373d6de5a7d5cf
- SSDEEP 48:Uju0aMsZwEQbLNrsh9QfmmSkSE1mH3f4F+G0a5pkvrS+F1TUeXDMU6hXNXd8KfKw:N7ZwbvNYh9hySpZRrNQZvL11Ce/
- TLSH T1A291859298611A38DF5AC7AB76F57F2A4F7ECC93314055CA75EF000D0AAE2BE4107103
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 3KB
- SHA256 902a6d69db70cf3ca1f12bac1d964b3773c4d6e97b3a4ce35e05254761f62387
- MD5 3834c43d0064e6ff99af90ae452e929d
- SHA1 69a527fd9534665c5fa14fb2e4fe64f9410f6f90
- SHA512 ac3ae8f4e6bba2bfe893bd210aedc5f1aac9b2622ee41f62c48302c8ff868bfd78358e0ba4e03eb2fb76a822e6ff0c1465ff2a0dff72d9e66f982978a271e05d
- TLSH T18C8142D298511A78DF9AC7AA76F47F6A4FBECC93700454CA79EF000D0AAE2BE4007143
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 4KB
- SHA256 e6cbcd154dcedf0bc99de04351806a061def08fa3e0e6c0dc115f2b032161d6c
- MD5 133b7094435f65ce1d4459192f51db5e
- SHA1 a7aa0d23b849daefcf9ecea5387c3fb931a4f97b
- SHA512 b069470fe47e6e17d330c5acb518bd437df2dce0a2568309f2bff732af4eca8be5bbd076f4e2e9e356432274a6894be7ee7cffcd578da56c47e2594f0cc59ae9
- SSDEEP 48:jXmjx0SMsZwEQbLNrsh9QfmmSkSE1mH3f4F+G0a5pkvrS+F1TUeXDMU6hXNXd8KP:Ls9ZwbvNYh9hySpZRrNQZvL11Ce/
- TLSH T1C191739298512A74DF5AC7AB76F57F2A8F7ECC933001958975EF000E0AAE2BF4107203
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 4KB
- SHA256 92715ea5fd4a2fd6e23de0becdfe7dd36c3c3dfffd7ff4378c0b3fd0a3f831ed
- MD5 e1841167844c12a843b6e85a78c6305d
- SHA1 bb44eb72dbb2493ee799730ac39e4155388af471
- SHA512 c4f0fb8c53d814f514b556c9a542f9ab200e8ea49b2c3cc3f07c7cfd82debcc2971d61894ea165ad28410624e042babd71eb5cbf5b91472522fc88a76d4fb8e9
- SSDEEP 48:ojx05dJMsZwEQbLNrsh9QfmmSkSE1mH3f4F+G0a5pkvrS+F1TUeXDMU6hXNXd8KP:a07ZwbvNYh9hySpZRrNQZvL11Ce/
- TLSH T183915392A8612A74DF5AC7AB7AF57F6A8F7ECC933041558975EF000D0AAE2BE4107103
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 4KB
- SHA256 360f532223481ea14bd95739da7593b2997332f0705868e01fb07cfe576c6a63
- MD5 c81018c36e657337c95d2a4f7da212ca
- SHA1 e499f8009661dfa9f5067e5e344bb27248427cb4
- SHA512 f4c3d4a46ef60c00cbe473c33118c3e4c186695d9eb7a4f658c0f37599a26359fffc198b7c906eab4a1e681a139e659875c4659b0e2e9b10d3b5215c5e1e7018
- SSDEEP 48:3jx05dAMsZwEQbLNrsh9QfmmSkSE1mH3f4F+G0a5pkvrS+F1TUeXDMU6hXNXd8KP:F0uZwbvNYh9hySpZRrNQZvL11Ce/
- TLSH T1B1915391A8512A74DF5AC7ABBAF57F5A8FBECC933041559975EF000D0AAA3BE4107103
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 4KB
- SHA256 a0525e6d4fa9bc236c0a253a1cb768e5c1dc9969f0eb6bcd875044b384734dfe
- MD5 bf8d02b6079129c11147173d0d61259c
- SHA1 aa5bf76d6a07edb43087ca6e28294c75a2dc0d15
- SHA512 4e4151c2c118d64a52c389d20052da3baa51c995bf652691bac8e79885507360f57e228a12ae4544aca30b7bbb398d408cc78de2ad1ba727d4e42fb73cddb812
- SSDEEP 48:jwjx05dAMsZwEQbLNrsh9QfmmSkSE1mH3f4F+G0a5pkvrS+F1TUwOXDMU6hXNXd5:u0uZwbvNYh9hySpZRr4QZvLsw1Ce/
- TLSH T154A1539298512A34DF5AC7AABAF47F5A8F7ECC933140959975EF000D0AAE7BF4103103
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 2KB
- SHA256 d771e5c914b9766c6c26888b59c3cb4813ae681f640a7f14164d37e5e637a6b8
- MD5 703c54e3e58b44a00324419fcaa3f679
- SHA1 dcb24b3bd1ed0a60bcd0baf6c2fc32d206ced976
- SHA512 8c7bb48dae746d58227844787191b0a094567aa576c0881e4b8e4afb70075f6598676a2885964bd26f2c71cf2c3f3102b83226ade651c685785396655a79db5b
- TLSH T1A151A5E2A5911B385F69C3A67BF4796ECBB7CCC7744484DB69AF000C028E37C4007251
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 4KB
- SHA256 c2b3d2fb8fda6f80dbe3f1bc45046232a2b3835b5356a26d36fe3241f4700e6e
- MD5 c81bfb106cc16add3d76c5efc0d84373
- SHA1 e3851006b896cef7a1956395c6ab73417a00f9be
- SHA512 4d4a8b840185e8a3f919d675af17f74c37a22d542332af4114e462fc05ac50ad3cec32b5862716ebb1b2376b2a435f50f8690c774082f257960f0a2f6ab634b4
- SSDEEP 48:zqMjNMsZwEQbLNrsh9QfmmSkSE1mH3f4F+G0a5pkvrS+F1TUeXDMU6hXNXd8KfKw:WEZwbvNYh9hySpZRrNQZvL11Ce/
- TLSH T15191549299511A38DF9AC7AB76F47F2A4F7ECC937101558A75EF000D0AAE6BE4107243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 4KB
