Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/07/2026, 10:25
Static task
static1
Behavioral task
behavioral1
Sample
OperaInstaller (1).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
OperaInstaller (1).exe
Resource
win11ltsc2024-20260709-en
General
- Target OperaInstaller (1).exe
- Size 178KB
- Sample260710-mfxc8aaw2x
- SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
- MD5 4ef32b114eaa6f05340b46d0f48154c7
- SHA1 a07219dc2a0fa96f5f9a03b1bb350c9ab2679d3f
- SHA512 6631937f30fcfdc536bd14735870c9c4592f4414e9c1d71ec69c718bf341ff286174b782c6a23a6c29744be940bcac34aa93845e60727e090bee8423d738ea9d
- SSDEEP 3072:IYHHEa1Lz5KhEwh5kc9+5sFoq0X/r6LGV4RxJ0OZnS+Rl//bRRlTHGVJp99vqRy:IYEwP5KhVyc9esFoBvum4RvGJTEy
- TLSH T1EB046B823AC184B5E5B244321864DBB19A7DFC700F65D9DB73987A3B5DB02C09932F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 4 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Browser Assistant = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\assistant\\browser_assistant.exe" assistant_installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" --autostart" opera.exe - Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Windows directory 15 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp opera.exe File created C:\Windows\SystemTemp\scoped_dir6304_511133154\opera-one.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir1324_697400686\opera-one.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir1324_697400686\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir1324_428916370\persona.ini opera.exe File opened for modification C:\Windows\SystemTemp opera.exe File created C:\Windows\SystemTemp\scoped_dir6044_1597990231\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir1324_428916370\opera-one-dark.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir6044_1597990231\opera-one.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir6304_511133154\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir6304_2003650431\persona.ini opera.exe File created C:\Windows\SystemTemp\scoped_dir6044_425660110\opera-one-dark.jpg opera.exe File created C:\Windows\SystemTemp\scoped_dir6044_425660110\persona.ini opera.exe File opened for modification C:\Windows\SystemTemp opera.exe File created C:\Windows\SystemTemp\scoped_dir6304_2003650431\opera-one-dark.jpg opera.exe - Executes dropped EXE 64 IoCs
pid Process 2572 OpInst.exe 3264 installer.exe 1376 installer.exe 4232 installer.exe 5388 installer.exe 4088 installer.exe 1020 Assistant_130.0.5847.41_Setup.exe_sfx.exe 4528 assistant_installer.exe 5784 assistant_installer.exe 2656 installer.exe 5308 installer.exe 4232 assistant_installer.exe 1756 assistant_installer.exe 200 assistant_installer.exe 1776 assistant_installer.exe 3756 browser_assistant.exe 3256 opera.exe 1324 opera.exe 5008 browser_assistant.exe 4868 opera.exe 3064 opera_crashreporter.exe 2720 opera_crashreporter.exe 1536 opera.exe 3016 opera_crashreporter.exe 1296 opera_crashreporter.exe 1544 browser_assistant.exe 1560 opera.exe 4772 opera.exe 4884 opera_crashreporter.exe 3932 opera_crashreporter.exe 2568 opera.exe 1732 opera.exe 2108 opera.exe 1660 browser_assistant.exe 3212 opera.exe 5288 opera.exe 4244 opera.exe 1788 opera_crashreporter.exe 2208 opera.exe 2464 opera.exe 4944 opera_crashreporter.exe 808 opera.exe 4908 opera.exe 3704 opera.exe 2740 opera.exe 2756 opera_crashreporter.exe 5632 opera_crashreporter.exe 5544 opera.exe 4972 opera_crashreporter.exe 4140 opera.exe 6320 opera_crashreporter.exe 6240 opera.exe 4388 opera.exe 4628 opera.exe 6044 opera.exe 6148 opera_crashreporter.exe 6804 opera.exe 6548 opera.exe 2780 opera.exe 7208 opera.exe 7216 opera.exe 7408 opera.exe 7428 opera.exe 7736 opera.exe - Loads dropped DLL 64 IoCs
pid Process 4528 assistant_installer.exe 4528 assistant_installer.exe 5784 assistant_installer.exe 5784 assistant_installer.exe 4232 assistant_installer.exe 4232 assistant_installer.exe 1756 assistant_installer.exe 1756 assistant_installer.exe 200 assistant_installer.exe 200 assistant_installer.exe 1776 assistant_installer.exe 1776 assistant_installer.exe 3756 browser_assistant.exe 3756 browser_assistant.exe 3256 opera.exe 1324 opera.exe 5008 browser_assistant.exe 5008 browser_assistant.exe 4868 opera.exe 1324 opera.exe 3256 opera.exe 1536 opera.exe 1536 opera.exe 4868 opera.exe 1544 browser_assistant.exe 1544 browser_assistant.exe 1560 opera.exe 1560 opera.exe 4772 opera.exe 4772 opera.exe 1732 opera.exe 1732 opera.exe 2568 opera.exe 2568 opera.exe 2108 opera.exe 2108 opera.exe 1660 browser_assistant.exe 1660 browser_assistant.exe 3212 opera.exe 3212 opera.exe 5288 opera.exe 5288 opera.exe 2208 opera.exe 2464 opera.exe 2208 opera.exe 2464 opera.exe 1732 opera.exe 4244 opera.exe 4244 opera.exe 808 opera.exe 808 opera.exe 4908 opera.exe 1732 opera.exe 4908 opera.exe 2740 opera.exe 2740 opera.exe 3704 opera.exe 3704 opera.exe 1732 opera.exe 5544 opera.exe 5544 opera.exe 1732 opera.exe 4140 opera.exe 4140 opera.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- System Location Discovery: System Language Discovery 1 TTPs 13 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaInstaller (1).exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OpInst.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Assistant_130.0.5847.41_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe - System Time Discovery 1 TTPs 3 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 2568 opera.exe 6804 opera.exe 6760 opera.exe - Checks processor information in registry 2 TTPs 7 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe - Enumerates system info in registry 2 TTPs 64 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" assistant_installer.exe - Modifies registry class 56 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\URL Protocol opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\ddeexec\Application\ opera.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.html installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.opdownload installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.opdownload\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.htm installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications\opera.exe installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\ddeexec installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.pdf\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" \"%1\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32 installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455} installer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{C0A793E9-4D4A-433F-8CBF-B2638A7C6837} opera_gx_splash.