Analysis
- max time kernel
133s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/07/2026, 12:13
Behavioral task
behavioral1
Sample
1111-w-warp-2024.12.760.0-installer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
1111-w-warp-2024.12.760.0-installer.exe
Resource
win11ltsc2024-20260706-en
General
- Target 1111-w-warp-2024.12.760.0-installer.exe
- Size 2.0MB
- Sample260707-pdvsqaew2j
- SHA256 148dc944649f15c49e246feee7aa21695ec5770ff8bc038aa91d3a87fe68d5b6
- MD5 450e6f4caa0e59d5368b447624d6d10e
- SHA1 8257d600e2c5745404c94b4f866dd7cf618d3e4d
- SHA512 245846d08452ac1ab9da5cdbf668ca76ac59bcb0fd610fe40821e703851097c7e2b4f739e470bd95bbddbb206d0c1544005d586096ac3c724f563caecdc4ec73
- SSDEEP 24576:CXNrSLScusMmOvjjhzvL3kYVgkcXjPeynRkIegf+Sve+9Cx+gBbfWzOUxSXc64da:NuI2h7HcTeynRkfg7ve+AhrWzOUg
- TLSH T163A5D03FB28B653EE06E5A3A79B2E110583B7A6165138C5696F4C88CCF254701E3F787
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 108 1848 installer.exe - Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000\Control Panel\International\Geo\Nation 1111-w-warp-2024.12.760.0-installer.tmp - Executes dropped EXE 13 IoCs
pid Process 2108 1111-w-warp-2024.12.760.0-installer.tmp 4592 saBSI.exe 4188 OperaSetup.exe 1848 installer.exe 4772 installer.exe 4216 installer.exe 4940 installer.exe 1816 installer.exe 3016 Assistant_130.0.5847.41_Setup.exe_sfx.exe 2788 assistant_installer.exe 4380 assistant_installer.exe 672 installer.exe 2920 installer.exe - Loads dropped DLL 4 IoCs
pid Process 2788 assistant_installer.exe 2788 assistant_installer.exe 4380 assistant_installer.exe 4380 assistant_installer.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Enumerates connected drives 3 TTPs 4 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 7 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1111-w-warp-2024.12.760.0-installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1111-w-warp-2024.12.760.0-installer.tmp Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language saBSI.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Assistant_130.0.5847.41_Setup.exe_sfx.exe - System Time Discovery 1 TTPs 2 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 7972 opera.exe 5292 opera.exe - Inno Setup is an open-source installation builder for Windows applications. 2 IoCs
Inno Setup installer
resource yara_rule behavioral1/memory/1544-0-0x0000000000370000-0x000000000044C000-memory.dmp innosetup behavioral1/memory/1544-7-0x0000000000370000-0x000000000044C000-memory.dmp innosetup - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 1111-w-warp-2024.12.760.0-installer.tmp Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ 1111-w-warp-2024.12.760.0-installer.tmp - Enumerates system info in registry 2 TTPs 6 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe - Modifies system certificate store 2 TTPs 7 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E saBSI.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 saBSI.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 190000000100000010000000ffac207997bb2cfe865570179ee037b90f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b060105050703080b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f1d0000000100000010000000a86dc6a233eb339610f3ed414927c559030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e404000000010000001000000078f2fcaa601f2fb4ebc937ba532e75492000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 5c00000001000000040000000010000004000000010000001000000078f2fcaa601f2fb4ebc937ba532e7549030000000100000014000000ddfb16cd4931c973a2037d3fc83a4d7d775d05e41d0000000100000010000000a86dc6a233eb339610f3ed414927c559140000000100000014000000ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f620000000100000020000000552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac899880b00000001000000320000004400690067006900430065007200740020005400720075007300740065006400200052006f006f0074002000470034000000090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f00000001000000300000004ea1b34b10b982a96a38915843507820ad632c6aad8343e337b34d660cd8366fa154544ae80668ae1fdf3931d57e1996190000000100000010000000ffac207997bb2cfe865570179ee037b92000000001000000940500003082059030820378a0030201020210059b1b579e8e2132e23907bda777755c300d06092a864886f70d01010c05003062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f74204734301e170d3133303830313132303030305a170d3338303131353132303030305a3062310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3121301f060355040313184469676943657274205472757374656420526f6f7420473430820222300d06092a864886f70d01010105000382020f003082020a0282020100bfe6907368debbe45d4a3c3022306933ecc2a7252ec9213df28ad859c2e129a73d58ab769acdae7b1b840dc4301ff31ba43816eb56c6976d1dabb279f2ca11d2e45fd6053c520f521fc69e15a57ebe9fa95716595572af689370c2b2ba75996a733294d11044102edf82f30784e6743b6d71e22d0c1bee20d5c9201d63292dceec5e4ec893f821619b34eb05c65eec5b1abcebc9cfcdac34405fb17a66ee77c848a86657579f54588e0c2bb74fa730d956eeca7b5de3adc94f5ee535e731cbda935edc8e8f80dab69198409079c378c7b6b1c4b56a183803108dd8d437a42e057d88f5823e109170ab55824132d7db04732a6e91017c214cd4bcae1b03755d7866d93a31449a3340bf08d75a49a4c2e6a9a067dda427bca14f39b5115817f7245c468f64f7c169887698763d595d4276878997697a48f0e0a2121b669a74cade4b1ee70e63aee6d4ef92923a9e3ddc00e4452589b69a44192b7ec094b4d2616deb33d9c5df4b0400cc7d1c95c38ff721b2b211b7bb7ff2d58c702c4160aab1631844951a76627ef680b0fbe864a633d18907e1bdb7e643a418b8a67701e10f940c211db2542925896ce50e52514774be26acb64175de7aac5f8d3fc9bcd34111125be51050eb31c5ca72162209df7c4c753f63ec215fc420516b6fb1ab868b4fc2d6455f9d20fca11ec5c08fa2b17e0a2699f5e4692f981d2df5d9a9b21de51b0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414ecd7e382d2715d644cdf2e673fe7ba98ae1c0f4f300d06092a864886f70d01010c05000382020100bb61d97da96cbe17c4911bc3a1a2008de364680f56cf77ae70f9fd9a4a99b9c9785c0c0c5fe4e61429560b36495d4463e0ad9c9618661b230d3d79e96d6bd654f8d23cc14340ae1d50f552fc903bbb9899696bc7c1a7a868a427dc9df927ae3085b9f6674d3a3e8f5939225344ebc85d03caed507a7d62210a80c87366d1a005605fe8a5b4a7afa8f76d359c7c5a8ad6a23899f3788bf44dd2200bde04ee8c9b4781720dc01432ef30592eaee071f256e46a976f92506d968d687a9ab236147a06f224b9091150d708b1b8897a8423614229e5a3cda22041d7d19c64d9ea26a18b14d74c19b25041713d3f4d7023860c4adc81d2cc3294840d0809971c4fc0ee6b207430d2e03934108521150108e85532de7149d92817504de6be4dd175acd0cafb41b843a5aad3c305444f2c369be2fae245b823536c066f67557f46b54c3f6e285a7926d2a4a86297d21ee2ed4a8bbc1bfd474a0ddf67667eb25b41d03be4f43bf40463e9efc2540051a08a2ac9ce78ccd5ea870418b3ceaf4988aff39299b6b3e6610fd28500e7501ae41b959d19a1b99cb19bb1001eefd00f4f426cc90abcee43fa3a71a5c84d26a535fd895dbc85621d32d2a02b54ed9a57c1dbfa10cf19b78b4a1b8f01b6279553e8b6896d5bbc68d423e88b51a256f9f0a680a0d61eb3bc0f0f537529aaea1377e4de8c8121ad07104711ad873d07d175bccff3667e installer.exe - Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
description flow ioc HTTP User-Agent header 4 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) - Suspicious behavior: EnumeratesProcesses 14 IoCs
pid Process 2108 1111-w-warp-2024.12.760.0-installer.tmp 2108 1111-w-warp-2024.12.760.0-installer.tmp 2108 1111-w-warp-2024.12.760.0-installer.tmp 2108 1111-w-warp-2024.12.760.0-installer.tmp 4592 saBSI.exe 4592 saBSI.exe 4592 saBSI.exe 4592 saBSI.exe 4592 saBSI.exe 4592 saBSI.exe 4592 saBSI.exe 4592 saBSI.exe 4592 saBSI.exe 4592 saBSI.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2108 1111-w-warp-2024.12.760.0-installer.tmp - Suspicious use of WriteProcessMemory 13 IoCs