- SHA256 9ca718a33e1bc845774692c12aa4598cb270e78f4b82d86eb99f3c9c402a1941
- MD5 8c02e948c3cac7dd92aa60b03b0b84c0
- SHA1 38c8b70c767dfe6791886b76ba5126c22e38f784
- SHA512 e96cd4d6696fda2c28a186865a4b048fac61af75df4d068da19ba4a88567f91f06f8498cd6373e6c6f012520acf3fac53ff9cee26ffcb9054deb675a09017394
- SSDEEP 48:/jx0aMsZwEQbLNrsh9QfmmSkSE1mH3f4F+G0a5pkvrS+F1TUeXDMU6hXNXd8KfKw:t7ZwbvNYh9hySpZRrNQZvL11Ce/
- TLSH T19E91739298511A74DF9AC7AA77F47F1A4F7ECC933104558975EF000D0AAE2BE4107203
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
- Size 549B
- SHA256 c82693b4d0f94916b1bbe5b069d1990efd4fdc4a91d35b1b9cdf3d78d6123e3f
- MD5 2e24792cf67c9b8323c9cdab24ce60e5
- SHA1 f18054b5843caaea47f2d1b1f07aaff52f7920d3
- SHA512 a508f632eeca14f743d41f33844dd82ef65f0d7eca01f541d16f42166275d9f6d65764ec0e554d267840983d99ae30e7343086b520252d80a32eaecbded50f4e
- TLSH T117F02041B921271CDEA887E13BB87EA1C37ACC44EC8446F2A9AE245C424420D0A02220
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 09e89838d302d8c1a3c401b5403d1db433bca71bfc914e5f2954d9dab9fb7a2d
- MD5 1f5b356e371ad997276733ef04494b8c
- SHA1 b51a77ab285f2f477a587a3ad45a4eabfd6caeb0
- SHA512 0f1655ce032ff0eac847f4a02da0919b1f9fca0439338b8186b274fb3e640e62e75895194fe66a48c8f03ab5d3efbac988ef7c7d1ccfeb6b688bbb41d8e344dc
- TLSH T1F221FCF3392057389F69C7943F78B9EEDAF384CFBC84D5C6D09AA04D119A27E0450680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 715B
- SHA256 448d36ff3c8ac6b05271e55c90e78aa4dbc2bc92921f44d13e2a85cde5c591a0
- MD5 c69d6db99e2ff26c9737e06da737d584
- SHA1 6ff3f01d394f826c7728fccb0088d9a968b70133
- SHA512 44b78ce769c3c54d64b682ab2f8322a61582cdc58e3885b4f43d3f97c74dc77d456894260567276919ae9f0be5d751b5de02b3173022fdf3cac6073ac19eede5
- TLSH T1620110A2342063284E498BD57B78FEE1C1F788CAB804A8D5C58A604C01BA22F5402710
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 6789db48980e736e882e2c93606ad24fe816ce33e21cb3be8780243c7b364e3f
- MD5 d5c3f72c206a8ba43d92544d186bfd4d
- SHA1 a26bdfb1f09347c52897238679e9d508e1f33a61
- SHA512 0c53110dbb368682eb6f9a2d2f4e23571042a803d47701dc023c6e2646de9d946b189b06ff6895c6e40056fc65b4695785ec49713299e3e59d68fac00464cb16
- TLSH T12D210EF7756057289F59C795BF38B9AECAB388CFBC84A5CAD95AA00C01DB37E4441680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 77e43021aafa63ec87452a7f4a745cd9c5d4cf4cda7f97a1d9fa1fb4e6f9a9a1
- MD5 6a16bc1da52eb9eb74c3fcf566669896
- SHA1 ef3dcf3dd0c46e3b9f02ba3e607e5530b91d3fe4
- SHA512 a7c9907b38697f942d1d7877d514183a05c8a9a44b80e46dfa9c655f6d8ef4a85ae264bf87ec10d42e455f1c5668d0344a3900d3ea6fe4599890c14a562fc363
- TLSH T1C621FCF3392057389F68C7987F38B9EECAB388CF7C8495CAD45AA04C019A3BE04406C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 cb0a262dc3e68d676018df37c9cef1ebb584e3ddb4a2b7ed60d5a8530606d99b
- MD5 411c26fa5ccd17f62b4eb5930ea28a49
- SHA1 240929b9ae6255003e60c353c25db237fad367e5
- SHA512 e4605f5f10ee117815107cd8f2d941ae63982e61dcf468a400f91e2d24885301c78d8680a4d98c6cb5ae02eda73336b84e8d928a805ac515c0b3f088e3aa5fa4
- TLSH T12921FCF3392057789F69C7943F38B9AEDAF384CE7C84D5C6D05AA04D01DA27E4461680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 1ceef861dff8a0123ab975f8a5b39fe12d6d80cbe0d49d38ea7730c95338febb
- MD5 e5dad0ffc865b97b58dd666503b2bb5f
- SHA1 c9b0395e2a73488a2eed1d9de9906732704d267b
- SHA512 9ae1281faaf7a2c2a6ef680603a7b62eb6613e6d72db58c908af66b3b1a54a32656e81bfe6bea3bfc14ad6a3c4475f43e20d6597180327f88ee4039226faeb70
- TLSH T10221CEF3796057389E69C7943F38B9EEDEF384CE7C8495C2D05A604D11D927E5461680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 f5e6d1ce12c1e687e59ac891d0bf2281ea9ac48438b6b98aa5d6031b3bc54a04
- MD5 416c86b9bcd38ea23adedc183660d52e
- SHA1 98d92efbbd31b7cb36d95d6b41c883b509b56744