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xhtml installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\133.0.5932.34\\notification_helper.exe" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe\" -noautoupdate -- \"%1\"" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\FriendlyTypeName = "Opera Web Document" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\DefaultIcon installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\ddeexec\ installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\ddeexec\Application installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.shtml installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.shtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications\opera.exe\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\133.0.5932.34\\notification_helper.exe\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.html\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.pdf installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.shtml\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\ddeexec\Application\ installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.htm\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\URL Protocol installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\ddeexec\Topic installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.html\OpenWithProgIDs\OperaStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.pdf\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xht\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xhtml\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node\CLSID installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\command installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xht\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications\opera.exe\shell installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera\\opera.exe,0" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\ddeexec\ opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\OperaStable\shell\open\ddeexec\Topic\ opera.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.htm\OpenWithProgIDs\OperaStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications\opera.exe\shell\open\command installer.exe - Suspicious behavior: EnumeratesProcesses 3 IoCs
pid Process 6304 opera.exe 6304 opera.exe 6304 opera.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs
pid Process 1324 opera.exe 1324 opera.exe 1324 opera.exe 1324 opera.exe 6044 opera.exe 6044 opera.exe 6044 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 1324 opera.exe Token: SeCreatePagefilePrivilege 1324 opera.exe Token: SeShutdownPrivilege 1324 opera.exe Token: SeCreatePagefilePrivilege 1324 opera.exe Token: SeShutdownPrivilege 1324 opera.exe Token: SeCreatePagefilePrivilege 1324 opera.exe Token: SeShutdownPrivilege 6044 opera.exe Token: SeCreatePagefilePrivilege 6044 opera.exe Token: SeShutdownPrivilege 6380 opera_gx_splash.exe Token: SeCreatePagefilePrivilege 6380 opera_gx_splash.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe Token: SeShutdownPrivilege 6304 opera.exe Token: SeCreatePagefilePrivilege 6304 opera.exe - Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 5008 browser_assistant.exe 3756 browser_assistant.exe 3756 browser_assistant.exe 5008 browser_assistant.exe - Suspicious use of SendNotifyMessage 4 IoCs
pid Process 3756 browser_assistant.exe 5008 browser_assistant.exe 3756 browser_assistant.exe 5008 browser_assistant.exe - Suspicious use of SetWindowsHookEx 12 IoCs
pid Process 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe 6304 opera.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4360 wrote to memory of 2572 4360 OperaInstaller (1).exe 87 PID 2572 wrote to memory of 3264 2572 OpInst.exe 88 PID 3264 wrote to memory of 1376 3264 installer.exe 89 PID 3264 wrote to memory of 4232 3264 installer.exe 90 PID 3264 wrote to memory of 5388 3264 installer.exe 91 PID 5388 wrote to memory of 4088 5388 installer.exe 92 PID 3264 wrote to memory of 1020 3264 installer.exe 94 PID 3264 wrote to memory of 4528 3264 installer.exe 95 PID 4528 wrote to memory of 5784 4528 assistant_installer.exe 96 PID 5388 wrote to memory of 2656 5388 installer.exe 97 PID 2656 wrote to memory of 5308 2656 installer.exe 98 PID 2656 wrote to memory of 4232 2656 installer.exe 99 PID 4232 wrote to memory of 1756 4232 assistant_installer.exe 100 PID 4232 wrote to memory of 200 4232 assistant_installer.exe 101 PID 200 wrote to memory of 1776 200 assistant_installer.exe 102 PID 200 wrote to memory of 3756 200 assistant_installer.exe 103 PID 3756 wrote to memory of 3256 3756 browser_assistant.exe 104 PID 2656 wrote to memory of 1324 2656 installer.exe 107 PID 5008 wrote to memory of 4868 5008 browser_assistant.exe 110 PID 3256 wrote to memory of 2720 3256 opera.exe 112 PID 1324 wrote to memory of 3064 1324 opera.exe 111 PID 3756 wrote to memory of 1536 3756 browser_assistant.exe 113 PID 1536 wrote to memory of 3016 1536 opera.exe 114 PID 4868 wrote to memory of 1296 4868 opera.exe 115 PID 3756 wrote to memory of 1544 3756 browser_assistant.exe 116 PID 1544 wrote to memory of 1560 1544 browser_assistant.exe 117 PID 5008 wrote to memory of 4772 5008 browser_assistant.exe 118 PID 1560 wrote to memory of 4884 1560 opera.exe 119 PID 4772 wrote to memory of 3932 4772 opera.exe 120 PID 1324 wrote to memory of 1732 1324 opera.exe 121 PID 1324 wrote to memory of 2568 1324 opera.exe 122 PID 1324 wrote to memory of 2108 1324 opera.exe 124 PID 5008 wrote to memory of 1660 5008 browser_assistant.exe 125 PID 1544 wrote to memory of 3212 1544 browser_assistant.exe 123 PID 1324 wrote to memory of 5288 1324 opera.exe 126 PID 1660 wrote to memory of 4244 1660 browser_assistant.exe 128 PID 3212 wrote to memory of 1788 3212 opera.exe 129 PID 1324 wrote to memory of 2208 1324 opera.exe 130 PID 1324 wrote to memory of 2464 1324 opera.exe 131 PID 1324 wrote to memory of 4388 1324 opera.exe 213 PID 4244 wrote to memory of 4944 4244 opera.exe 133 PID 1324 wrote to memory of 808 1324 opera.exe 134 PID 1544 wrote to memory of 4908 1544 browser_assistant.exe 135 PID 1660 wrote to memory of 3704 1660 browser_assistant.exe 136 PID 1324 wrote to memory of 2740 1324 opera.exe 137 PID 4908 wrote to memory of 2756 4908 opera.exe 138 PID 3704 wrote to memory of 5632 3704 opera.exe 139 PID 5544 wrote to memory of 4972 5544 opera.exe 141 PID 1660 wrote to memory of 4140 1660 browser_assistant.exe 142 PID 4140 wrote to memory of 6320 4140 opera.exe 143 PID 1324 wrote to memory of 6240 1324 opera.exe 145 PID 1324 wrote to memory of 4628 1324 opera.exe 147 PID 2656 wrote to memory of 6044 2656 installer.exe 148 PID 6044 wrote to memory of 6148 6044 opera.exe 149 PID 6044 wrote to memory of 6548 6044 opera.exe 150 PID 6044 wrote to memory of 6804 6044 opera.exe 185 PID 6044 wrote to memory of 2780 6044 opera.exe 152 PID 6044 wrote to memory of 7220 6044 opera.exe 154 PID 6044 wrote to memory of 7208 6044 opera.exe 153 PID 6044 wrote to memory of 7216 6044 opera.exe 155 PID 6044 wrote to memory of 7228 6044 opera.exe 156 PID 6044 wrote to memory of 7408 6044 opera.exe 157 PID 6044 wrote to memory of 7428 6044 opera.exe 212 PID 6044 wrote to memory of 7736 6044 opera.exe 159 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\OperaInstaller (1).exe"C:\Users\Admin\AppData\Local\Temp\OperaInstaller (1).exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4360 -
C:\Users\Admin\AppData\Local\Temp\OpInst.exe"C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=12⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2572 -
C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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3⤵
- Enumerates connected drives
- Executes dropped EXE
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3264 -
C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x2b4,0x2b8,0x2bc,0x290,0x2c0,0x7ff73ce7ad88,0x7ff73ce7ad94,0x7ff73ce7ada04⤵
- Executes dropped EXE
PID:1376
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\installer.exe" --version4⤵
- Executes dropped EXE
PID:4232
-
-