description pid Process procid_target PID 1544 wrote to memory of 2108 1544 1111-w-warp-2024.12.760.0-installer.exe 85 PID 2108 wrote to memory of 4592 2108 1111-w-warp-2024.12.760.0-installer.tmp 110 PID 2108 wrote to memory of 4188 2108 1111-w-warp-2024.12.760.0-installer.tmp 111 PID 4188 wrote to memory of 1848 4188 OperaSetup.exe 112 PID 1848 wrote to memory of 4772 1848 installer.exe 113 PID 1848 wrote to memory of 4216 1848 installer.exe 114 PID 1848 wrote to memory of 4940 1848 installer.exe 115 PID 4940 wrote to memory of 1816 4940 installer.exe 116 PID 1848 wrote to memory of 3016 1848 installer.exe 119 PID 1848 wrote to memory of 2788 1848 installer.exe 120 PID 2788 wrote to memory of 4380 2788 assistant_installer.exe 121 PID 4940 wrote to memory of 672 4940 installer.exe 122 PID 672 wrote to memory of 2920 672 installer.exe 123
Processes
-
C:\Users\Admin\AppData\Local\Temp\1111-w-warp-2024.12.760.0-installer.exe"C:\Users\Admin\AppData\Local\Temp\1111-w-warp-2024.12.760.0-installer.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1544 -
C:\Users\Admin\AppData\Local\Temp\is-9NOZTJDXA9.tmp\1111-w-warp-2024.12.760.0-installer.tmp"C:\Users\Admin\AppData\Local\Temp\is-9NOZTJDXA9.tmp\1111-w-warp-2024.12.760.0-installer.tmp" /SL5="$5010E,848247,840704,C:\Users\Admin\AppData\Local\Temp\1111-w-warp-2024.12.760.0-installer.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2108 -
C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component0_extract\saBSI.exe"C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component0_extract\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB InstallID=GnjW1demeOx0kZlQAEt7yktGdZByj2dRFU9C25172F0Xu6uLvKuwybZCnQUcLVPFZdV2oCypR2gCUJmkqYx3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
PID:4592 -
C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe"C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe" /install /affid 91082 PaidDistribution=true InstallID=GnjW1demeOx0kZlQAEt7yktGdZByj2dRFU9C25172F0Xu6uLvKuwybZCnQUcLVPFZdV2oCypR2gCUJmkqYx saBsiVersion=4.1.1.865 CountryCode=GB /no_self_update4⤵PID:5800
-
-
-
C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component1_extract\OperaSetup.exe"C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component1_extract\OperaSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdEgbgI9VtZEQqqw9CBuPzvHYrprLPGaGgzwOsK41kaWEPqdkWYKX2qZSmFKEe92WhnuNdw9KgRvr3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4188 -
C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdEgbgI9VtZEQqqw9CBuPzvHYrprLPGaGgzwOsK41kaWEPqdkWYKX2qZSmFKEe92WhnuNdw9KgRvr --server-tracking-blob=ZWY4ZTc2MDNhYmMyOGRmMWU1YzI2MmRlMjQwM2RhNzRmMzA5Yzc1OTNlYmY3YWY1YTE1YTEyZGFmZGY2YjI0OTp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cyIsInRpbWVzdGFtcCI6IjE3ODMwNzY0MTUuNDcxMSIsInVzZXJhZ2VudCI6InB5dGhvbi1yZXF1ZXN0cy8yLjMyLjMiLCJ1dG0iOnt9LCJ1dWlkIjoiZmU2ZTU0MjAtZWMzOC00YzhjLTg4ODgtZTlhNmJhZDUxZjY1In0=4⤵
- Downloads MZ/PE file
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies system certificate store
- Suspicious use of WriteProcessMemory
PID:1848 -
C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x274,0x278,0x27c,0x250,0x280,0x7ff66ae2ad88,0x7ff66ae2ad94,0x7ff66ae2ada05⤵
- Executes dropped EXE
PID:4772
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\installer.exe" --version5⤵
- Executes dropped EXE
PID:4216
-
-
C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1848 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_20260707131425" --session-guid=5ab2fb56-0d68-4784-a40b-4b1099af8510 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=2C080000000000005⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4940 -
C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x288,0x28c,0x290,0x238,0x294,0x7ff66ae2ad88,0x7ff66ae2ad94,0x7ff66ae2ada06⤵
- Executes dropped EXE
PID:1816
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe" --backend --initial-pid=1848 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251" --session-guid=5ab2fb56-0d68-4784-a40b-4b1099af8510 --server-tracking-blob=MTliNTc1YTM2NDJjNGY5NTFjYTNkMWFlZTJkYzJhOTcwNDYxYjc0YjIwOWY5MGZmZWZjODNjYTY2YzAwNGU2Yzp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cyIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjEwIiwicGFja2FnZSI6IkVYRSJ9fSwidGltZXN0YW1wIjoiMTc4MzA3NjQxNS40NzExIiwidXNlcmFnZW50IjoicHl0aG9uLXJlcXVlc3RzLzIuMzIuMyIsInV0bSI6eyJjYW1wYWlnbiI6ImEiLCJpZCI6ImFnaVNmTmRFZ2JnSTlWdFpFUXFxdzlDQnVQenZIWXJwckxQR2FHZ3p3T3NLNDFrYVdFUHFka1dZS1gycVpTbUZLRWU5MldobnVOZHc5S2dSdnIiLCJtZWRpdW0iOiJhcGIiLCJzb3VyY2UiOiJhaXMifSwidXVpZCI6ImZlNmU1NDIwLWVjMzgtNGM4Yy04ODg4LWU5YTZiYWQ1MWY2NSJ9 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.246⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:672 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x27c,0x280,0x284,0x258,0x288,0x7ff63cc7ad88,0x7ff63cc7ad94,0x7ff63cc7ada07⤵
- Executes dropped EXE
PID:2920
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=07⤵PID:4780
-
C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x934040,0x93404c,0x9340588⤵PID:1548
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=08⤵PID:3348
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x228,0x22c,0x230,0x204,0x234,0xa74040,0xa7404c,0xa740589⤵PID:1152
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"9⤵PID:3248
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵PID:2964
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f500011⤵PID:4156
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵PID:4104
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x20c,0x258,0x25c,0x208,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f500011⤵PID:4468
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x24c,0x278,0x11fc830,0x11fc83c,0x11fc84810⤵PID:4052
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream11⤵PID:4064
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f500012⤵PID:1908
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream11⤵PID:2828
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f500012⤵PID:5076
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream11⤵PID:4084
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x250,0x254,0x25c,0x24c,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f500012⤵PID:5028
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\de932af914ba00303d4a2778a383ac9c831101e2.crx"7⤵PID:2172
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f50008⤵PID:4012
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,5216991943196013062,6444705042239391294,262144 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1952 /prefetch:28⤵PID:5248
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2208,i,1912809917954893959,8540219057203088629,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2212 /prefetch:38⤵
- System Time Discovery
PID:5292
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2460,i,5481389717454552315,17594549371302169695,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2472 /prefetch:88⤵PID:5412
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3496,i,4138876264666572503,16297801741437131179,2097152 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3920 /prefetch:28⤵PID:5924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3544,i,1626492691943392987,11593741202757025115,2097152 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4012 /prefetch:28⤵PID:5932
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3884,i,17140155479166387626,12421078303279353828,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4040 /prefetch:88⤵PID:5940