- SHA512 cbcef8e22804518321959c8956ad7c7e90ba70b2f1eb4c5c5dbe600f960ff4fce76bfa171d8c1beee23a6c1e399a15909982e7b1b3c21964a35f78afea28fa45
- TLSH T12F21CCB3792057389F69C7943B38B9AEEEF384CFBC8495C2E05AA04D11D927E44A16C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 ee9a410cc64f95dab102e49b72a7bd1333e46a5372c0cb689d737669670fd401
- MD5 e95b44449814702eeabbad6025046fa9
- SHA1 42f45f5ab8840d2bbf7b5135e2d830b3626c00ec
- SHA512 156c8277af4548193c827faf80f807ee8c42f4a80bc6677368b9da534fddeb02e49817c45944ed75d9eb98f375175cb0df34ed0c43ef581978d5fc9c16b03346
- TLSH T12021C9F3752057389E69C7943B78BAEEDAB384CFBC8499C6D05AA04C02DA2BE5440680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 f1fdcb1941299830914f51cbd88274b7fde71badf188305c2cad94e71a21eb92
- MD5 05432d4cf5337f477eb240ea54992e05
- SHA1 ba92ce99f132c17f9011b0eec2e145250b15fd62
- SHA512 01f4d6f76ccb42b46e9dc0c252045e758b724fee6bb9411032634541c358b90bf64bd44519fb2b72f0d9c0b2a7cda0dbf07af70e4d9364d84e1a38e77d7ca91f
- TLSH T12E21FCF3392057389E69C7947B38B9AEDAF388CF7C84E5C6D45AA04C019A27E0450680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 37d57852a27b330fbdff9f0e36314322ab31de1dd523bcfa92bf41c24d99241c
- MD5 c80493774ceea8c93c02ab918ec4e2ba
- SHA1 0ec99162460295096b5751cfebaa1b104f71e8a7
- SHA512 cb4e84806c9e0bc8f2d6bf2efe70c613594a77faf2b1264cf805f325eb4da1c3c2dfe06d1fb2b4c3d8a4e98b8ccfebe1a956b72d84f1b379428de00b0354819d
- TLSH T15F21CCF3396057389E69C7947B38B9AEDAF384CFBC84D5D6D49AA04C119A27E44506C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 200B
- SHA256 58f1d6e55a5dc43c4781ff9129ab3ceaf2895ff82b79b1d0c9830a0fa4ac221a
- MD5 f45996b98d7dfd438ac2b41d4802160b
- SHA1 d322fb082b104317effca8959ed5e1820926638a
- SHA512 602283f39fb93d9579fa4acf27f8e4d785c410d0f86161ce6d3b081b062f1c33719e4abb8accbe02d4cbcdbbbcdbdaca17f1fd8f91f03eaab80ffa0b1e2b3f93
- TLSH T115D0C02773A03868DC402CB4F4E97B2E0C0783013C00727C01CC308C08D3AB5578DE20
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 3d7f92784229c910b244cc873e73c8d79bf71f32a94736293864e69724b947ac
- MD5 9165a8c07285473eb7b03c67fbcd58b0
- SHA1 2bc0aac72e70c9db78c9142c77b741a8ab65cc05
- SHA512 45c882a6a991bf84dd7867386346c7dcb48013fcf1fad16c0da32290c4e98215856826a1c87a9a56b1cd0dc567f3fb1bb7fa634b19a4e6ab4cc2f40da337046e
- TLSH T19921EEF375605B289F69C7D43F34BAAECAB384CFBC8495C2D09AA54C01EA37E4481680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 64cbc852fedc22dc23f4cddd8545a62d8f4b85763481317857c1523af173d092
- MD5 42552979b5e46ccfaeadb4c60ea90367
- SHA1 faaca7b95c90240bb534e31621eda184d4476318
- SHA512 369bc5e95a07319a9779569cd7fe7bfd90cc7d45b8f962ee20e86e9c6fe3e9a65f76be9fe3566a0c7b747c30b147524fcb678c345f1e1b31587f849e5f054d97
- TLSH T10D21C9F3366057389E69C7943F34BAEECAB384CFBC84A5C6D09AA44C01DA2BE44416D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 b8eae9c1396b54426d8cb816eb49311f9b0720dd26cbe1d5f56bd567bacff44d
- MD5 e04cb49f948bccd1941d07b3f172f3ee
- SHA1 c45d3ab8c19020fad0d7546b9a9d6cfba15a1a69
- SHA512 a74a3549371e1f0dc5b493c2bb7fcaf63d17b96d81fe5328a9e458d3707d06704fd2fcf40942a5b827d97742318421f3baa6497aef5e519b29195b16e3665de7
- TLSH T11821C9F3756057289F59C7947B34BAEECAB384CF7C84A5C6D09AA44C01EA2BE5480690
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 434B
- SHA256 d2dc4247283b8d603121227ddf0b53c004f007ca653687b14894c566a1403ed0
- MD5 434871028235a59b94752119caa34a84
- SHA1 7648fdab16389c50a873b4a59d5536c8d9832198
- SHA512 50d841a264a9acaa7ce6e823dbef20da1a092cc932f62b9627ba5c14cfd1479a2d2523e9928fba2ff8d3b62382023b65969754fc78eb0686ca0fd7d3b2448a4c
- TLSH T1ECE023913D645258CC998FD4FB997F7785774486BC48B2F551CE645C00B272E1116711
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 e2fe0b10a9884212e4cd877c25bfec54d38cec357f9f746b07b66c6071d372c8
- MD5 1a24111500bb747afd9609ad89f48736