C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=3264 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_20260710112516" --session-guid=35c866c9-9469-4a9a-b122-630606274496 --server-tracking-blob=ZTRiYmMzYTRkZWE4YTE5ZTM4MTUyZGIxZjBjZDI5NDdkMDhjODgzNDUyYjUxMzExMGJjZGM0ZDllMTQxM2QyYjp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTEiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzgzNjc5MTE0LjM2MDMiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiI5YjgyYzk1Ny00YzdmLTQzODUtYjNmYy1iMzMwZDM4ZDdlMzIifQ== --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0C080000000000004⤵
- Enumerates connected drives
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5388 -
C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exeC:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff73ce7ad88,0x7ff73ce7ad94,0x7ff73ce7ada05⤵
- Executes dropped EXE
PID:4088
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe" --backend --initial-pid=3264 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161" --session-guid=35c866c9-9469-4a9a-b122-630606274496 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.345⤵
- Enumerates connected drives
- Executes dropped EXE
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2656 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x2b8,0x2bc,0x2c0,0x294,0x2c4,0x7ff63c54ad88,0x7ff63c54ad94,0x7ff63c54ada06⤵
- Executes dropped EXE
PID:5308
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=06⤵
- Adds Run key to start application
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4232 -
C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x684040,0x68404c,0x6840587⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1756
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=07⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:200 -
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xf44040,0xf4404c,0xf440588⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1776
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"8⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3756 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3256 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd6228010⤵
- Executes dropped EXE
PID:2720
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream9⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1536 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd6228010⤵
- Executes dropped EXE
PID:3016
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x274,0x2a4,0x2a8,0x28c,0x2ac,0x137c830,0x137c83c,0x137c8489⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1544 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1560 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd6228011⤵
- Executes dropped EXE
PID:4884
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:3212 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd6228011⤵
- Executes dropped EXE
PID:1788
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4908 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd6228011⤵
- Executes dropped EXE
PID:2756
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\de932af914ba00303d4a2778a383ac9c831101e2.crx"6⤵
- Adds Run key to start application
- Drops file in Windows directory
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1324 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd622807⤵
- Executes dropped EXE
PID:3064
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,7683512523098480777,643248026086537443,262144 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2080 /prefetch:27⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1732
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1916,i,1145264006890844773,13668907913761374705,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:117⤵
- Executes dropped EXE
- Loads dropped DLL
- System Time Discovery
- Enumerates system info in registry
PID:2568
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2496,i,9562199357563217765,11448998421696636301,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2508 /prefetch:137⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:2108
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3384,i,7549553108684408601,14427291400445177262,2097152 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3508 /prefetch:97⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5288
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4248,i,17400778085148419018,7648626649514223736,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=2968 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:2208
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4268,i,9449213435566953534,7625317086259414811,2097152 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4304 /prefetch:97⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:2464
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4620,i,10480187014614492002,1207977294161746604,2097152 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4672 /prefetch:97⤵
- Executes dropped EXE
PID:4388
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4900,i,10204979856527842393,11767518144450079787,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4860 /prefetch:127⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:808
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4260,i,11922360262937979637,17597027024892663507,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4264 /prefetch:147⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2740
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5248,i,16995527403126298464,2369131979981699780,524288 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=1856 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6240
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5392,i,3440406289166471576,893793206274644496,2097152 --field-trial-handle=2084,i,3741939773998518939,9601978398116449372,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2096,i,9237875623873431920,9021177248192481080,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5452 /prefetch:17⤵
- Executes dropped EXE
PID:4628
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\additional_file2.tmp"6⤵
- Adds Run key to start application
- Drops file in Windows directory
- Executes dropped EXE
- Checks processor information in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:6044 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd622807⤵
- Executes dropped EXE
PID:6148
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,10764767989972721210,17185695313573924549,262144 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2096 /prefetch:27⤵
- Executes dropped EXE
PID:6548
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1948,i,13997506528295504286,353807811401481174,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2132 /prefetch:117⤵
- Executes dropped EXE
- System Time Discovery
- Enumerates system info in registry
PID:6804
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2488,i,14411170459914419214,6123539396634163811,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2504 /prefetch:137⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:2780
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3836,i,5527250822370969749,14907468462546751927,2097152 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4120 /prefetch:97⤵
- Executes dropped EXE
PID:7208
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3956,i,163564410665668351,1134027276725292100,2097152 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4164 /prefetch:97⤵PID:7220