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4492,i,2941130943525052137,3110113073917826889,2097152 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4512 /prefetch:28⤵PID:6112
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3528,i,15715112028136407360,742903773634754403,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4832 /prefetch:88⤵PID:5824
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3708,i,13449288341166996745,14786906621988798820,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4944 /prefetch:88⤵PID:5276
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4940,i,12074011094681081744,67126260440103718,524288 --field-trial-handle=1956,i,6490852971633774890,1812864358111226741,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1768,i,1476921642620730527,12521057338272781591,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5104 /prefetch:88⤵PID:6364
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized7⤵PID:7424
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x250,0x254,0x258,0x230,0x25c,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f50008⤵PID:7484
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1920,i,5305285049475321999,4942759106300760285,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2124 /prefetch:38⤵
- System Time Discovery
PID:7972
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,5581352642195252681,15691084085127708891,262144 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2088 /prefetch:28⤵PID:7984
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2532,i,4947481517099459807,13770629406188487220,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2448 /prefetch:88⤵PID:8084
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2696,i,1596721829733559966,11091347320809875280,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3416 /prefetch:88⤵PID:7088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3340,i,13441066681183624946,6569789209544492201,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3436 /prefetch:88⤵PID:6176
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3376,i,10921280241674918457,11751498726201112325,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3496 /prefetch:88⤵PID:6184
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3388,i,12655006035917223767,9118637398618934991,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3516 /prefetch:88⤵PID:6192
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3400,i,14887061169327235268,8106800556344309472,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3536 /prefetch:88⤵PID:6296
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3352,i,6812140399480498996,18062823895153937408,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3428 /prefetch:88⤵PID:5320
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3364,i,6482298455635566857,4959359880827243667,524288 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3476 /prefetch:88⤵PID:5908
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4228,i,15745551613761888567,17274158228569830566,2097152 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4236 /prefetch:18⤵PID:6096
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C968⤵PID:6732
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4708,i,6232814533681555712,14435807540770471587,2097152 --field-trial-handle=2092,i,16301091531932291085,17335248475429872565,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,14398309065735076959,14419189604997051217,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4748 /prefetch:28⤵PID:5944
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3016
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe" --version5⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:2788 -
C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x934040,0x93404c,0x9340586⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4380
-
-
-
-
-
-
C:\Windows\SysWOW64\DllHost.exeC:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}1⤵PID:3560
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe1⤵PID:2504
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵PID:2732
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f50003⤵PID:1812
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵PID:648
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f50003⤵PID:4896
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x24c,0x278,0x11fc830,0x11fc83c,0x11fc8482⤵PID:3604
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵PID:3816
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f50004⤵PID:5156
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵PID:5376
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f50004⤵PID:5884
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵PID:6104
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f50004⤵PID:5816
-
-
-
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:6616
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart1⤵PID:7076
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ff9de2f4fe0,0x7ff9de2f4ff0,0x7ff9de2f50002⤵PID:7136
-
Network
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
- Size 1.5MB
- SHA256 5ec42b168f2541dbb413d6f87aa5569470a2b0c6c574c3e655242461a4524763
- MD5 7a1b6316d5d64a740b847d8261ea3e83
- SHA1 e130deed179693218679e09f0eef6fb33c369146
- SHA512 355f190eb5c83b14ea7ca19c901ff9124962a25f78ff03f1bc9f09387751f8def203e47f017ac0bd295c70ace8efbdc5f193d92d67207329aa1db4dbd0cc7183
- SSDEEP 24576:8Vxe28BXUGuG2bjI+O5IRumwloSRB0nPUa6xDuC4d+bk+2miTwX/yQw01:8Vxeyk+tWoS/0PUa6xDv40bk+BiTwXF5
- TLSH T142757C133283C031EC6211B08969DFAB86ADB4345B6148DB67D06E6ED8F22D15E35B7F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\133.0.5932.24.manifest
- Size 225B
- SHA256 0c224a50985264cb571fd2c0ed61bc989fd6ecef11c453e2582a226700d6d268
- MD5 581caa51139b45215b0ceb43ec36bf93
- SHA1 9bb3251a78b0e5e00ccf05cf0837d9dcbd51a45d
- SHA512 87a73b6d4c3f632ba2e2cac9192bb4e61e18d66ad9ec763be24d3a28923968e9ab292543ee3a8aff7256e9c21ad738742bd090a1756835b601ec270d6b0f92aa
- TLSH T1FDD02315C486314D5F3142603C5A2019426CC7B744CC608C7CFC7857FF6357891534F4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-100.png
- Size 1KB
- SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
- MD5 f4d70bc86e8544d7758742c2eba89d47
- SHA1 5df4635794ab25e2f88bcf8ec39c19a09383a029
- SHA512 d20cbd543bf97890d64c07f9e99188604f4dc5def904ad74229a3b1d9d9a06fff93af711c99a178799e9de472d930aa52a0c154f0d2953abe5ffc3cfd1708ab9
- TLSH T11811C840D668A4ECCCCD5DBAB2BC3893D7529C198049B1DB4CE1E8E38C303050976E0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
- MD5 7f69f89f11fd675b36e8de01de3c29ad
- SHA1 b91e00e68889367de138ffa5e7fb3c9de2a18467
- SHA512 06c162296c5ac62429e6e5dec07b836e6053cb4eb0291d8ed904f71cc42352c134870ed964517d2600f03fd7cf3821ee877ea83a330c9597fd7d629f9c2a6432
- TLSH T1081184F6422D2D1DF58532B16EE55FE299A82B2535D0BA425008C1194E2B512C900180
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-140.png
- Size 1KB
- SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
- MD5 a0076d9b3db9054267a7c86c9323aea1
- SHA1 22b85aeec3e3804fe1f6e91d5a9ac1c6a0153b6c
- SHA512 8fb750bddea61501f8ce2b0d0c27d29f322c9f297777f26b1401696c836c844369a9f6890bbb9827682deb70004cd98a973a0742d2d218f12a9fc3c301f10985
- TLSH T10121F84FCC2CE4E4CEDD49323C15A326A33021C950036F8A99CAD3F2876474C68B71D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
- MD5 f601df01a867a51514ea89ac9bfe9b86
- SHA1 827cf9859b7b1864236cd1f03e8aa40758285e82
- SHA512 2714e67298058e8fdad4459cfa17e2c7c67353bbfd9ea850bb403e669ae085ba579c31f7d64889470a97565719342e6a30efe2f66566783197194433aa947600