- SHA1 37913d310e8ad65b4643edc73cba895ba14253dd
- SHA512 b0ca9442ab24ee38c1fefff2040982d1e8f6f2438fd7ec9651301ac0f8f07f066d33b088662976744fba7ee54f69aa055208ea4febda2f8e5d753d926dda9ee2
- TLSH T17B21FCF3392057389F68C7983F38B9AEDEF384CE7C8495C2D05AA00D019A27E0450290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 992B
- SHA256 6ac5347e98383b42820ba6c81b3b2f173a0a7c3ac2719a0be2ef6f1a86b63cdb
- MD5 ea3e447f4de46de7975acc3fdb769e25
- SHA1 984723b0fb4d54f8534a720a668a1bab4cd7f312
- SHA512 2670c488fefd05ea4143edbc4207056095ddeb7afe964c3492c8105421d62617762bd4b6692bd57bd87d2a840f43743e3f82387855379f73a8bb97a64cee338a
- TLSH T1F31121F3742057388F19C7D5BF74BAEAC6B788CF784899DAD98A640C00AA23F1001741
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 ffcde473e44cfd9d299eab880773b47ccb9edc7580fe9d32e8bbf5ac55cdf9e3
- MD5 874ed3416129ab1b5a9709411901a1af
- SHA1 2d68f5efd07bd11d54b57dc73354c643e8f1ce6c
- SHA512 415e816f3a17007c30788e44adbcdcf7a6ac74fffa039b7ff7457c48c32a8177b1b90d456e3c7a72017c35a9df936ec24750c6f7a014d66664df4d3a7b50628e
- TLSH T1F8211DF3302057789E48C795BF38BAADCAB388CF7C80D5CAC98A604C019A27E1440680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 802B
- SHA256 3b57386256e1c99fe7b041956d1021c6584092862b0e3b14b82e0e99bbc3d7df
- MD5 7b1c4bc1697747fceaeb82eb38e568a2
- SHA1 790f98b10b19b6cf4c927867ee6bae5dfa268b70
- SHA512 f8cb2cdb369e7a7bc427fe27609ed56ba2ff96001eb7566e62952c3fa5de62236fa07a96a0186e60eaa1ad48e26fb032a8cbd1e0121450306c31ec493224af4e
- TLSH T12B01F1E2355567784E49C7D67F78BAE5C1F78C8FBC4495D5D58E604C00EA26F5400750
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 a80a28dc1b4a09691f5a21026659b4272ebe94a7f449dafd12fe430b281059f1
- MD5 2382b6a480cf95fb22bd45c8aa74c942
- SHA1 5ce1b7ce2e52d86163beab14865f16f0c5073772
- SHA512 9c1ae99b9e6e80970cf69750d5d5b82b4ac2275e4e3f2c485462b6976438e0cb436c0a1b8f3616c616d8301814c4e087e7a1205cb36c84e3f9b11430f4987105
- TLSH T10721CCF3752057289F69C7957F38B9AECAB388CF7C8495CAD99AA04C01EB27E4440680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 527B
- SHA256 22d40036da98c413c4cfd75a359bddb0bca6d9fcd1aceb84bd8c4c4b23a54e21
- MD5 f31982921c2584554911a96a30d703e8
- SHA1 d3f769c3153ea254835b8ade7c3ea6ce73ec8197
- SHA512 59114daa7b746f477a480336c37518f8cffeb64a3f85de1c71e999b9056003c6162ce3543718ee523ab9cbdf80b948229ca2a570e9776dcf75f350f395352116
- TLSH T1E3F005523834122C8D984BE5BBB57F7581B784CBBC05B5F4808E706C00F673F1406710
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 a11c3432e91d57852eab7d6faa5690b6f4d9e80e3e909bc15ef2330b984fbba2
- MD5 a4ed52b00ee1953907237f17d4a8a812
- SHA1 2c9ab12cda7b2bb3feb725c703888edb9064c8f1
- SHA512 a172692d1390a6b6e32218977dbb42bc2531d3e82d3b36461a465d513ca4c53ddeb100ecabb4c45c26fb3e79e59b2b7c135a119c10275906622786ae79bd3fb7
- TLSH T1AA21CCF3796057389E69C7943B38BAEECAF384CF7C84A5D2D05AA04C01DA37E5450681
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 b64f010798f5c97408babbd80cb483f5a82ad1374dd535ad3cc84a6f9d132c4e
- MD5 564307c5af4e5cb5e3c38cdfc079364e
- SHA1 fa769f570e5e9054798e0b5fd38b82a3f81d029d
- SHA512 7fbb1b2fae27fc687738092b51918a34cb9441e2dd389fec44975754bef1575d3d1506f4e6886694642fb2e415d99a242338ab6d99ed95ec3f3461087e636851
- TLSH T11C21FCF3352057389F59C7947B38B9AEDAB388CF7C8495CAD45AA04C019A37E54412C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 0c6ab5b5a46ad5126cddae319a404b72f3703dfd885d51175f182000775f245b
- MD5 8274ebc4fae6ee95bafc5575a859b2e6
- SHA1 827a9e92526550d317839b8c2074c3a97773b9e1
- SHA512 c409cc1b46fd26210fe1167aab4957d71ea827ee05e94b5e292a42551297353ff9cef9f26bf0087c3d6c5cbb560b98477bd2471a548106b9bd8ddfc79c99a2e6
- TLSH T1E121EBF3756057289F69C7D43F74FAAECAB384CFBC84A5C2D05AA04C01DA3BE5481680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 cdc628cd3804289ac6bf0d1cae5f83bdecb71a417365f687e175620c0ab88b4f