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3240,i,14349380547977103332,460623776271411944,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4144 /prefetch:147⤵
- Executes dropped EXE
PID:7216
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4036,i,16053765375367268817,7239723476533591313,2097152 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4184 /prefetch:97⤵PID:7228
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3896,i,9789961462202786941,6707537488976952413,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3188 /prefetch:127⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4136,i,1757572263331458736,16572867826933287095,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5088 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7428
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5076,i,4322505284344197538,6843720063342109613,524288 --field-trial-handle=2100,i,9566916556334695541,10890381181946780420,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,4700912969388742476,5109296059062780368,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5228 /prefetch:147⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:7736
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized6⤵
- Adds Run key to start application
- Drops file in Windows directory
- Checks processor information in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:6304 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x2ac,0x2b0,0x2b4,0x2a8,0x2b8,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd622807⤵PID:7696
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1712,i,2948728509467138498,14195152787008360430,262144 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2028 /prefetch:27⤵
- Enumerates system info in registry
PID:8180
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1940,i,13179573018366717975,3499748245265968355,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2068 /prefetch:117⤵
- System Time Discovery
- Enumerates system info in registry
PID:6760
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2508,i,7875911338525921665,15194578031875370139,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2712 /prefetch:137⤵
- Enumerates system info in registry
PID:6776
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3192,i,3415375604312930305,15264376167442489666,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3180 /prefetch:147⤵PID:7888
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3200,i,3341374811704688513,1539559009395356409,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3236 /prefetch:147⤵PID:7720
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3212,i,7801210771918825760,4388069795330485544,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3256 /prefetch:147⤵
- Enumerates system info in registry
PID:6900
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3232,i,6576865027926900541,17035949724598162077,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3320 /prefetch:147⤵
- Enumerates system info in registry
PID:7896
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3284,i,17095945675168988091,4821236113255637713,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3340 /prefetch:147⤵
- Enumerates system info in registry
PID:5776
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3296,i,16405079836410192081,2884746669678037291,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3360 /prefetch:147⤵
- Enumerates system info in registry
PID:6524
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3308,i,1924294624494166372,7836159889775989474,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3380 /prefetch:147⤵PID:6840
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3528,i,11432609998833886477,1868249054090134818,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3648 /prefetch:17⤵
- Enumerates system info in registry
PID:3180
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C967⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:6380
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4708,i,16505029272207612153,7089256679614804936,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4720 /prefetch:97⤵PID:4080
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4880,i,2127628337722496289,14613984103393220287,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4892 /prefetch:17⤵
- Enumerates system info in registry
PID:7016
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5056,i,12143715408433279382,7299474966563653896,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5088 /prefetch:17⤵PID:2236
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5100,i,18052828840589066247,13791581488051218780,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5132 /prefetch:17⤵PID:6592
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5712,i,10866594994772548273,14766910695812514690,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5928 /prefetch:97⤵
- Enumerates system info in registry
PID:3432
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6652,i,14074833282054997359,1454072676364797587,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6728 /prefetch:97⤵
- Enumerates system info in registry
PID:5608
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6780,i,15526336907465938369,18282438791195459017,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6784 /prefetch:97⤵PID:5104
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6584,i,9057568984585736707,5520246542701428477,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6460 /prefetch:147⤵PID:7748
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5048,i,1814433155643391647,8127281488853665348,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=4712 /prefetch:147⤵PID:7664
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6388,i,13832587934229483915,16193025403770460348,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7340 /prefetch:147⤵
- Enumerates system info in registry
PID:7964
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6580,i,4095792474970660384,8751662719995790032,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6416 /prefetch:147⤵
- Enumerates system info in registry
PID:8016
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5852,i,2194192192989740520,16087867839673742410,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7184 /prefetch:147⤵PID:6804
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6488,i,1865752652929203590,10417616834755594171,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6456 /prefetch:147⤵PID:7288
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6512,i,4105366641534099177,15913889471858258217,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7948 /prefetch:147⤵PID:7340
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7892,i,16233488235465158927,8193821119851241683,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7968 /prefetch:147⤵
- Enumerates system info in registry
PID:7444
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7904,i,1156723066034746676,7259706900302818048,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7988 /prefetch:147⤵PID:7448
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7912,i,1678368308149875331,9055257023511524065,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8032 /prefetch:147⤵PID:7468
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7924,i,821985677429807370,6391066924406187690,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8068 /prefetch:147⤵