- TLSH T1DE21B45BA702048EC2065E3F4D54C81B6591FFAAA3B3DD4B265303B0A44217E18E76B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-180.png
- Size 1KB
- SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
- MD5 0a76f51f6169a31402ff7c61cfd05161
- SHA1 843a32d6dc0d5b9d97c5f475f96e49852823a103
- SHA512 7056949d7aa9cc4c96f9c13d656cfffa9f9a49ca78f6be3037cd38cc1d8712917cc235099f24723bba26fc9ffdba015480309d0418961c1116dbe7b65de6301f
- TLSH T14A31D8C629E310F9F9FC01F501126A6CD7C095D41162215B68CADDB42CB37257BB90A5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
- MD5 67a0163cd9753e42360222a17173f593
- SHA1 e4ee5c2288cbd5d354aad1905b917285a3daeb92
- SHA512 87e69e15ba6dee402dbe5a90da864136ec2c6884c204a567ad461e0181e70514f73a7df22a47de63d4829fa937e56fc4c08cb6c5268313f7b9af1e7217d81f47
- TLSH T10F313C6F5D568577E37C42BCBA7085F5D325B31C400727106F34B2983814E5521A89CD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-80.png
- Size 827B
- SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
- MD5 95a8f1834d8da00ad94c0cf2aa09853c
- SHA1 7e830e3ef55b4d7b9a18ec8c151bebb2c28f0069
- SHA512 c89be6e503c26efd4eec12c77e091570e187ff64928cab01f6f873d9ca3769f019a1724f76b57c9d4038495e29cc4106f919082913323af1ece7aff820c828f1
- TLSH T16C0120FB28489DD0CEE79271529CC55D9BC259065A80D0F7D2E9D8C05D33B49E678810
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-80_contrast-white.png
- Size 799B
- SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
- MD5 3015766c5ca769e54009f167550f7389
- SHA1 0eff02455a1e0fa1724bb1d4333c3d24329f9e9a
- SHA512 7ea7495163e0246f78f88dfd0ee72b8584108c286227d70cec9de125747f21f2618f46f7197f7cb9c0f40d297bcc3582cf70f54ebf7f9eb10941fbaa6bf0149b
- TLSH T17B010AC8D032EEA5D91788F36CA24FD59CEF42F000181B2C84A880913C030D6B03ECA5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-100.png
- Size 781B
- SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
- MD5 ef710f4543a25076078fbc1c09ec9e2c
- SHA1 e4ea1c2cb24cfff03569dab28877d11f9c6cfc74
- SHA512 fc979d06806a69da71336533d96b1cb66b227064a224e23c6f5bf9d1fe4e85a9d9546643ce296ba5f04c025284d5ca2c445c52695aae669735a2a5b48ce07a00
- TLSH T122016002E621E8FADFDE023E322C446D4725035AA706BA1F00C6F8A72EF0B4820B7049
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-100_contrast-white.png
- Size 752B
- SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
- MD5 ae8eecb8db4d20efbd816b887ef75840
- SHA1 1d0cc741d0a75e5e8ab51dd8b6a99f5e679ef5db
- SHA512 0cb71eb86ab2c5d4c70f04d7b10736aa453d51b56723ed7c9dc332f92ea428eb7861f23da2e30416bea8cc59877ba2c87f3032ea473028a7df8c6a299d517572
- TLSH T13501B5E19CA5D03C9D59ACB03820317AFFBF65062CA02F825474762B2010CB538E50CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-140.png
- Size 991B
- SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
- MD5 9590b4bd9378a2d8706dcbdc630fae8a
- SHA1 751eb2aa5ce4e83133a73fdb9efffc013bf37ec8
- SHA512 b2666efa916584c9b090e305eda116f2a90c58862fa36a0963176b09b493a4ce5e601a178c74be0f2e59811ad42cd1d5747e8a45ea07c3f5d52b28e177fa5603
- TLSH T13C118820BE023DEDEAD89D14E139505E86042902332860CBA0E5D4908EBE79044F095D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-140_contrast-white.png
- Size 865B
- SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
- MD5 9b103e9dfc26dd4d837df8ab55ec4fb8
- SHA1 6f46830a3a63e0eec923bccfad57d8391ac3e559
- SHA512 e8023067638a9fb849ac9364a45c8be9a6dd325fbc704d960cf270ce1075ac6c9d57b7f96cae62985e92e5543dc2f2a43d473a2dcb0060af067cd474aab7e59a
- TLSH T103118AFB1644C6ED594F572F50DA9C51734B8A3B836E80189A3C869CD190F44CB77ED1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-180.png
- Size 1KB
- SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
- MD5 7ab03a8ba1c0243b96c4124cd5341073
- SHA1 7de490dd37ebed58337fc0db654f12398e84a78a
- SHA512 c96846f008e8ab440009bf2442a2cb9db3d24452619c8c2b669395f971f9a316ec62693bb586a94e565f1cab893bf665112c34cc1fa46319e571e3fb4d2fc41d
- TLSH T18021E7612B26DDFBD7C182F1913B4A395E1CD582327461369CC2E1623C3772E1271248
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
- MD5 1521be4b8c8f2e0ce20a89f163de3909
- SHA1 c291448b74fc3d7060c1df4b35026084981ee441
- SHA512 6a0781d275dbf8fad4ee464e759de74399918abdc99cef3c74e5d66a0d555a8bed363da964c15e2ad9ab3cde5a17d537bbcbadb10585aa1ef50f0b614fc39a50
- TLSH T1E011BB5771622D70C791577F5868F505DC72D33134A18DCB5CDF29ABD0C62B4449C242
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-80.png
- Size 590B
- SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
- MD5 1b4ff26a106929e3a5710900a9d984e7
- SHA1 d3e1bb4fa64083743ab56ecd89d586df6b583bce
- SHA512 d8537fa3b0da1b2ee7c8cfbe9101a7dca624af4532305e06f211e4dac799ae9b533f19d3cdf052352e2a926bfe32cc908cd3944b2543010e7baefe52697add92
- TLSH T11EF0E16019445CD54FED19969A3D4F30EE5034155813BCA70DC2D8369E2634598B260D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-80_contrast-white.png
- Size 519B
- SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
- MD5 169dc90309162bbabf07ac3d954a076f
- SHA1 a4c87f029a4f34d66847271cdf8c5e73b1e48a90
- SHA512 b7633c8faa5614efb402c47957577dbacca1a1b3fd0bb39cf79eb3a06ec6a55f9b8c5ee9569271efbfd7d43ad348d275c0c6c9faf840663268bca2fbc6c64bb7
- TLSH T1D9F075C360D1ED222EBA2004E411ECFC747A11985B439885003B48BF7F77F20A90B088
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\assistant_package
- Size 3.6MB
- SHA256 476635dedd92ecb61b45179264d0f6f73da81e68e9786c3c4f6c2b8efe540452
- MD5 19fb72aa5d4a141ac187fb64fe647905
- SHA1 ba3f7adc148397c57f2f79cbcd20165bd1716bd6
- SHA512 3e6f608f3e58c48ceed40b63fcfdb3d8974f903d13c18abb41997175f1bd4f1a3f9e4d973efda35ce6f28edfdc8028fc88fe431a9bb90deaed1ecad7d43c5968
- SSDEEP 98304:+kioCKuIMs8b+YIpG+5ixkNi0fw2l82w9G2JNM:+DIabHwHcsI2XqDNM
- TLSH T1E80633607BD2C438E5A206318CE8FBAE157EB6211B965EDB33E00B3E8F715D5522614F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\d3dcompiler_47.dll
- Size 4.5MB
- SHA256 7133c3fe1899ef81aeb523a22b58598172e5763fb0a27a10ccce4b34566612f7
- MD5 893cabd8bcd638be3cef174199f29b15
- SHA1 7bcc2b9e2cc5cc2c8446599907d123a7361adddd
- SHA512 84540958ce896cd52273aa9b645e753d66bb2a68b26a4ecbe004b39acf5e60af456818b9a2b0efd006edd276f0bd6e7bf73a1a8b7626d3aad4d6c3660d4ca6e0
- SSDEEP 49152:U6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/:UUdeqt737jFm5w
- TLSH T174268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\dxcompiler.dll
- Size 12.8MB
- SHA256 d6d1ed568d995f3e6c6bb434c9eb4065ce888387510d65c8d36517be717f3c71
- MD5 a3bbfd7689a7d09c503ad96a24223c78
- SHA1 cbe34c80ea43928f3ea46140bdb49e1d23e9c34b
- SHA512 16b5bfcaf70e2b295a41dcaa4aa360c28e976dbd9ba37016441ff70409fd1776371aeedfc7afdb0054eb786c7cf5dcda30abcda106be5b6dc468b4ac4f271c33
- SSDEEP 196608:K3W9ok1khD1cK6hF8d4pRJpwf0xMXzadQ8Kn:Km9ok+hD1ci4/EcyXzadQF
- TLSH T158D608126246D09CD06AC878D767872ACD6C30EB3BBB78EFC4B4A1212775DBC1729635
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\dxil.dll
- Size 1.5MB
- SHA256 d77798ac46e1d6610805033b266320e343d00741cf76049dd96ea5e2d99e39de
- MD5 a382a3748dc86f7e9a3480a9f8ae241e
- SHA1 474a727a11147cfb8dee843fc93efece65575c39
- SHA512 d0ec0e31efb47448a69fa10119d496be8f51521c21c4d7d14279917da7fb8fca789b817ef12e3a471a1e9b1130c2514952b2a4944a7f560ca82e44c5fa182c08
- SSDEEP 24576:AcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/J:AsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bw
- TLSH T1CC657D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\files_list
- Size 6KB
- SHA256 df53c99bd75d5a50ab78ca0291b46b2da3dda808c903b90d928e814808205df8
- MD5 8bb3df055d0aef9992f29588527aacbf
- SHA1 4c298b586fcd043af62c22af7d2019bed175426c