- MD5 e1f0dd000a33753acada560bc5d849fd
- SHA1 fe923e99f29b9d10cd166c55e07156b7f1973984
- SHA512 de7947068b4cbdfdb8abae1c89fd5289ce3901c8f533052f9e2335924c51da454778e06062e72189aafb8d6c697337f81cde3885a2e8a6e639b2fe64a0c41efe
- TLSH T1AC11F0F3342157289F598B99BB74BAE9C6B7C8CBB84498CAD48B644C00AB27E1041681
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 e53e546a62e993f3977506fc2b95fcc76cf6f1dd82fb4996974c31ac313a6fcb
- MD5 0b5534534c64ae6605975181db107bdb
- SHA1 133d85f23c87b135693eb29883e9926c7fb2be5b
- SHA512 0c494ed6f8d33c6228d99717fd4f78f6b4045f8b192b89d58a34f6c4e8d65493e7032424bbae7dfb965043faf7e467d1f2efb8299c34f3ea04d4354a6f85f2f2
- TLSH T1E521FEF7356057289E58C7957B38F9AEC6B388CF7C8495CAD89AA00C01DB37E4480290
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 434f08b43a1b9413529ddb22acd047b31fdfe691cb7a4f2e0b4e1f7a69fa1bf6
- MD5 d0e0927494f9e8b3e308e809bb32dec3
- SHA1 ff57f51437d9e6b002b4c2e78323d08f9f5814fa
- SHA512 e28f9c22ae8b84e7a7d90241942adbd59acb48ba9d6942b67232eab87c23ecc8c933aaaacfdcb58b1f7b576e5b5a29a10063f73516ffb52a3cc31d8fb748348b
- TLSH T1492111F7746457289E58C799BF38F9EDC6B7C8CF7C8498DAC94E640C00EA27E1041281
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 896B
- SHA256 4241e3b5a630b52e29231f5fa7d685852f0ddf53226821d6ebb9a00b13ab30ae
- MD5 08bae07434b211013a92235a88da0f5b
- SHA1 bf04a39383fca5671ac3fa670a7f870e338def76
- SHA512 95bbd050351aef173bba38cd4466b5afd5a081a8f3cbbdbb87ba37ebeed4d03ff29608645a4b92d1e86f226454ae5ce2d404f1e2564e6dd47310332b9915cf53
- TLSH T18B110CF3386457284F49CBDA7F78BAE9C2F788CBBC04A9C9D48A604C00AA27F4400681
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 be05dba3c14e5b1395bf3262280fe50274b77bff28fc2bede0267466dc737512
- MD5 5d6de925ce1e04d85416bb72cb58de8c
- SHA1 165a630622e4f12a24196e420681fbcd72566ce5
- SHA512 64374911bb2dbf836a4b109f3f6c921f6ddbd51e89f98284ede5058ac6acd5ca9ef93390a4fceda8adb10813265545c9bd28a5ddef6781ef9728e0aac8a7c62d
- TLSH T17921CEF3791057389F69C7943B38B9AEDAF384CF7C8495C2D09A604D01DA27E54516C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 625B
- SHA256 830e8c4749bb239020058b0487c64eb91ff5e8ed78cf0912e26cc9a0811613ed
- MD5 1c65cfe1e9f2f684fcb313b9feb1c674
- SHA1 eb2d7680434aff4b7e99609ecbdb993798322bfc
- SHA512 d9abd7f9c4746ad6903b577231fe916dbb51adf12ec1536ed03d0ff6feca2c7e829cbe7612576a5f174cd1f8d44d96ef36bb74e8283e0d7f53588f6510b44895
- TLSH T131F07D923920667C4E858BD5BF69BF95C1B7C885BC0475E5C58A609C00FA62E5401650
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 8880954d90f336bba15b993f355f42a87fceed2410623c684f934a41017bd5ca
- MD5 ba12e1cf944ba927c1aa558cb28bd95c
- SHA1 50a2a7ccc835f8883b79f85e792a84bf4b4633b1
- SHA512 2e13f2f8c8d85932994d4c2e9640e609eff65879f572dc1b15672f75f3ffa96727fa1c24811a54e8b9f22ae850d14ad5a535fe59d03e717af3be0f99d6a83c2c
- TLSH T19921FEF3396057389F69C7943F34BAEECAB380CFBC84D9D2D05AA00D01D927E4450680
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 6e54c48a4f4c057a2538d67664b1b6c3b3bd3f51cd02cf5225b0246d40d3024d
- MD5 98f47338fead5084efa039c7e648c35f
- SHA1 9fc8b9108c7556c7e4c720be8cfe4434019020c5
- SHA512 47abe77a8ab9e78c25def2cbb86dc69a8f378d57e53389a0670b798220bb17aa1314106cc8d085f4976e4346048d88b7e642be426cc152fbb174b11d62e02882
- TLSH T1B821C9F3352057289E59C7957F38B9AECAB388CF7C84A9CAD85AA04C019F3BE54416C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 9bb4e20b32e6ceb8206a87fe04ed0b832203d19689b7cf755dd82337c01a5222
- MD5 30d20647a24d637b0254cda820ae9dc7
- SHA1 fd640fd1c3ea0f67c78617adab41d474063c55a0
- SHA512 2f2ecb42d90c6a02e347741bd06aec92cfb3b1b7388b7dcf4fded28de0b52864ec4d73a8492c3ce45fd3e39bbef6f980c8be0251405f6b2252bfa39dcd63a510
- TLSH T1C221FCF3792057389F69C7943B38B9AEDEF380CE7C8495C2D09AA04D119A27E44502C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