- Enumerates system info in registry
PID:7924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7936,i,226981374212803110,5626180783670600015,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8092 /prefetch:147⤵
- Enumerates system info in registry
PID:6532
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8008,i,10108869550454512465,3354706774610281070,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8724 /prefetch:147⤵PID:7360
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8924,i,16117233931767965219,2882009887283085866,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8912 /prefetch:147⤵
- Enumerates system info in registry
PID:1508
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6440,i,18015591371883615369,13595462183448736721,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9180 /prefetch:147⤵PID:4732
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=8940,i,3379301310088211627,4976135969219987250,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9000 /prefetch:97⤵PID:6332
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8752,i,13284770190584493082,8275641308118900793,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8768 /prefetch:127⤵
- Enumerates system info in registry
PID:5164
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=9432,i,10961214638651252394,2525450922261006140,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9504 /prefetch:17⤵
- Enumerates system info in registry
PID:6064
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9760,i,3002785661747806257,7983177800179889732,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9784 /prefetch:147⤵
- Enumerates system info in registry
PID:4332
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9732,i,15765690896046241817,1821838480508421475,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9776 /prefetch:147⤵
- Enumerates system info in registry
PID:7008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10072,i,12877620943127980196,1811507849418523936,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10020 /prefetch:147⤵PID:2396
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8972,i,17872095376993454562,12572183673376610991,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=8964 /prefetch:147⤵
- Enumerates system info in registry
PID:8480
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10372,i,610662313812042316,7839082661161940494,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10428 /prefetch:147⤵PID:8704
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F1617⤵PID:9084
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff70add8860,0x7ff70add886c,0x7ff70add88788⤵PID:7496
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=10892,i,15866265918547767219,16418937699190130116,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11000 /prefetch:17⤵PID:9120
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11088,i,1751016642185854904,11568001061428737626,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11096 /prefetch:147⤵PID:9204
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7984,i,18246535683240567367,9815854751083367071,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=8692 /prefetch:147⤵PID:7484
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11364,i,18434255653580985625,10317345228511168896,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=8664 /prefetch:147⤵PID:2600
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11488,i,9284487274547339274,17507350628686324220,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11500 /prefetch:147⤵
- Enumerates system info in registry
PID:7428
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3952,i,9166332789466531022,2583164876058724622,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3960 /prefetch:147⤵PID:4388
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6748,i,10651820183321161508,16474657290663161242,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=3892 /prefetch:147⤵
- Enumerates system info in registry
PID:3920
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3432,i,13341795834124243569,6815289769776867097,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3252 /prefetch:147⤵
- Enumerates system info in registry
PID:8252
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11416,i,7947233776984811680,5214032362632164737,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11404 /prefetch:147⤵
- Enumerates system info in registry
PID:8328
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5432,i,12024288373901311802,230372946180985419,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=5300 /prefetch:147⤵
- Enumerates system info in registry
PID:6876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3796,i,16890605464007612825,4567720639386411461,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=3772 /prefetch:147⤵
- Enumerates system info in registry
PID:8980
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=9928,i,14806301790153102133,14492222156671030320,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=9964 /prefetch:97⤵
- Enumerates system info in registry
PID:7268
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8388,i,17537338012411634916,11161375915382199401,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8464 /prefetch:147⤵
- Enumerates system info in registry
PID:9184
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9188,i,542807167359473548,11866249963761698740,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=9924 /prefetch:147⤵PID:6652
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7260,i,5210547978805820791,17470735035982340493,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=7336 /prefetch:147⤵
- Enumerates system info in registry
PID:9144
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9208,i,17735663714457268041,1914666612562776893,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=11500 /prefetch:147⤵PID:5556
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8676,i,16182640151781611754,15686107628008646209,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=4712 /prefetch:147⤵
- Enumerates system info in registry
PID:3036
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6888,i,8663050135655351216,16658427814900467205,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=5448 /prefetch:147⤵PID:8992
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7896,i,8703929266819704031,15932214336671742461,524288 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3292 /prefetch:147⤵
- Enumerates system info in registry
PID:7664
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=3480,i,9779721506502511145,10085746119379979787,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=3440 /prefetch:97⤵
- Enumerates system info in registry
PID:6532
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=5440,i,11904076275080905853,1571078051997524709,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=11428 /prefetch:97⤵PID:6272
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=11396,i,14769881381407808637,488556455236098415,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8072 /prefetch:97⤵
- Enumerates system info in registry
PID:8984
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=3888,i,1202045931833919200,11971993394074561537,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=5844 /prefetch:97⤵PID:9128