- SHA512 f64baba6d8277079423fff2b295e4242068b6c0d30cd50c706127ebb126e479b8da7c45f54ab95a7bc94038328f13ea2227af77317deead6e873c04d04b0741c
- SSDEEP 96:eMyTfz5XZyITJhGwbx7Vt/JnZ7vMbngEDi1JZJiAORnOU:vafz5XMRwbxHBZ7unmvFORnOU
- TLSH T147D10797895F0265CAFD93F1EE61F89091342495DEB83058F7C70A5694A33FE02C9ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\headless_command_resources.pak
- Size 2KB
- SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
- MD5 1f42471465becf1c26104d6624b334b3
- SHA1 6818746163a26907be02503192870c57f0b81d56
- SHA512 ab4b837cd2d94d8bf94468646087054dc27f93e9fc21b4f67f23eb77631a74dd351370b3e2b7a9272cbeb959b239b4309ae2ce1d5004a6edab468b95a011fc41
- TLSH T182511893360AB5A6C179C72891DA9A7C6BE58325748DB5744EB70C33E9384A345C2871
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\icudtl.dat
- Size 10.4MB
- SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
- MD5 f50c621247b8ddd574dc9790830f28c4
- SHA1 ea84f3a773b5b90851753353826fcdf94576b3c1
- SHA512 030df4e2c8f0354a97ac6a21774d6bab1246237bb71cc286b1a310b1a7602dc31fa056b8beb1157ac71b13d3744cba0fa71ac807e5f69fcafebb3cd827b553df
- SSDEEP 98304:nHcBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndL+j89o:nHcBhORok2HiXUxO/RJk3IWhlYntjd/o
- TLSH T1F8B62803A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
- Size 8.3MB
- SHA256 968128ce27a633a91f092062d5d0a36586dd01129c9e50d420d85b2f69319fb9
- MD5 2f1b79b40e2cb75ea0862dc25fe6be25
- SHA1 d444512f9cd767acdcf4e84d80066bb96aaa2153
- SHA512 0f8ee9f50647751a527b9d2c38ec48a50899db3567ac5c6a3dd73fee7b9d4979b089970abb54f4795beb87358fcea609d06f5ad4c1d9b137408e1a73dd8a5f95
- SSDEEP 98304:m/06Gb0n+7yPcI/Ztlg1RbdsuJXMZ+CYNY8AF+:803b08yx/zwVC+CXF+
- TLSH T1EE967C53F2E601F8D06FDA748B7A5232A9357C464B35A2EF0A9436251E71FD46B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer_helper_64.exe
- Size 639KB
- SHA256 adda39e020da8fc8c98fddb668bc07cd3aa3b72a0f96ab9819eafe028844c994
- MD5 cbdcbced6e85df5da5c8ebddc513bd61
- SHA1 43fef53182a6e29a1961aeeeacb613c709229f1c
- SHA512 98b99f8ee7d7d5118fb8ac68a4408b7463bc5a1d10be5b20b57e6e95687ded2149fed7f9016f840bd6cc69d5bf468a07bddc0c8722caf6661d6cd8260abf408e
- SSDEEP 6144:jbuw4+28WFtzMnjBgZsFAuDyFIz8j0s1jFOUvWR96/YON9h:jbDJWFtzhZsHyX0s1jFOU496/57h
- TLSH T1F8D49E12B2E545ECC039C1348B518522FA72BC564F35B6EF02A4726A1F7BAE45F7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\libEGL.dll
- Size 492KB
- SHA256 47ba65371272562b0510f1b389bb9ff4a0e21845904a4a83958497dead3dc379
- MD5 c874d9bfe7725f4fb731579897ea301f
- SHA1 32e324e44a5b9880f311f4cd07a4c2183281efc1
- SHA512 04cda2d07d673a1fe000f12842d6af2efc49d5d8099531b68958f2839c1f320f37518c486fdcf598c4ed56a274b5ae89929466d56c96ee1d1a06c7639a481a59
- SSDEEP 6144:M2g57izFVCpIdMpFzf071P7cRM+P2AcXtlOlx1KN:ZPFVh2f071P7cRMu2rXtlOlWN
- TLSH T1BBB48D15B2D949ACD03AC174CA538547EB71B8520F65F6EF02A0E2792F7BBE05A7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\libGLESv2.dll
- Size 7.5MB
- SHA256 85e8cf63991c492fc72edd810c239d030656e31de2a04def498b82d5d891cc36
- MD5 ca65e6bec50925a00e50655575e8877d
- SHA1 41a814174bb725710d127236918be9ea12a74665
- SHA512 b1e58288f8743080331eed738a98509010e1a331c63abf80086e105320164290eeed988d7b8a84825f65e536e22a9d89ba968a1c6dd987ff847c78bfc3d1ccba
- SSDEEP 49152:Q5rxdxfXD43FVfqKckZphPavOeQOSTm7a/HK3LvJ1GYqcqA5SSBaFkFerC+jsQ5p:2c37NzUOZMqEaOe4QU+xcmoC4xAky
- TLSH T1A9867C13F69680DDC01DE2B49757A223F634B8450764B2CF2A9463163F7AFE0AB7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\bg.pak
- Size 1005KB
- SHA256 8a151c2685798e8c559c4329496eac4845b23bf977c1f10fa97e452617179036
- MD5 8138656b729e450d9c8ac3736a212bc9
- SHA1 476e38169c63d8207f3f59d39334f37b7985544b
- SHA512 76d91fb678dc99c16938c7424fa15276ce8a50e1b86409b9c273c10e3ed601b07b08388a6c91883b4ea757f45818c35f41d96018f7823e28b466cc7dfa422b95
- SSDEEP 24576:1cA6Vc4TrDb3JeobvGGml9cIWdBBuK026g2HQ2CcZ0vYAgCzQkECBU+Vb6mHIHiW:OXnbBG5edBBuK0tQ2CcZ0vYAmCU+Vb6T
- TLSH T1942525A15B9A649F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B887BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\bn.pak
- Size 1.3MB
- SHA256 75b433bac6b07c87874885f87d38d6a87dab684310611072e880ea157cebf967
- MD5 c82ba2a3881ccfcbd09be60a3e0d8450
- SHA1 f7191c550b27ebaffcafd8b41ff63b53a4581652
- SHA512 df585d3af54bdbc558bf542f3d9348fa713323cc1dae1cbcc55015af9471700c46353284ba27b5a6d9b8918d862040c6dbd93b2b3a3861e169561c98d34b3f7b
- SSDEEP 3072:pwSG2kAfhQT1M8yjmfrTCZuIDM8PShI8HhFQwg/+yneXhhg1UdInW9Kp9iUPDXC:9wM4+mDeZZQ8PSh3QwgkhhsnWMC
- TLSH T13355FF209C6E81B2A8D5CDC9434C6370C123AE979B61F74DDC17A25938ADC3C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\ca.pak
- Size 634KB
- SHA256 951a872c07a86b56273a468472edc64ff1fd3072ee92f1b747c2d56862266e9a
- MD5 5703514d19d488bfd916d0fa77b82825
- SHA1 b79e1fe48a38964de5f12d2fbe025dcb35595617
- SHA512 f226760e9e3d08e7fca9c29883aa8528f973f072cc4c36a607fac7df0d5084bc1edca64613c0d6d1ee84f8a4da518693a3c3b2769e2656f0fa6ce04c2638d8a9
- SSDEEP 12288:n6jVrtM7G6ybGbf1bCCrz+W58rPolpt0bziV56M6AqHl9kdkcBKMe3aRYUX1qO5Y:nktOSarNoLwE08BMZt8jD/jd
- TLSH T154D4F8238BC83B764493330AFB42C257F09CA9847B16D254F5EE1A1622CCBDCD677A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\cs.pak
- Size 633KB
- SHA256 1ad3a061c4efeb9719caff31b374f2c7461bbf26dfa83d23378f7d146d6a2961
- MD5 8c8491af6d7b699cb2070e850746b619
- SHA1 bf0d672b9d875bd5c6f0c12af1dac47a91772a02
- SHA512 98b9fb318073d99afda2d70e2c9987af81d197afcac78ba84ea53f1e4ed27719201fec79b1d69f34990ecd3d226862cbff57b0c7fbc30f2fe7d823dd7335a37c
- SSDEEP 6144:rXbuB9lCIQGk/JzH7x2GOaISBto8Qes6sETJjYx3ZzYMqYhd0HV:rXazTizH7x2GOaISbJWUV
- TLSH T113D46C1FDB936439584002447BBA5228BD5E83140B6EA9AB7CCF9D912271B7ECFF1D18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\da.pak
- Size 584KB
- SHA256 2bce9052d3537685476b030689ddd793045e5d173201192455753a374903a5d3
- MD5 c10588ae92948fe3887d505c045ca681
- SHA1 88cc8a09da53b7cf65213a54f6cbcf66b33f04e3
- SHA512 151d074e09c90bf4cddfae194a18e0176762db1aced30341f22bfd5a8b4c1499d14579020f7859f02b0a6001d8ccfd80d432f7c59619c5b6b5623102c26d808b
- SSDEEP 6144:5nZ69dd6D3G33kRlMzVWqX69bxVtshxpId4AtCfwghzZh5CRQguTUEd9MAdg/Q17:5uz50iXcNs7ERQguCAd8FRzw1Z
- TLSH T13AD45A4BCC9C333F89AD0764F6118DABDBAD543CC684664F75D8903A16CBD6092BE2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\de.pak
- Size 631KB
- SHA256 a80aa856a2294dab6291202009ce6fd2c773193e49d1b1baf32bc122fa04cd04
- MD5 e38b4323086b1c747f9934a669f3b2cf
- SHA1 7360cb2f8e0c3425ea15d9b2e687f7e02a04b090
- SHA512 3295cec326636e9aab8353313d30c0c38eaf57da2a955756cfc9cb57e6444b160fa957f62b5f0de486bb257872b9ba9da3470280262b675574e9d6fdba2ec655
- SSDEEP 6144:+x9EOLb+PZPVdiB28/61feh8UurzpQCblDu6/1PIHW/EnD44ekjyW0YYro9GxZN6:+xOsb2ZL4gNDUgQCbFdPOA4bOs4JAM+
- TLSH T1F4D42903ADDB225ED64673607701CDBB7B18E36FC385312B94EDD127620B6B283AD526
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\el.pak
- Size 1.1MB
- SHA256 99f84f005cdf1b39df775920a1d3fcabffe5a1f825edc34e06090afe05f5cb89
- MD5 2e4f9b44dc500d189197d64adf8e54df
- SHA1 15fbfe3c22d20ce6d7e96d7e4605eb3f56ef8e59
- SHA512 a94157727044d56dfff2dbd9bd015fa9354afe87b396bd0556bf2a1e98335b414b14cd63a49e7a929877ea96ea17dcff5787e81489b9d245922b3ef9c5744cfe
- SSDEEP 24576:Ovzc6knjKr4lkGEecCRK9Xcx2y7fOILolJP862IAabmvdtU7ClYeJZlmmPdzaYDg:Sc6knjKr4lkGEecCRK9Xcx2y7fOILold
- TLSH T10E35CFEFB0542DEE8086950785D8F07C27C66D6CE749CBD86229CB60BDF90719622E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\en-GB.pak
- Size 512KB
- SHA256 ef56d4e338e0e86fd3d05fe605fd60af16ff5c070d99a77650a919abf94d3e21
- MD5 383f223e6dcf67bf7a0689fb98c44af8
- SHA1 349d62b75f9d7ddffe948afb787a92bff014e0da