- Size 1KB
- SHA256 919851c30d94ed9c9097fbbcd9f255d4298ac37c1064391b34e9deabfb2f64bd
- MD5 b31abc277e3abacece0e16b21813d580
- SHA1 15633e2a537d952321c78f1fd581ed7a1faae9d0
- SHA512 23f09ad89f48e01185090262a93a463b1dfea039d0df79d076931416a1c97ade26fbd0baf88a9793aa9963613ee4bc2a232ca2bc39f3521af9228bb9263db8dc
- TLSH T1F021CCF3796057389E69C7943F38BAAEDAB384CEBC8499C2D05AA44D01DA37E5450690
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 2KB
- SHA256 adaa9d98e3508eaadf8afb80f4f61d4f42b76349f6fb54d1d25ebf31b9b03d24
- MD5 5d10b3e55d06c9102057d5bcd4751bd7
- SHA1 20f8a1f4fd43d521c25d57fb50c51b81b1a45898
- SHA512 4db4b155e1e843dda5285f7b1885a5be306f63909482b197e7d6dedba18ad8c61c7fac1cc12d29454c655a5c258de1e23127e9531172538c41eeeac222f11e08
- TLSH T13E51B572A8744D2312B3DA5DFA163B83DF620027E2542A98D2E90F0C25FF6AD0713826
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 3KB
- SHA256 e359e8076c68fd807ab33daad755a1270352f83d6d62c9166ce6893f3d1af5e3
- MD5 17d271ada850af9cdcce7b5d9b28c662
- SHA1 ec018295ba86c16c5500d57c4593c0953389002c
- SHA512 d6e5eeb7f6c216d7fbe60312d93496f53e463d0f2fc97a78d8658c94ee2dc71e4072ee506927b45c073ef95cf5bdc14d356ef78295b772481869cb92f33361c3
- TLSH T18961D672A8348A6311B2EB5DF9163F83EB660017E6542ED891DC0F0C26FF6ED0613827
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 dca74f2dc1d970a7fc1c5812d8261e05c87dab32041d4956c723ce23a2065120
- MD5 28c061f8d8c2a99e0520e93defe62869
- SHA1 f714b690579e74b6a22ba37865d33d3c202360f8
- SHA512 462739da190e4d2294fabefabaaebb904ee7d247eac6a7529351f73b66196f899125da03361265c48ca3f6e06d08e8621f3e015a058572f3d2c54e4c0b415695
- SSDEEP 96:NJzqCkW0GxV8fBMDotonYQATgjhK0iZnf7vzjgW0ja:NFOfGxhDURQCahY5g1m
- TLSH T12BB1E8BAD829C92B66F7CB59F31A76C2DB15411687201DC54BC80F0D83EF9EE218342A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 62e3344618f3b43dd0f7807ee2c63ac04e952aa20201f3fcd4ca1d1546a8ef18
- MD5 5d78ed41e34fa25292a846928e4fb31e
- SHA1 5a728bfd7b027e35d014f2a1688a4d976521302e
- SHA512 3e8b56b385752505bd9a9139cc2c07f2f5c8dde9156d938ced322da606fcaee011f366d314f0323e5f162e87500d23825bf6a3a9769b7f1e01e705923ac67cbc
- SSDEEP 96:NJzqCkW0GxV8fBMDotonYQAv+Q2gjhK0iZnfhzjgW0ja:NFOfGxhDURQS+Q2ahYU1m
- TLSH T1C8C1D57A9929C92B66F7CB59F20A7682D715410687241EC58BC80F0D83EF9EE218242B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 3KB
- SHA256 03900f5c0af011319cf8c224719a8a46ea3541355029a586ea83efea7a255cbc
- MD5 6fa606cbbc5723ce11221c39c97378aa
- SHA1 82cbb47b63f519316342407b4ca2fc6884bffbfb
- SHA512 a6a063bb635d4bfbbad8402162eb4173bde833efe76df1a41872ee564bc571c9236e5b65ade2dc3b195977b5c04902b9a892e4a31552752e754148bdf15d78db
- TLSH T14B61D77268748A6311B2DB5DF9163F83DB620017E6542ED891DC0F0C25FF6ED0613827
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MEIPreload\1.1.0.3\preloaded_data.pb
- Size 8KB
- SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
- MD5 a01c788456b7771739d0c770da676ea8
- SHA1 23b67e6618949c08a0a214d920fbc9779bf89377
- SHA512 9846efd14ec46154b7b80b89e08b30bc8f82ca1b11bfaf19ebd4f1f32b3f44fbac8ea8c33203070c4414cbab9d727d2ccc4f1f733b64cbea880c0b516a16a8a1
- SSDEEP 192:/8bnweeDe4NkGNXDsyEsR6R6Oh/CU3y5M1ZJ8jmmOd:/8bnsa46GN1eRv/RR7J8jmmOd
- TLSH T1EA029F068E4B3E4F0D1A964D49863F56373B216751C54C8CFF9B992A4069761B0AC89D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\Google.Widevine.CDM.dll
- Size 2.7MB
- SHA256 cb190e7d1b002a3050705580dd51eba895a19eb09620bdd48d63085d5d88031e
- MD5 477c17b6448695110b4d227664aa3c48
- SHA1 949ff1136e0971a0176f6adea8adcc0dd6030f22
- SHA512 1e267b01a78be40e7a02612b331b1d9291da8e4330dea10bf786acbc69f25e0baece45fb3bafe1f4389f420ebaa62373e4f035a45e34eada6f72c7c61d2302ed
- SSDEEP 49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
- TLSH T1A8D59E03D68300C9F459C8B5D7A6A536D5703D4A4704EBEB9B60B7762E73FA09B3A309