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=6944,i,8758131290118066631,9413842487731660417,2097152 --field-trial-handle=2032,i,1092057220408808504,7820976950080350598,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2036,i,2596250260018372016,665888098469615421,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=3956 /prefetch:17⤵
- Enumerates system info in registry
PID:7800
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"4⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:1020
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe" --version4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4528 -
C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x684040,0x68404c,0x6840585⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5784
-
-
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:1460
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5008 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4868 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd622803⤵
- Executes dropped EXE
PID:1296
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream2⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4772 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x298,0x29c,0x2a0,0x294,0x2a4,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd622803⤵
- Executes dropped EXE
PID:3932
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exeC:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x2c0,0x2c4,0x2c8,0x29c,0x2cc,0x137c830,0x137c83c,0x137c8482⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1660 -
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4244 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd622804⤵
- Executes dropped EXE
PID:4944
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3704 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd622804⤵
- Executes dropped EXE
PID:5632
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream3⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4140 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd622804⤵
- Executes dropped EXE
PID:6320
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:5544 -
C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exeC:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffb3cd62260,0x7ffb3cd62270,0x7ffb3cd622802⤵
- Executes dropped EXE
PID:4972
-
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:6464
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC11⤵PID:9088
-
C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exeC:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.34 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff70add8860,0x7ff70add886c,0x7ff70add88782⤵PID:8540
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version2⤵PID:8836
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵PID:1548
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 1KB
- SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
- MD5 adac67e1d2da2d706db151c2db316b2d
- SHA1 5f6e301d23e33132209707945d0e740d5bcb8996
- SHA512 9371b62ac25c6ea8fb6fca19ac47b873ced9b3d0cb45ce4de5ea974b93c12684c65aa23c7d83331c77502853258a08dff73ce5e3fb6170bd3ab1c5b3283a86a9
- TLSH T1DE31AD4EA2153027D5427F72D8CEBE83CEB1364667CAD46B18046E4229AAFC25FC80C9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
- Size 528B
- SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
- MD5 047f3e9d21d6b325d592b1959e4362e6
- SHA1 5aeef5f985171cd69da397fd039854e44ebecdd2
- SHA512 4523896ed4a03afafd2075d8c8947236d34fe1da2c246a3f90c2be2a5c151c18bc58a6cde5a209abb8e06e80f662e24d0149640b3e98e8a872bfa8a04ef592a4
- TLSH T147F0500990082252C855FF55DFD6AC97DC76336136E595036D458E410C12F96AF950F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 471B
- SHA256 e15fde1c644488d02e6a4274f3a9500140feb05ccda9f2b57af35aacb5e7d347
- MD5 9bf8d46b559275bf44a4e1a04938f9d4
- SHA1 18ab830aa5547e784eead345048150623b7785cc
- SHA512 0f36fc70d9789d3fbb1c882ebe84a0c045cbed8b71accbf3274e02c084d60b10430beae610599a70dae0a3267619917c4ec19472b7e22ca2feeae125b8a617f7
- TLSH T1C8F0DCC3699DEC11351268EC46E58D3E343E612908F6A591648CA0F58B783EA7F0207A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 174B
- SHA256 f7b3d39d7f13f67073408fc778f807d432d39b624874fc64386903160339393c
- MD5 149b53569ce5bbc37c17f87e3dc84ca0
- SHA1 5c2d2bfeae3efb2b94266a91f4ee3f92e71c1c79
- SHA512 cb7507f9dd1a3d287476b18c69f70fff73546edd52e276ea5f588d05031e95267c20e5b33424940b91989a58798b36f491159b1c3f738484c03d7487a7118345
- TLSH T18DC04C0437B64155F1344D7F165293129BFAA5068E5183544F645259C51DB4298A5D06
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
- Size 170B
- SHA256 d678740e32898a37de2082991deec3094af52058ede369e62c5db532f684b9ca
- MD5 33a05fbb4a95af784e0c0a0084b45e8a
- SHA1 af6c61eab6e61442b62322fd794913401ecb3151
- SHA512 68df92b1ffcde21e6dbd5f4cdb43c5b91a61e2cacdfa3a7a76d59701e7e5e29e459810622106bfcc338895f7fec491e2ebb8e913665fab0c573ccfea2634faa3
- TLSH T16CC09B1473654715F10D153D79D55A0457B54206F5D6C3044B7421748519B4048B1D45
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 416B
- SHA256 1c114e01d5650aa7892b7d1208bfb329aa48ba7cfccd7e99c73f11afd06dd0d7
- MD5 bf7de77413b898b202dbffca57ed5b95
- SHA1 68f3482e1386662f8349accdfade8827cb1e3c74
- SHA512 9c7e04f16b256d7ed9ba934c216b9d815cea9468ff6f226ecd78a69b617ac789123ffeb57d154b5a794491567e4904d1c2dcb5f47371760e0d4dedfc29c85609
- TLSH T12EE0C02425FB416EF0F4D4744FD5B5311D56F026142CB2BC1AE44704B706E00FE12A74
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
- Size 44KB
- SHA256 1c3e06e4141577a629e4de0f7ee457a77f2668a39769ff3f991c1bc6b5d69341
- MD5 1e7c94241c6c92793349c6ab413af359
- SHA1 084e19821bbf7601f0c625ef9c4684718b73388d
- SHA512 67ebedec92e0acfb6918d3224f529739b8b1dcbeab30b3cd22ae351b5f2814f873825b721360d709b8c93b067e9eda908cd2c348ad3f804d8137397cc53680a7
- SSDEEP 3:MsFlTlrllkl2rkvYRa/UkflD5+A9Ra/ud0Pl:/F02Yv8rkN9+Edd0P
- TLSH T10213126D5BC04803D65D41385E439B70B275C400C10293331094783410C070D0C78240
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
- Size 162KB
- SHA256 5e0d7453083183ba6e075d3c92e73e9c9e6f315b6ab0237de08bf2873f141c2f
- MD5 6dc43dd276324a2580099d0dc3941e10
- SHA1 176a53a02c0c97f3c9cbd9384b6dfb7ebfb3245e
- SHA512 9c65213e1225509df8987cf348d14aa29503be4a8b11163d1c434e62c64a291dc4d57212ef1bf7122a5ff0a1e4e16182d03a8bdc19f90011be9ac36fdceb2c00
- SSDEEP 3072:fRRaSHdG28hUCn5q/UJ2qB70zzKUmQPURAMZP0o4zkM5R88slATEkkH2cIiyr2D:fSS9Z8h95q4B70zzmQsRIZz77slABkQO
- TLSH T197F31262D8EB64E7FCA62432CE52941B01E8D21547F0DE80B08BBEE60D8957FC6691DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\133.0.5932.34.manifest
- Size 225B
- SHA256 263b6d3a0906d766fb973078f348a9d3efe543a7e58f4c9fb209bacf32500f21
- MD5 44d6acc66d17a7d27bcc09a8a4fed806
- SHA1 598f78fe892a3e5ee18a4c3cb88207f8d2d016b8
- SHA512 f824af4dcf89843a42f07db426801984f4b5c08e250e66dfbaa59c17fab44e978e4e4ab0a2b20c2c39733121ace9627dea812169230124af5b4964889b7f17e2
- TLSH T1A3D0A905848522896F2142703CAA300942ACC7A74488608C78FC7867BFB392CA1828B8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-100.png
- Size 1KB
- SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
- MD5 f4d70bc86e8544d7758742c2eba89d47
- SHA1 5df4635794ab25e2f88bcf8ec39c19a09383a029
- SHA512 d20cbd543bf97890d64c07f9e99188604f4dc5def904ad74229a3b1d9d9a06fff93af711c99a178799e9de472d930aa52a0c154f0d2953abe5ffc3cfd1708ab9
- TLSH T11811C840D668A4ECCCCD5DBAB2BC3893D7529C198049B1DB4CE1E8E38C303050976E0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
- MD5 7f69f89f11fd675b36e8de01de3c29ad
- SHA1 b91e00e68889367de138ffa5e7fb3c9de2a18467