- SHA512 1b3cfd8c0762fd987410ccffef7b84a77f4aa9799437cdbfbc86bb779efb8753a20807bdd794d5b8a3b0d94ca7254da8e49ad09c5f6a5427277834d64c3339e7
- SSDEEP 6144:y03OOw2zmBw54KUDfIBc9R68GgtF7+p8qVtU08rU9zLd8T:rR3myADhCpN8r0d8T
- TLSH T142B43C1FF344122905935272BF0A9662FF36D06CA35116567CAD802C33B7B6A837B7E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
- Size 5.3MB
- SHA256 fdd6f367514a8c44bedd7d8cae73120bcab054975df41be2a38f082b9521746a
- MD5 120b5539ce7123698f17dfe49977f6e0
- SHA1 20fcf9b525b48ccecc40fb6e82aa99d086fe63ca
- SHA512 171c79b08816ddc655ea65866f467e26c1628051f973144ff80d705f97201ed071b8e19b22ace834a8f1e44c823ff1d1d8e282ea7a6a7c8b88ec8622a48e2c30
- SSDEEP 98304:P6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwwwS:baFDasWTMzz4/qyOwHqBt8Zh9RQl
- TLSH T1ED46AF62F6116074C81EA471383D7B7F68296D23D72187DB8DD83CA06F746C2263EB96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
- Size 2.9MB
- SHA256 bc903cc712c48e440f1f08e189fe05199286ee424550898130207f32fd65516b
- MD5 6b168724397bc53b499ecc28ad1153ca
- SHA1 269d9cf5df3f2060799fd9b3803550630411bc16
- SHA512 3bf731457d5fc6c80370eac2f4242e0306c723ddc18d7eb5550ff087b00de125c367f7b34f447384c177b038d8c8321f811cd78f8611cf516d4355c27f59ec86
- SSDEEP 49152:6cIuoJfebXVGCC094hg+hdpoo+7+k6vrPIyaaSqZ8aZOgJ481evc:6cI4X9aLRY0
- TLSH T1CCE57C53F2D911D8C01DC079879A9233FA62BC454B35B6DF0A90B6661F7AEE46B3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\Opera Browser.lnk
- Size 1KB
- SHA256 70bf5eadb96026a008bf6de840038b0855cb4e9fdc33dff68e378badd8299d83
- MD5 73f16205d00c329de33bfedf35b8ff69
- SHA1 b2d9a563c24baef895458472744b0940da0d98b5
- SHA512 9ac82f4885faae73dfa711d3c3c4456a548ff69453d2a22cf9d0485ac13ad0c12014658a15161a84510c2c2603637a30b95896a45e2f4015fb226979358793c2
- TLSH T14121F1567BDE2F20E6B7853449B63B29E23AFC14DB095B0C401443C91AB6642559DF1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\additional_file0.tmp
- Size 2.8MB
- SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
- MD5 3b028b1188ac321e66add16f8ebadbec
- SHA1 086bcb2b1c0d300be15c1390841aadadcec4eac7
- SHA512 17c390e0df8e29ff9ad43e581db298ada2d8378fbb890dc5f4b17df8fbe21134f99ab203ea4752a419215d289c128a1d8bc14721bde80042e5bb4c3901dffb72
- SSDEEP 49152:+kinoIZOrzV7AlDfo7eT/uAtH00raHx774jx4aGhcr0glyGIGE1HVyVNW272DS/Z:+kiocQzV89Tmeradk2ha0gdIT11yVQ2w
- TLSH T167D5233275A48C34D62312321CE0FAEDA5BE72701E6347DB73A42B1F9EB01979A1D562
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\assistant_installer.exe
- Size 2.4MB
- SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
- MD5 b0408fa2a406f483e42c3ac102d35e9b
- SHA1 fbaca900ad54abc65ec2cb34d63727c87132d16b
- SHA512 2e8b9af626fff68ecd0204d6a3151b4518749143ec78a2f8f99f959399d1c8ea59987f99c38c9e48fe38b518fd8c91381356daf3f17944fa3432337b882e5401
- SSDEEP 49152:wJv8lBbu91xwyiZSwRDzWEibQojjHLQDpizF:wR8lBbu91xwyiZSwRWEKQWjHLOpc
- TLSH T10AC5AE12A86094B5D8563132321DEB3E9A30BE1657354DDBDB90BCC1BBB86E2353734B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\dbgcore.DLL
- Size 222KB
- SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
- MD5 b26ebc5cde9b1726ee9f9534dd6107d0
- SHA1 de00af3ec4de63a158bcd50c6e95b046669d3353
- SHA512 2e01c65b58369c1f5f4081cf377c3fedd87ae5fca63cfbc44dd7859a1e10a849d1bbdbb592349d793166f577dbd954cd8660f625dcbc9adc4d936d6a44f062bf
- SSDEEP 6144:FASh0NdOEQzFh0ekr6nzwBaQGdppLIg2dFl96Fl:4MHZn1n+P96Fl
- TLSH T14C247C2269401533DCEF12F062AF363A96AEDD90239490C359A05BDDD6D4BC12E3D6EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
- MD5 021b11c0fc1a09e49a2046ef07d1747a
- SHA1 4b955c1e7150db4f07528929fc529fde9738a2b3
- SHA512 6ca94fdf2b92928859152aa23f31df46944eeeac7988f6bb5d647341843d8d2aa91c2c810d17c8b58a03c99e4ca7d7e1ae6b6c2d9ea5029616d870b89794d6c8
- SSDEEP 49152:xEDlXSohR86M5NKBlv/2yOFVnzM9F0KM7:uFhR86MHyl0fb
- TLSH T128856B20E784813CE4EA1177E67C7A7D85ADE524073440CBAAC45BA978297D32F387DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\installer_prefs_include.json
- Size 258B
- SHA256 4df02fca40dcacba0957628b0480a4e50bfb55f38cd318b85635c67883526fe5
- MD5 27a17be643f1fcdb1fc2d748a7fb16cb
- SHA1 63ae38c8d890369b5d34bb8ad779e29b44025b5b
- SHA512 8b9c2cc0b873bc6d05e9c8052323143e27276e45cfd10054aff020b3082b347956e116357a5149416c1f754113818bca3028e806c7a6ec3fc46f4d6a4d6540d7
- TLSH T1A8D0EB444011E0A22E70C38F3AB1330A87CB5B0109A0308EA7D2002984688A23883E29
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\installer_prefs_include.json
- Size 1KB
- SHA256 2824bd51a1f2ba0d2b88ab00b71fcd98f8228086a33f95842a11df345c5e28ab
- MD5 fc622c7397c7ead5cec6e306b0d18f72
- SHA1 a6542823d2d12130da66015d49da6b5a7c5bf16b
- SHA512 32c9693e73e28127cd7025b79add561c4b8532b742633da514dab1668209be56488c090f5cf2132bb64c40a19caf8fb646a15b5a1d4360816fc262afc283fdef
- TLSH T11721CAA48042B0232B73D31FEE572F469E479B039C1810D6A4D2087D88EFDA11F62979
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\b45464dc-79f2-4e6a-acd8-e9282bb9c9e2 Opera Installer Temp\opera_package_202607071314251\installer_prefs_include.json.backup
- Size 243B
- SHA256 035dd8fac4285ba7af8dd0d7cc50c21bd77f05f636eca9adff7ed3cfdc50137a
- MD5 64b134271f5b2f988e0f8cf995a157ea
- SHA1 c2c3c6ce53128792570c9369f2c0dd3312ae653d
- SHA512 467da7bf4fade78a0a1ba0f26ec27d24a8d13d6b432a24b51e779847a9807c44e10305a1b8579980fc70ca36c68eafeecdba34a379429767f02c6809f9f446fc
- TLSH T157D095454111E0532E71C39F3FB53346D7CF571159E1714E97D10035846886239D3E6D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zSC50F9ED9\installer.exe
- Size 8.3MB
- SHA256 0221deb9031dc461368bc66f1db22c1c6b1d4a291a9f3223f4c3653bbd646e0e
- MD5 795cf8f3deffc8cc6045b72278bbac95
- SHA1 2514d3bbb80f9907e914810e0940a1189fbe316e
- SHA512 a2ca4b23f04a20244665e32d316ab43dfbfc09da1d72ca4ea95d563d98dd94f63336f91e15f86549e37d732379e390e7d56fb20efaf69daa84eeb2d8a8e4dd8d
- SSDEEP 98304:i/06Gb0n+7yPcI/Ztlg1RbdsuJXMZ+CYNY8AFy:w03b08yx/zwVC+CXFy
- TLSH T11A967C53F2E601F8D06FDA748B7A5232A9357C464B35A2EF0A9436251E71FD46B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-9NOZTJDXA9.tmp\1111-w-warp-2024.12.760.0-installer.tmp
- Size 4.1MB
- SHA256 3a62ae0d102cff66fba0a1f0b9bcdf116ad369c3c4f0212eb21a53c766c75a7d
- MD5 fa1c977a4003cc0793201a6f1711bb6d
- SHA1 99687859fe21ab2c851da864ba0c90d72862ca57
- SHA512 3fdd7887b940c005f54535e3d229d0c2f456bd9b2d28acc399c92078ec45adc334e065faa212d08fbd9495224b1767b18b1bde59150a32415df27d9727f59959
- SSDEEP 98304:fYU5hnuOajWwMPdCpepI3GrwrA+Jz333E:JxuHjWfZIzc
- TLSH T1F5168F03B388753EE4671A3A583FA284983F7A213A26CD4F6BF40D5C8F395416D2A757
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\100.png
- Size 46KB
- SHA256 a6ecce54116936ca27d4be9797e32bf2f3cfc7e41519a23032992970fbd9d3ba
- MD5 5fd73821f3f097d177009d88dfd33605
- SHA1 1bacbbfe59727fa26ffa261fb8002f4b70a7e653
- SHA512 1769a6dfaa30aac5997f8d37f1df3ed4aab5bbee2abbcb30bde4230afed02e1ea9e81720b60f093a4c7fb15e22ee15a3a71ff7b84f052f6759640734af976e02
- SSDEEP 768:kLse/Ia4qCtiJ5BX17ZzMt1itbKT6GbnMHFFQCIN3HklYMsfa1pDLfkh:kLshpqCtiJ7179Mt/T6SMD/80lYMsULQ
- TLSH T1B023F12B4B5D9F23FAC7E84540F896A730E498B2A3D0D5082F4591CD4FDE9C4DAADB84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\101.png
- Size 51KB
- SHA256 3f63f320e919830fb21fff8dbd82509ecc8330c89513163daedb1b7687a0a529
- MD5 958233a25ac0c23fae9451963eca0de5
- SHA1 8801e6dca9e4e4ad1f5b49caa097733877cf2e2e
- SHA512 996177a1a878ca82c1ce02f8937f51285aa9b7c92471fe9c19b41892739e82aaaa7ebcb7f396d6d777da822578b1db1fea893ed55708521e4b8e31a81cacda0b
- SSDEEP 1536:l7LeXprR91MWpD5Ko2ORwQWwyJUcbWb7H:ApzWTo2ORohKPH
- TLSH T1E33302A0B153C51FBA8B5211D2043975776E92F6F860FF4873CA016CAEE5D415B173CA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component0.zip
- Size 515KB