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\_metadata\verified_contents.json
- Size 1KB
- SHA256 43daa4139d3ed90f4b4635bd4d32346eb8e8528d0d5332052fcda8f7860db729
- MD5 3e839ba4da1ffce29a543c5756a19bdf
- SHA1 d8d84ac06c3ba27ccef221c6f188042b741d2b91
- SHA512 19b085a9cfec4d6f1b87cc6bbeeb6578f9cba014704d05c9114cfb0a33b2e7729ac67499048cb33823c884517cbbdc24aa0748a9bb65e9c67714e6116365f1ab
- TLSH T123312BF9B981F25B79163611A1B66C31770FB0E238A0B05169C865EECEC4B03E0B3007
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1704\crs.pb
- Size 301KB
- SHA256 1ef31ba62e4e5a5cd3453a6481b1a3dae3ed34f246b2642a48d7e7fed25d9956
- MD5 2556bafa40d21ff202cf05825f601141
- SHA1 535a32117a2ababf9fcbd654a12f8f2d6e896573
- SHA512 17271d0b08093cc79921e8256d474fd365c3788e9f5c9f376974fcbc44f448336a7fcdf2f18581a80e1579fd0c77e6629e8309852d3c14844ae6043b16e5d0a4
- SSDEEP 6144:eHJ2ZpNiFvVYJTc6HoGpFTyzzStk06xrWtefZhzSVs3LowNZ/9:u2ZpNpBhpUzStaBOs3ki9
- TLSH T1FA648DDE0F3878436FD3DE54B1C8D43BBDB576D17AAA54829049C4F269827E17E8802E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1704\ct_config.pb
- Size 57KB
- SHA256 0449377fc3713427d3c401dca2a07ddf06c492f56aaebc46d4c1e760ed6ca757
- MD5 8e784e7332c6afa6be16062a06ce3028
- SHA1 3fa38e164e63b5209334bac5d0be7ad77a2b7f4a
- SHA512 76deefb44e19afe8221a8190f64a68211435fb906f93f7c2dfaec0a9755c6bd64f32e8f801b0424cbc80a0545e2f3ed2c89ab143814f27d4a97324f5c40379ac
- SSDEEP 1536:er8wtb4i9Myh3zp3nYzPVJY+0v+GVsuT55H0Bs3xWaiA1:HPDY+E+GvT55HusT
- TLSH T130438DB771149F110B839159F1E93B9E9203B3E9DCF3DA3FA2E18004F7402A6619D67A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1704\kp_pinslist.pb
- Size 10KB
- SHA256 7ca99fe2e5da8309102657b8e727f2f1327f00a64c3d7aaa771e64bb0f1dbf64
- MD5 361ddc617d76d1e56ccd432a1c59e3af
- SHA1 a3e6752040735126c7c89a7a7328108f493b8219
- SHA512 5ce7c8cd709d76d15a211a06e588748a7ab100b27533a0c47bbe51a95467faac9bb4248ddc9bbbb270ff468443b0e418b8a7708845c501119caa4513dfd47489
- SSDEEP 96:wxk+yBjecaikDBwrXnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gKn:X1IDCrXnYQ5jlMacFwn2c9S
- TLSH T14E2203B37904F99350E7E0BE1001F59AE93343A540ADF98A528C4A7635F1F0729BB0EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\SafetyTips\3091\safety_tips.pb
- Size 180KB
- SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
- MD5 ed136d4c105cc252f52bceed4b36ee35
- SHA1 2a3115d95987d638d9095af51f0a70c1e9893728
- SHA512 7b7cfc3adf944628b0ef6224229f7def0543cb7d41cdc8bb6b2ad5be2338a0173fbe63490f8d742f4c006e88652d191e24b4933e459f03cea2570085b95297b9
- SSDEEP 3072:2LHCaFAH1Z2dUZ7ViebPO8B6wAppi+NKfDRdwt20xrFzg7NCmDAsf6B9D:7lVAdkXPOaRdwtzre7NChsf6B9D
- TLSH T11A043C49F84703A06F0780C99BAD62972104B2F47395CDDFB77FB6A56E00C9B20995BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
- Size 151B
- SHA256 a680dcbf706b9c47b5446f1f1e4be883b84d8f9d86b8f6eb30d88c7132875e3e
- MD5 c019fb4005ebfaed1360bcb497743a8d
- SHA1 b52350c9be1c4ea7f63d62750dd6eda39dcaa34e
- SHA512 afc679bcd1f686a0b2dcd2993ae0b6072dc1120148182ec3407f7a533c5d9e2f8771372f40ed9a8682acba8f9e098993e0688d76b4699b88fc5aa13cd9b336f6
- TLSH T138C08C0A0242080BC0D28688A0147ACDC2D97606CAD6DC1A23E40B108B85ACE74F2010
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
- Size 151B
- SHA256 6f0795af609c873202b3c6ae844ca1c66fa236b007c6027cf63f47073a0c0a3b
- MD5 588ae25f7324b78de0cd198e51b40e5e
- SHA1 3374b4fc47157a69b883a85b5e99b61e20bb11e4
- SHA512 1f921f659e99c421faa6a845bd8f83de63e8be4ea0adefd145594c82ecf10b58d795658a5969503c7c4f08d218f8837a62e202727a10e53927f182daa7720b60
- TLSH T144C08C0A0242080AC0D28688A014B9CDD2C87606CAC6DC1A23F40B008B85ACE74F2010
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
- Size 151B
- SHA256 1461e10bfbc9a713ec3acd046f6a971864966c78ada6317e24876fe1ad21904c
- MD5 a90a4ee5e406a5ee580b30cbd13e0209