- SHA512 06c162296c5ac62429e6e5dec07b836e6053cb4eb0291d8ed904f71cc42352c134870ed964517d2600f03fd7cf3821ee877ea83a330c9597fd7d629f9c2a6432
- TLSH T1081184F6422D2D1DF58532B16EE55FE299A82B2535D0BA425008C1194E2B512C900180
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-140.png
- Size 1KB
- SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
- MD5 a0076d9b3db9054267a7c86c9323aea1
- SHA1 22b85aeec3e3804fe1f6e91d5a9ac1c6a0153b6c
- SHA512 8fb750bddea61501f8ce2b0d0c27d29f322c9f297777f26b1401696c836c844369a9f6890bbb9827682deb70004cd98a973a0742d2d218f12a9fc3c301f10985
- TLSH T10121F84FCC2CE4E4CEDD49323C15A326A33021C950036F8A99CAD3F2876474C68B71D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
- MD5 f601df01a867a51514ea89ac9bfe9b86
- SHA1 827cf9859b7b1864236cd1f03e8aa40758285e82
- SHA512 2714e67298058e8fdad4459cfa17e2c7c67353bbfd9ea850bb403e669ae085ba579c31f7d64889470a97565719342e6a30efe2f66566783197194433aa947600
- TLSH T1DE21B45BA702048EC2065E3F4D54C81B6591FFAAA3B3DD4B265303B0A44217E18E76B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-180.png
- Size 1KB
- SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
- MD5 0a76f51f6169a31402ff7c61cfd05161
- SHA1 843a32d6dc0d5b9d97c5f475f96e49852823a103
- SHA512 7056949d7aa9cc4c96f9c13d656cfffa9f9a49ca78f6be3037cd38cc1d8712917cc235099f24723bba26fc9ffdba015480309d0418961c1116dbe7b65de6301f
- TLSH T14A31D8C629E310F9F9FC01F501126A6CD7C095D41162215B68CADDB42CB37257BB90A5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
- MD5 67a0163cd9753e42360222a17173f593
- SHA1 e4ee5c2288cbd5d354aad1905b917285a3daeb92
- SHA512 87e69e15ba6dee402dbe5a90da864136ec2c6884c204a567ad461e0181e70514f73a7df22a47de63d4829fa937e56fc4c08cb6c5268313f7b9af1e7217d81f47
- TLSH T10F313C6F5D568577E37C42BCBA7085F5D325B31C400727106F34B2983814E5521A89CD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-80.png
- Size 827B
- SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
- MD5 95a8f1834d8da00ad94c0cf2aa09853c
- SHA1 7e830e3ef55b4d7b9a18ec8c151bebb2c28f0069
- SHA512 c89be6e503c26efd4eec12c77e091570e187ff64928cab01f6f873d9ca3769f019a1724f76b57c9d4038495e29cc4106f919082913323af1ece7aff820c828f1
- TLSH T16C0120FB28489DD0CEE79271529CC55D9BC259065A80D0F7D2E9D8C05D33B49E678810
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\150x150Logo.scale-80_contrast-white.png
- Size 799B
- SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
- MD5 3015766c5ca769e54009f167550f7389
- SHA1 0eff02455a1e0fa1724bb1d4333c3d24329f9e9a
- SHA512 7ea7495163e0246f78f88dfd0ee72b8584108c286227d70cec9de125747f21f2618f46f7197f7cb9c0f40d297bcc3582cf70f54ebf7f9eb10941fbaa6bf0149b
- TLSH T17B010AC8D032EEA5D91788F36CA24FD59CEF42F000181B2C84A880913C030D6B03ECA5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-100.png
- Size 781B
- SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
- MD5 ef710f4543a25076078fbc1c09ec9e2c
- SHA1 e4ea1c2cb24cfff03569dab28877d11f9c6cfc74
- SHA512 fc979d06806a69da71336533d96b1cb66b227064a224e23c6f5bf9d1fe4e85a9d9546643ce296ba5f04c025284d5ca2c445c52695aae669735a2a5b48ce07a00
- TLSH T122016002E621E8FADFDE023E322C446D4725035AA706BA1F00C6F8A72EF0B4820B7049
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-100_contrast-white.png
- Size 752B
- SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
- MD5 ae8eecb8db4d20efbd816b887ef75840
- SHA1 1d0cc741d0a75e5e8ab51dd8b6a99f5e679ef5db
- SHA512 0cb71eb86ab2c5d4c70f04d7b10736aa453d51b56723ed7c9dc332f92ea428eb7861f23da2e30416bea8cc59877ba2c87f3032ea473028a7df8c6a299d517572
- TLSH T13501B5E19CA5D03C9D59ACB03820317AFFBF65062CA02F825474762B2010CB538E50CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-140.png
- Size 991B
- SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
- MD5 9590b4bd9378a2d8706dcbdc630fae8a
- SHA1 751eb2aa5ce4e83133a73fdb9efffc013bf37ec8
- SHA512 b2666efa916584c9b090e305eda116f2a90c58862fa36a0963176b09b493a4ce5e601a178c74be0f2e59811ad42cd1d5747e8a45ea07c3f5d52b28e177fa5603
- TLSH T13C118820BE023DEDEAD89D14E139505E86042902332860CBA0E5D4908EBE79044F095D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-140_contrast-white.png
- Size 865B
- SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
- MD5 9b103e9dfc26dd4d837df8ab55ec4fb8
- SHA1 6f46830a3a63e0eec923bccfad57d8391ac3e559
- SHA512 e8023067638a9fb849ac9364a45c8be9a6dd325fbc704d960cf270ce1075ac6c9d57b7f96cae62985e92e5543dc2f2a43d473a2dcb0060af067cd474aab7e59a
- TLSH T103118AFB1644C6ED594F572F50DA9C51734B8A3B836E80189A3C869CD190F44CB77ED1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-180.png
- Size 1KB
- SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
- MD5 7ab03a8ba1c0243b96c4124cd5341073
- SHA1 7de490dd37ebed58337fc0db654f12398e84a78a
- SHA512 c96846f008e8ab440009bf2442a2cb9db3d24452619c8c2b669395f971f9a316ec62693bb586a94e565f1cab893bf665112c34cc1fa46319e571e3fb4d2fc41d
- TLSH T18021E7612B26DDFBD7C182F1913B4A395E1CD582327461369CC2E1623C3772E1271248
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-180_contrast-white.png
- Size 1KB
- SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
- MD5 1521be4b8c8f2e0ce20a89f163de3909
- SHA1 c291448b74fc3d7060c1df4b35026084981ee441
- SHA512 6a0781d275dbf8fad4ee464e759de74399918abdc99cef3c74e5d66a0d555a8bed363da964c15e2ad9ab3cde5a17d537bbcbadb10585aa1ef50f0b614fc39a50
- TLSH T1E011BB5771622D70C791577F5868F505DC72D33134A18DCB5CDF29ABD0C62B4449C242
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-80.png
- Size 590B
- SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
- MD5 1b4ff26a106929e3a5710900a9d984e7
- SHA1 d3e1bb4fa64083743ab56ecd89d586df6b583bce
- SHA512 d8537fa3b0da1b2ee7c8cfbe9101a7dca624af4532305e06f211e4dac799ae9b533f19d3cdf052352e2a926bfe32cc908cd3944b2543010e7baefe52697add92
- TLSH T11EF0E16019445CD54FED19969A3D4F30EE5034155813BCA70DC2D8369E2634598B260D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\Assets\70x70Logo.scale-80_contrast-white.png
- Size 519B
- SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
- MD5 169dc90309162bbabf07ac3d954a076f
- SHA1 a4c87f029a4f34d66847271cdf8c5e73b1e48a90
- SHA512 b7633c8faa5614efb402c47957577dbacca1a1b3fd0bb39cf79eb3a06ec6a55f9b8c5ee9569271efbfd7d43ad348d275c0c6c9faf840663268bca2fbc6c64bb7
- TLSH T1D9F075C360D1ED222EBA2004E411ECFC747A11985B439885003B48BF7F77F20A90B088
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\assistant_package
- Size 3.6MB
- SHA256 2657d6a8131dd28868151a5f268061b61a735f3628ec9def2a0d910b870a8c36
- MD5 1e0bb20b4f6dcf29b3e2b2ab0c7f1da6
- SHA1 c1213d30354ded29465729863b5a422a4ee03c69
- SHA512 3bcae510636b5dc9cb3cb67a4151ae999e094c9c10e160779a7d2bda498ee698d9a65fb0c96b40518e52c73d4e93235c8527d7149858132bd632c4965a476989
- SSDEEP 98304:6kiocZpYKIR5HNvjdykly0iqncPYfhRgCGuw:6t3kvEkoLhwAuw
- TLSH T133063320BDE18438E56312365ED9B6B6927E76B14B325EAB33500F8DCF603D2530976B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\d3dcompiler_47.dll
- Size 4.5MB
- SHA256 849d98787d901b52a5f48c96b6bb0d8b4931bcae8478d93dc0be8662d4480ad3
- MD5 be0618a51afd136f0af9b1d3ff4d15c2
- SHA1 670496a1a09aa19802f5487132729b4be5343d62
- SHA512 42960d27f697e99a6aaa2795e8404d565693291b1c5f83cb88286c7a70490ddcbbd26b25064ad8d093331f18d256643bea612afc274472cf3b7a1dcd7fda3abc
- SSDEEP 49152:t6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/:tUdeqt737jFm5w
- TLSH T198268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\dxcompiler.dll
- Size 24.4MB
- SHA256 0c6d2ef8c5f6f67a193599e26ea2d8e2ba3f7265cb33fecbdc267e298df68aa8
- MD5 8134ba8e90b10f587fdc5c3f5052451b