- SHA256 cc6f4faf4e8a9f4d2269d1d69a69ea326f789620fb98078cc98597f3cb998589
- MD5 f68008b70822bd28c82d13a289deb418
- SHA1 06abbe109ba6dfd4153d76cd65bfffae129c41d8
- SHA512 fa482942e32e14011ae3c6762c638ccb0a0e8ec0055d2327c3acc381dddf1400de79e4e9321a39a418800d072e59c36b94b13b7eb62751d3aec990fb38ce9253
- SSDEEP 12288:ib5kasT/hWZEu58IbccPqwozk/2rYJb69+J2W:M5kzT/hWZjfbccPOzk/aIb3J2W
- TLSH T1C8B4237E2323A734A201E7A425373B520A1E63C6733C15EB7EC1AB927D3053D76A456B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component0_extract\saBSI.exe
- Size 1.1MB
- SHA256 f5aa950381fbcea7d730aa794974ca9e3310384a95d6cf4d015fbdbd9797b3e4
- MD5 143255618462a577de27286a272584e1
- SHA1 efc032a6822bc57bcd0c9662a6a062be45f11acb
- SHA512 c0a084d5c0b645e6a6479b234fa73c405f56310119dd7c8b061334544c47622fdd5139db9781b339bb3d3e17ac59fddb7d7860834ecfe8aad6d2ae8c869e1cb9
- SSDEEP 24576:WF66IUpqM/XAl0drYaL6NFEXXN6abiklqOYadJ0CbmpV4CsCa0wDisO4qG:k/M0drYaIaXXOAqOYadJ0Cbmrhq0wTb5
- TLSH T1D2458D317586C031E1A211B219F9EBA585ADB8359F7244CBB7C05F2ED930AD25E36F23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component1.zip
- Size 3.1MB
- SHA256 6e78567c5eb7162b9c69edbba762db7c427c3f02543ef25c828948f5e4abb41d
- MD5 48b4942331ce9383648ff69005c5bf78
- SHA1 61410f38cc4f99803d31c9c825c7a73fb9233e0c
- SHA512 8983b5e03d062e36e7b3094fbc0343c18b12d72f897af248226fd07cc9a81a68ed9bfe0a9e498adc2a2ebda09dd7084da75a53f57e4e75215920dee81e791c45
- SSDEEP 98304:EAbpJyF3hYsaeHJTsPeVZazuZDsiL5wnIKoXO7w94//EzC:1pJyA8HJTsPe7AQNL5w1oXO7w94j
- TLSH T171E52312BB849476D65311320B59FB6893BDB9605F36CACB33C86E2F4E701829A35F17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-F4U5ZOSBQ2.tmp\component1_extract\OperaSetup.exe
- Size 3.1MB
- SHA256 030befec0a28196a12a7b05eceb12cd0b5776e63f65fb4eed56202ff9e08bc15
- MD5 f4214b74a93f1749cc8c1ed6542d1c01
- SHA1 44ec044a5e4013057c880732436dd8409447f61e
- SHA512 129dca45d1efcbe9ea56ed7f4218c77a15ff09f2f7cb2075a53af43e6b67c4663a037b8ed79b2a794e419613653b7a6803199930deaf3fc8cc5e6b99aa24d4a4
- SSDEEP 98304:IAbpJyF3hYsaeHJTsPeVZazuZDsiL5wnIKoXO7w94//Ezc:RpJyA8HJTsPe7AQNL5w1oXO7w94d
- TLSH T158E52312BB849476D65311320B59FB6893BDB9605F36CACB33C86E2F4E701829A35F13
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2172_1266410128\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2172_1266410128\CRX_INSTALL\manifest.json
- Size 3KB
- SHA256 64620e875ac18f8a5dfb0a403c8f9307a14c7f1b3278b7801bfa1c21f3365c71
- MD5 831e1809a9e914bbab68ddb416b829c3
- SHA1 0527230bd50a18cfefb0365a5fb3caf10ece81be
- SHA512 47353c18cabb206335ba260b1827a8f224dab1a07f47e41bdc8adb0b8519a3fdfbfb16626bb2d061a4364310bc42a085870622e0deef97c7b9224b3fa2fe0eb1
- TLSH T10F7161B6E4DA597706F457A89CB50707F200936B8B8E4C4F7BFC90888FF9E21201991C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2172_1266410128\CRX_INSTALL\service_worker.js
- Size 74KB
- SHA256 1480798b974b29c617d9ebb4b4408f1eea9febbcde0083373cf8d178dca1b6cb
- MD5 6b71b25467c74a6074fbdd64c1d7d790
- SHA1 cae8300b00ac789074d9a42fee0672b6d2a8ba01
- SHA512 12769ac5550a03e5470b6168513899d224738882e82afa9eb4ce9bf72526a9003c678fde18222b0a436b3673308f13a0ec0869f31635ceffdd20ac66cbef64ee
- SSDEEP 1536:6ka6Ska6RmnbzCvDVejUtqQoz6IZc5HDmV0bcDNUILMKY:6ka6Ska6+zKwjPrWcUjmibcamY
- TLSH T1DA734ADC79C3F46597A3A4A5802F3143F13D2E0524AD9850B726C9E5B868C4EE23BBF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2172_1266410128\de932af914ba00303d4a2778a383ac9c831101e2.crx
- Size 4.2MB
- SHA256 9527f8a88118af8921b40c59fee22654dbf169a96d6a8febd2d0bb83363b1b4a
- MD5 fa4f22dc6da3277f7337750c45dcd9ea
- SHA1 2d5381ce92a5d2f1a5044fd9366683d701d1ebdc
- SHA512 efd223d4c553753e61dd63e10709dabd9e19962ed5e4a416164b1f80a5903a3133ba2b90614a31cca7c7ae032a95d295756b843e103f40b49bf8142cee6265b6
- SSDEEP 98304:CZWhno3LJMGP0HilOxNGcFwhzLsAokKqMO1aXf:CZWhotP00OxNGcFOsAowYv
- TLSH T1C8163337B25E6651DD1FC1B31012B3B699981137C8CEB93E9016829ABDC3EEC93C51B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 1f3b315a55bead1cb49e8d68f4979d77ed30b6e3962ed64e6d23f7bae6de5ee1
- MD5 bd3db2e7a7547467ac3f38757235fad8
- SHA1 9dccc2f5d18bf114012321b6d2b477bbe2387136
- SHA512 35ade390be562260db9df924bbb3ff0f60f25ebc82ce38a85bf83adb9e00a48a9b0411812649044d2db359b2ee12d68ccd117fe4448e05bee12571b9b23b5e7a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\79b839a6-7081-4820-8010-c07105400e89.tmp
- Size 203B
- SHA256 2ec46e4dd0b255ed1538d05c358291616634dc7e61dc35973d307dbc76eb84bc
- MD5 009d25b59d19c1741bb490721fa21458
- SHA1 031916bdd730b33ad941eb72360e12cf0fd3b41c
- SHA512 bf74e146bb9d372f8dbfb3b516adfe8674fe9e8540a15cebb4dce7f11af1ff332208d92b4b5f3a94aa9250fd57333392b6603f81bac99bf96f0ad44ea33cd0fd
- TLSH T179D023211E509461F0D5F460C6563F53252CCF210599093040DC0562193D2990315B31
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\80dc9374-4471-4ada-881f-dda0d55a4d4e.tmp
- Size 10KB
- SHA256 08f0bb3822f125ec1e57290d02eba9d6e9e030e0c94de3494a986cd0f92409ca
- MD5 06ee8a9b8d17233903feff0d27cbaedc
- SHA1 eefe4ca964794e91e2e2d0f24d473c15946d8af3
- SHA512 95a6626042b2f398cbf2455f84c9ecd29eec5d75d6bc9576619c1454b1e0f2c32a07bb32c11fbac0fa4f49404f699f085f4837204f6b1dc1d6d030c541575474
- SSDEEP 192:TWDx77H5t2ag8XMpySC1NauAd4qUynDwOAm0wRCj1b+WNOVcJCRyIsn2aga43:TOXJKrnaA
- TLSH T13632424BAA600DBB5CC3D56AF610F65BF2E41021E2657D98B6F9892C01DB6CD2433E86
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 3bebb08f2605b0e2930af0330e688f85f4e0fdf365466fbfaf9c978946568a97
- MD5 206acb0ca27a63e3013a5c6207845577
- SHA1 f89c845f75a75256903ee5a097788b2acbc0c2a3
- SHA512 9017a2ab372039bb80b734a03d0eb73fb44162e9100b31a13107d3b1f799b522fc8de5d69e303c7152c96d48cb6eec4340f755924f360ff2ba9bd7e9d5b25933
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 264B
- SHA256 fc411c0fe43c26a72118e4c1217e52f10cd1210cb7c23e230dc9ff074d8501fb
- MD5 6251490da18c06026e949c5570020487
- SHA1 e5f063d1392676a1bf057d9d3c86f2ae42d730e1
- SHA512 dad2582be7016b179da79275ec09caa31a401c51fff38ff8737391f2da229e031d1b6a91b28f38a4e036e18d6559319380b0f1c94773e19753e964ed0ccbc52d
- TLSH T1C8D012A471E9040ACF753D3871E24D95325929D630511707248191ADD6871C85524D1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir2172_2130218876\CRX_INSTALL\reader_mode.js
- Size 112KB
- SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
- MD5 ae8b2a40f4543a01364b65f8d540dd4a
- SHA1 a1f4820308048e4b6327db45f53daf323e8200d9
- SHA512 3fc0eaff657304e9d55e5f512f09f7e9dbeefd09b8d046a59c435866a1080f2d46ac5e56859f894df9827a85cd9568c9eb341ac570b3b203078effc97928d04e
- SSDEEP 1536:Ska6rka6JmEctzRw8qxUyIVGjYG6xpvAI3z6A0k5miSZ75U66dpXdd0yUY70Lcx6:Ska6rka6zszmxnS9lbv93NddM3prX+wH
- TLSH T19DB3D9ADB3927199928320E502FB0047E3355D451C1A5038F669E5DFBC24AAA62FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir2172_2130218876\CRX_INSTALL\spotify_frame_interceptor.js
- Size 5KB
- SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
- MD5 90052be4adb4d4536487cfb6486c3dd4
- SHA1 81676ddbf5baa7401e201de96a40e2ff5687d06a
- SHA512 ef36d3492bf0fc16ab9decf5aeeb804895c98b77de2338d8f350ba2546f4e99195f87bd41167e81848d9aa6d9f03353cf836c2d0302f086ecfe7641cd8053803
- SSDEEP 96:xSVa6rQaSVa6P38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuisb71TTta12Ho6Io:xka6rka6P3805se3m4XFzVJFs31wx6z
- TLSH T1B2B1B505818C4C7D8FB5028A9ABE235212DE2283787BD4C4EFA3C47597353CE9213BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\favicon_opera_one.png
- Size 2KB
- SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
- MD5 723cf51fae375f557b2f891a2ea603ef
- SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
- SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