- SHA1 02e0291ceaa411036b93815dd0d395eb4460dd88
- SHA512 cde357987bb9cb217b4b30f5369d17406b3908da94c75b28ca555cee00fb6e403a00e8c95359d0a3cf170a3bda959e4d612ec4c34456be37e59ec0367221d871
- TLSH T143C02B091103880BC0E2CBC8B0147DCDC2887A4BCEC7DC1A23F80B008B85EDE34E7050
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 684B
- SHA256 c9a591218b6a10fedfd1b1415620618b4cd7aa607b8cd025437ae73cfc1b1448
- MD5 3911402e0ed04cabc04a066748c4f9ee
- SHA1 e0f18e77468d444284764db7cfcd88dbd8bd7066
- SHA512 1346e60cdfe77a4ae5b7e5838f2521eec677ad4117a4e8d07845c5728be1ccbdeaddeb89055b30a0af50c3df95c4f10002283a0004a3f9f420d6cbfc139314dd
- TLSH T1EA01FED7494E1BD207811E1F649270B9CA69BA59FFB2653D6A50B601473A1AE3001CBC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 348B
- SHA256 fbaca5f78da57c738243f4bcf5943645ee9c6e4e56458c8f46ab1bcedfb0731c
- MD5 fece1502d721b9970a7bf9cc16f1c150
- SHA1 decce6548fa7a7d81d486b0c55799b24ce745af7
- SHA512 39ad10d000a8f2c00130f5b0bdcf13bf5df3d935f8eecc55e683e2941ea7a6c7efdb83f9d51dbead804d71b78a2807b5a4f35b3a036d7fa5a6456dc19c2a4738
- TLSH T14FE0209B48CE1BC457021D0D65516474D7696F15EE73B57D4892B11107392BF1098C6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 236B
- SHA256 c66636afe28ab8e6b709d8c9d0c663dc7e989dbedb8ea0264dbf35138515d4b4
- MD5 e2a34204dbe4725baba9fe1066c11a83
- SHA1 24f337781efaef7a08d8da53b5d7e85e3ab6460d
- SHA512 ddfb56cada7fc6e530456ce6912ca4a4ba6bf5d633649e616784b5160cc061e1ee0cd9b07ca7002aabb78485f8260c55da424df5ce419354b811e65b7df0b413
- TLSH T1A1D0A7A75C8F6BD82F021908595251B4CB596F58E973A87C48C2B211073D16F108CCBD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 124B
- SHA256 42dc5689279765d5204eae760cb625510863a8cec862a2375f042ad1b5819351
- MD5 739852462e1f6a4d3c65830c283d3f10
- SHA1 8584453451d5da265e49bdec6aaeeaa562385da8
- SHA512 f1a39ec5cff560a9c968b4cd4708f57b57ede5b1e366e3640fc2b593a9c1e3917a1259d8d2f6f9fe85dd08611b10cc697db93f32e6d7aa3158e35bf9785356be
- TLSH T12CB02B12008B2E992F491408E41290F0C7801F08A830893454427300420810B00889FE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 796B
- SHA256 0b822bb7150fddc63ffcf067370de16729cecac88042010ac5bc0f062ea5d7a2
- MD5 df1608f0024be0b1291bcb03058034df
- SHA1 94cb839dc88c614df81ca4db04ab05a60a49709e
- SHA512 8e3cf2cde3cca1f9b41e59eb46adb34bea02a3096cdef8bd0363a93d8ce4301c9e6ea5a4f6db595e15594dbff0a789124ee77cb69e40eefae2da454d20dd15b5
- TLSH T18C0175C3090E1BD10B841E1E245274FDCAA9770EFFB2697C1552F500073A0AE3401CBC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 460B
- SHA256 9e7fdcf0a3e68b62cfe11fa64bc05bc1b3a44125cf925f9339c2b2ba8be6cc9d
- MD5 bf8ec5fe88d0b27a251c4d8db4cd4a23
- SHA1 71be69f5a9c3583513d2b1d01c3ba8219b563681
- SHA512 a0a4d1c941f6ebeabd6e3949eb8811d9b75ba5eb220fd4f8149e85a44573d46b5be547539aeb3cf5c39756a12b3d141d2a0448476388328d3c6cfefed9995a04
- TLSH T16BF0DCDB488E2BC41B420D0E5491A178CAA97B15BFB2743D19E160000B3A1AE2044C6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 572B
- SHA256 2bbdf9b084b4c640228323b1acf879ea12381e76d81415d7cdb328d281177901
- MD5 909ec8215523074c4aebb59bfc455d81
- SHA1 6b89a5a1562f524aa5f9e85c551a8f39bfc14b77
- SHA512 1d414dccaa6f885b4847857b8f70db85de0936c9e98166de45c9145f2a328c7631b25bc7ed675b05d09de92b43d62df5a6cb6b3bfb78484bbb5dbdc32b1d1b0f
- TLSH T126F0EBDB0A8E1BD00B410E0E64927439CAA9BA19BFB2613C1AA0B5010B391AE3040CAC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
- Size 908B
- SHA256 335f7f506ac40af4f7d7a2d4f16f593e42343092e1136182b7e0fa6d13cc57bd
- MD5 23a886c9add4c12929709b667b0eead2
- SHA1 45d4e80374613c31b187b105933355fe7ad2ee55
- SHA512 ee150371fca97360ebe39a1dd3011c38e63f06e1f0767afe6e9dc5e5626c3438c725733780298a0754eaecedac6f7e7045a36bac83e7803c609b96c1f16868a9
- TLSH T1421140C2094E1AC207441E1E54A634FDCAA97A4EFFB269382562B140073A16E3801CBC
- MD5 SHA1 SHA512 TLSH