- TLSH T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\734716ea-18f9-4ccd-9be8-39c2f8421ffc.tmp
- Size 72B
- SHA256 43f4f78984468cb8962e85e8f50dd53d2d9610cc72abfa24ed3f5b6155686524
- MD5 9e4c9f658c83b2bb9ca03ba636085397
- SHA1 7167ad88a552f3e7bc0a3eb05635a04516c6a8dc
- SHA512 294834db2c98a20f15bfd319a11c160190cc8f8e795b1cab4852a08e4a47957a6cef6c31de386a821a109180386e55c14d11eae740810cf73529a4c7e63a59e2
- TLSH T192A002110295C6B4C10092B1288183991604F965C4014713F6D00B868CA00504921144
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 48B
- SHA256 1a93f368b9028d78a66f129dbf963893a05251b374677117bbd018aa5f8afb5c
- MD5 a1d6b2d1667ec488983cb72090bcf67b
- SHA1 9122fb6a6b722e0941a916fb24b45cb7c01ab3b1
- SHA512 c9a8f946f1a2ce836fb4fac35f4cebb0e6d5be694342c35d6b85c6cf5553ccb12741739eefb2e4affa4183915f0a94dd3834c8cfb234b33df633639272b467f3
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\7ff9b52e-a617-4668-8e49-5277aad1603b.tmp
- Size 445B
- SHA256 b733904b74ec5b5c5864b3feab7b267aab3e625a7853f31f7187db5e51494a10
- MD5 08c449aa1a69ea3ffd60a84c02fd86fd
- SHA1 30166fcdbc019aaa33a89c125a93df44059e8031
- SHA512 bc7c4d065e30cbea4df784605a498631264fd31b6950f87a74b475b2eeddd43bf61ec79174d6cdd4c5b49f2ab836f3d5da8c28740de50427c9ee1083ae430acf
- TLSH T178F02378482ECA2E378904FBD01989BA08137342897F2B0120BDB576AEECBD111D2780
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
- Size 861B
- SHA256 d379999d38b731aa8feb7172ff4ae64b23fb9968a233570116ed0d53bb427eeb
- MD5 f2d642b975b16c0b77d1dce965db6d15
- SHA1 862fc4d6755955c0b0af1c333389f9ec80e0545f
- SHA512 b8fbbc4e5b13e65eaf8125f338fef183da060e3003a356289c7c91e3f7c23d7618d30c4ac95654f66b5c561ea71ed3faf1498d4dfeb5192fc644ceb8719296f0
- TLSH T1B2119682D6562251C172FE8C38E4AED48B3FB84EEC8C69F29311E3F01C54B315E08446
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
- Size 861B
- SHA256 bfbd7a27c01446854299062a3850439033d4b91d739f343b7d64289a40e7370e
- MD5 2f2d3c36ea29bff70ac62fc64582e1d0
- SHA1 61209614b2cf3539c3eec243b7f22bb962a4895b
- SHA512 918331fb722c0f00cddd6529f64547015996a4502075ad06ce818ee2186195b1b07c80dc8d40d6e474cd5cf443cbac3e4e97553bf495bb2608dd0cb0fd32a00e
- TLSH T1CC11DACB41749F855FA322D0A5878E5EC35297D33EF59F645E9D11CC6130E200414C0C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
- Size 1021B
- SHA256 296234114b635bd129e8c86fcb2c2ad023edf13df4c6784bf6b920f3b6386b68
- MD5 04d65fdd01bd7fea019209e0432a1b1e
- SHA1 343bbd45fae7db86559b33fc74f9346ea9a7c97d
- SHA512 d7f09871f69f782bb49c579735dd2bd108ae6aae8898e249806a6e574b86a07774dca47fede7bf0fece4a6eaa2dcfeae1cfbf2a5e480d97a74c3c1933ba925ba
- TLSH T1B911D851F9D32D03FD3A2D6C0B5A92F0BD806A8E020B55CE4D990F445623951CF51214
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
- Size 1KB
- SHA256 84c7ae188c9f754dac930024a2a30e1bca85e6f2367d98d0280984c4aa19bf74
- MD5 b2bcdc07d5afa770ba14a076c8b00c6f
- SHA1 da74256a99f3eac54393fb8c32a38206045db3ce
- SHA512 2d828865927e74f6573d44c900c210d8828319dcd317a9143787181096fcf80f05bee48944624408f5bf1bf969dee25a0ef9b924881b7cbd6beea6342ad5a9ea
- TLSH T17D21C6AB4A0696C9069A9F37255580C40A05FD8DF6722AF446B0951B0B3393DC57D2A2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
- Size 557B
- SHA256 cd5e0e5287e4e23bde8dd867143b702ca5b65d12a465496f518fec803ad735ac
- MD5 0484c85927f8dbcbaebee95876e9d3ec
- SHA1 f1ce7786290fba4c75e38194c2d94b1255a5e78d
- SHA512 37fcd340e48a62426d369694dbb085280b80731f62db07a163e85970705d10e9bc307e5969a917aaaf2b684d2eb1616117c65ae37297ae20b352b0a82ae02b8e
- TLSH T120F026750940149ED977925D424B0096938D65E80D30413D9DC5ABE417E132075F291D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
- Size 685B
- SHA256 bba359a49e7b5d64e726f6512152f5d75327cefd2284a73300a3ce7f589aeb45
- MD5 a943d25852ced2e01b06247e3348c09c
- SHA1 528312a60b97953b57bd458403c19b2c20805d77
- SHA512 82fb408d937faea889f95f5b9df8188c677b2bfa2edf3edf225f1e8240253746dabeafc7d2f55733250a33cbd4e1164f8c6b7a96e44975c5e76643f0b91a58a0
- TLSH T1FC0188307F7099773C40A543A25174B44640C9D725E5190D7C14A974A77F146F4CF9A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
- Size 845B
- SHA256 32d2c13b80f221b7a9c574f08b6573e3a2335f40f431939527fbdea43524cc2e
- MD5 46d73eeeaf9eb67dc97ddb1ef499bf15
- SHA1 9d053059d76e8b25644d0fe8a7d0ad0721aa6376
- SHA512 400a890b717561ba4ae9fb73225ee2804324ed2eea5bd526c5dd4873f67bdb826b3cd8622137a2e1ac871586dedc51f7cfd2ce16c7a8158c179ce4d09102d83e
- TLSH T1EA0156468ACA77B57A35BEA06D95DC5D862A0C94584825C408F86625397A56F95C3200
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
- Size 1KB
- SHA256 9fe0ec4cb42fad8545937b5bb3403d94b888539eff614fcebe855920cd611dca
- MD5 3b7d7065cd3be39e1f3528be4f411baa
- SHA1 a98ef3c5a2ca51358c231ed9a7cb2b237b42ab17
- SHA512 0d88a9266ee20f2092eaa5a5d11c064edf8657f61dc81734782d1fe099f6ac3f0f5e19d07108a20557dd680982d00161c0a8b174b9c5dfa65aa03380b9a7b5c6
- TLSH T10821F8E1A60BDE408E818C75AC37D024D90DA33A977212A97BD78101B3408EB8CF329E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
- Size 1KB
- SHA256 939ef53c91e0822cf2431841c82b02e81340e6952744a21c444a464007d42c89
- MD5 8567633cc9aa13de332d5efaefa505bd
- SHA1 a614bb8a6d447105332e6b5a3c2d891b09c2a119
- SHA512 dcfc58082ca94795baea838bd60be7b25209bd69e81dbe85dc4ef414643d00314b5917abebe8220d1769343351f760ff5612f4ce50c8b2b160cb48792bdb25f8
- TLSH T1DC21DBFD2DD28AEB155EF908615330B542BC16C324D35DF1485D10BBA517AFAD51044F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a3cabd3f-7be2-4c5c-a7b9-77bcc0750915.raw
- Size 1KB
- SHA256 724797d6da7349de5d2b7acffa218c102f0b44679a230bbefafb1e0be27ae341
- MD5 f9f7ca6ed84f395b31e882807c091068
- SHA1 3a8b5cd98184df04d86807aa5b6f7b6a1983bfe1
- SHA512 5b8cf1b8512dabdf21e4da739d556b4fbe88d41b50b5b8711e14c9868a9b2b1daac32cf99a09907d859bb1c558d0908bb5c52ddb8796dd1d37998b546783e01f
- TLSH T13321A3E74A4860778404101AC4CA838A5C1A36390E6AA00B22B8AC4A863EDECAB5818D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2172.0.1288586805
- Size 265B
- SHA256 1aae5b9387385e8337a6e59da8dda9900135d350ef04a95eec8db1b49e287ab8
- MD5 45fce06d373d7ed0cfd4c2642a385109
- SHA1 fb369b1c66e95414202e4fdb71e2e6f9b7e42c63
- SHA512 1ec58f5e529043db9896ae281c0deb3eaffe3aa7bce3bc1c70046461a0bbd365a4690ffe2cb2d51923b5ccca979866e4401c74d41d499b757e40f281e6e970a6
- TLSH T184D02B600A06B050A6D1E67082217F6B1A7D8A1718A1083494AC011702BE06A0365739
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2172.0.1288586805
- Size 2KB
- SHA256 1eb58d200b683393ec24c4bca88f864aa5a02917cad7ca0c570a0c8c191dfc89
- MD5 72944f90944ac09294d7c717f741ec8c
- SHA1 35acaba66ab30603d64b21c8ab4fe78aaa7d7897
- SHA512 4175023e439e91ccc019eaf6062728b0bf5d75f5cafa9df8ee22fd2cc6b1a4a78cf7f5d2f97aae39a9c3412d31989442198ffe36fe9090743fc2299677ae37c6
- TLSH T14641CD4589816874EF96CB7E76F13F1A0FBEC9A33101645A32DE040E1EBEAB75107507
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2172.0.1288586805
- Size 1KB
- SHA256 625e3bbea1072c2ef22b57e53f1558a61b3cd23ac13c112cf62259204d2da0e7
- MD5 f5a42cc0470d655c4768c9e6919fe22c
- SHA1 fd25ddb41ef3ff23e897af851c80a6b5c41009a4
- SHA512 5e6c60e17d1473181e1dbfd94ba6433ce9777ebfd05239ac8a38600af2dd6dff8c2e18000c7c6784318abaad7260988505b2dd6eb0030df1c3938a34baf2a61d
- TLSH T18D2132418D8178B06F96CA7971F13A1B0BFECD533105546736EE000E0B9EB79940B616
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
- Size 264KB
- SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
- MD5 f50f89a0a91564d0b8a211f8921aa7de
- SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
- SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
- SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
- MD5 SHA1 SHA512 SSDEEP