- SHA1 887d749866722789d767440853a6f590f7feb751
- SHA512 2a1421046bb130acc4d387f7b04a270b1b3e3e2fbaafa91bea5b47094cf08d52b5e439d1351709d92b4c3a72e5ccdc110565170f0f3451155d6755777d9c3269
- SSDEEP 196608:q3W9ok1khD1cK6hF8d4pRJpwf0xMXzadQ8KBtboRFkR8eBapJA3OhtZV:qm9ok+hD1ci4/EcyXzadQ3t0RaBc2Gr
- TLSH T1AB4729122646D49DC059C879C7678B26CA6C30E73FA7B8DFC0B461252B79EBC5B39234
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\dxil.dll
- Size 1.5MB
- SHA256 e645ad7d3e725216726359ccfbdfcb4206be5799a5deb3a39d79c66047801029
- MD5 856cf5bf825654acd5fd42d2833b1777
- SHA1 54f036a946ff818bd0a73d0086ae6e8e7976772f
- SHA512 99dd3676401939bdddecc48b6bcf124fced57faed72be20de12dca7f127933335d97d1e2d6ce99abb1de8e55958930ed3d75821d787b1a4782e8f2195432bbc2
- SSDEEP 24576:OcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/d:OsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bo
- TLSH T101657D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\files_list
- Size 6KB
- SHA256 65ae2b1708851d551a013ed7ec11e3a0ddeb737430aa62a469b5af3e0fac5fca
- MD5 73ef7351c09a49bab90ae5b56b02253e
- SHA1 491c7aafa46936e7da48859fbf972e03c0e5174e
- SHA512 11ed78c6da85218bc72a35687e03dc5914eb7b8a3e2a5b126ad2693e5fe002de6a4189c298fee4f75c2850b9b62adab7122498259d875f1fbfd3cd24b7b2f464
- SSDEEP 96:fMyTfz5XZyITJhGwbx7Vt/JnZ7vMbngEDi1JZJiAORnOU:Uafz5XMRwbxHBZ7unmvFORnOU
- TLSH T178D10797895F0265CAFD93F1EE61F89091342495DEB83058F7C70A5694A33FE02C9ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\headless_command_resources.pak
- Size 2KB
- SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
- MD5 1f42471465becf1c26104d6624b334b3
- SHA1 6818746163a26907be02503192870c57f0b81d56
- SHA512 ab4b837cd2d94d8bf94468646087054dc27f93e9fc21b4f67f23eb77631a74dd351370b3e2b7a9272cbeb959b239b4309ae2ce1d5004a6edab468b95a011fc41
- TLSH T182511893360AB5A6C179C72891DA9A7C6BE58325748DB5744EB70C33E9384A345C2871
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\icudtl.dat
- Size 10.4MB
- SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
- MD5 f50c621247b8ddd574dc9790830f28c4
- SHA1 ea84f3a773b5b90851753353826fcdf94576b3c1
- SHA512 030df4e2c8f0354a97ac6a21774d6bab1246237bb71cc286b1a310b1a7602dc31fa056b8beb1157ac71b13d3744cba0fa71ac807e5f69fcafebb3cd827b553df
- SSDEEP 98304:nHcBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndL+j89o:nHcBhORok2HiXUxO/RJk3IWhlYntjd/o
- TLSH T1F8B62803A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer.exe
- Size 8.3MB
- SHA256 cd7570b5356bbfc8dd323d6cf68cbab8333631e5fe591779407d1edc0999b580
- MD5 6ebcf81efba45078ad22e25b4bd9665d
- SHA1 cfeb4f7a8d3f9fd478cf3d060170b000adbfcd83
- SHA512 3af8e423d061d82898187b6eea31ae5ff463fc7a93dfae76d81c811b48d879de19c9111085c4d6593f0e0b46c8ea4a2f28a639b4d5f0feffc2e6d7f2cca21ce6
- SSDEEP 98304:v/06Gb0nu7gPcI/Ztlg1RbdsuJXMZ+gYNY8AF8:H03b0sgx/zwVC+gXF8
- TLSH T1D4967C53F2E601F8D06FDA748B7A5232A9357C464B35A2EF0A9436251E71FD46B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\installer_helper_64.exe
- Size 639KB
- SHA256 3f8f95b35bda9cf3432fd3687d54f61c1854f82e0d30250360db799ccaed2a48
- MD5 20d6f9b23e7aef27d4f6aa1b2f530a31
- SHA1 a609af875eecdb5daee8a7950092c169115e4140
- SHA512 d934bedcb313ad59fffd9ca6b062945d6757f9452fe94862d614ec9d515d18450a4b2eefaafcdf8a265c70330dd43b6ab69a16710a378b84369d0f85a0130925
- SSDEEP 6144:tbuw4+28WFtzMnjBgZsFAuDyFIz8j0s1jFOUvWR9x/YON9C:tbDJWFtzhZsHyX0s1jFOU49x/57C
- TLSH T1AED49E12B2E545ECC039C1348B518522FA72BC564F35B6EF02A4726A1F7BAE45F7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\libEGL.dll
- Size 492KB
- SHA256 430b9680bd3cd33ba7047a068d0e3d528970d3ac682f75d0cfcefece5ba10bfa
- MD5 5d231b3c50b58fa035ff1d56352078de
- SHA1 a2f06480ef534607aa940e1503c3cc0a5c57bcc4
- SHA512 5d3f158645525cff89982cda0c984c73416e1f2de401fb7e50054f655e35a9aa69eb0ea502534a3da284021187ca19fc6e41fd1eace4e26fea19dd2acebb3479
- SSDEEP 6144:92g57izFVCpIdMpFzf071P7cRM+P2AcXtlOlx2K/:MPFVh2f071P7cRMu2rXtlOlf/
- TLSH T1EFB48D15B2D949ACD03AC174CA538547EB71B8520F65F6EF02A0E2792F7BBE05A7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\libGLESv2.dll
- Size 7.5MB
- SHA256 1532791918857fc8ae1d076a05114bf11e9ed9c4a3149d6eb35d2fea1033a430
- MD5 ae4dbaad8cc39c979e582e9f4ef67f6c
- SHA1 4094a9d8fe902ee4275f8dfe9354ef761efa4fe2
- SHA512 21eebf73c710657221ade9c548c75f4c6d3049b5e55099b0404a17c0240126f921ee21440937d0e58960b21359d156857e6cdcb9b123313d5fcd2d1575a5e2d6
- SSDEEP 49152:o5rxdxfXD43FVfqKckZphPavOeQOSTm7a/HK3LvJ1GYqcqA5SSBaFkFerC+jsQ5C:uc37NzUOZMqEaOe4QU+xcmoC4xAkB
- TLSH T116867C13F69680DDC01DE2B49757A223F634B8450764B2CF2A9463163F7AFE0AB7A714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\bg.pak
- Size 1009KB
- SHA256 5c093d5331235d36141d943b4ccf33e73af1c860b9527304ce2a80947f6b9f79
- MD5 9459d1deb3de10f467c01d6e12478fb7
- SHA1 4a49b1b2c22adb3d8780365d96d6dbeaad179306
- SHA512 e09a7fc23cd3f3edbfeaf7d6ae9b35e6a88386945508bca63fd64914dd6e726fe1742fa4515dd04e20fd6d7b9a388d03e85a12a33d4e3be51322ef11d9969211
- SSDEEP 24576:pEI6WqyE4TrDb3JeobvGGml9cIWdBBuK026g2HQ2CiZ0vYAgCzQkECBU+Vb6mHI9:pEKBbBG5edBBuK0tQ2CiZ0vYAmCU+Vbi
- TLSH T1D02525A15B9A649F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B887BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\bn.pak
- Size 1.3MB
- SHA256 3143ad5b348c3c583c2d8bb29217db4b21ec4dcc9182679561f0215199a67776
- MD5 afd24b69f798874424bacda776149f38
- SHA1 66345d078a9d2939267ffe14d09d167ddb287dd0
- SHA512 3ad8b145ce16cfd3b2d9bb8a1b33d014af45b819a7e156ad270abf0948c59756c56385ea93a81bf959d68cad1d6e00596714c5105ebc3a191eff64e07dd13462
- SSDEEP 3072:SLNV+0L7MciQx/D91hIgbtIHhFQwg/+yneX0hg1UdInW2Kr9iUPD7S:E+47M9Ql91h5aQwgk0hsnWPS
- TLSH T15E55EF209C6E81B2A8D5CDC9434C6370C123AE979B61F74DDC17A25938ADC3C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\ca.pak
- Size 635KB
- SHA256 19dabe0db6bd7ab457a72fb2fc4c61f0ada1469061d053af047b31661b25720c
- MD5 50e4b256d1fa2d3c54fa817430a73f73
- SHA1 fe3eb9fa2e3da3873ff6221bc45c88ce3650dcf3
- SHA512 ae352b74052a5f79695a6d129ae0ec794bec8e2be13311e215f8bea12b733b6554d37492d273c482ba71559fe92342cf6969f545348ff184a28f23b689b5fc24
- SSDEEP 12288:p8U17G6ybGbf1bCCrz+W58rPolpt0bziV56M6AqHl9kdkcBKMe3aRYUX1qO5g5if:pZVSaWNoLwF08BMZthjDNLd
- TLSH T171D408238BC83B760493330AFB42C257F09CA9847B16D254F5EE1A5622CCBDCD677A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\cs.pak
- Size 634KB
- SHA256 1fab3e2f35aba0dc75b35fc8f7d4abb00feafac83fed0e49624b07e90969a7ea
- MD5 b9dc65904acbef7eaabaab1b783501b8
- SHA1 3408a916378cc169312f7bb32f52eafe2c286efa
- SHA512 153c75fda280de991c783e4c4e956be0e1164a4ac546fcf9ed3f0384669c0c6dfb570bfdab774913c2e10efd56ea8a0c891b52976979a7407abe276bb7bd4341
- SSDEEP 6144:p421qBeeRCdGvJzH7x2GOaISBto8QesusEiJjYx3pzYMqYhDx0bV:p421FeRxzH7x2GOaISxy4gV
- TLSH T139D46C1FDB936439584002487BBA5228BD5E83140B6EA9AB7CCF9D912271B7ECFF1D14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.34\localization\da.pak
- Size 585KB
- SHA256 c917ca57a598f8743b6dd768c09c1b0c6948a6a7af26452590d9f9005ac4f7ad
- MD5 22c0037e24aea2004241856836043547
- SHA1 fc82a541153e3c7ae3b4d953e7675622b993f362
- SHA512 7a0a96c4c5a9b5422b09736df7fbd4fb856f5e5384e764c73d7eba234b3b5f5d8ed6cfb2ee4286e963cb5dca62ea977b4af15982ef770f9e15f4d3efc1a174c5
- SSDEEP 6144:Cv18V5gt32zVWqX69bxVtshxpId4AtCfwghzZh5CRQgMTUEd9MAdV/Q1RCRauwKW:C92Y4XcNs7ERQgMCAdNFRzw5J
- TLSH T185D44A4BCC9C733F89AD0764F2118DABDBAD543CC684664F75D8903A19CBD6092BE2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
- Size 1KB
- SHA256 ecab6a9b95346a184f225c47fe6c5e5935d31f0c024a5872f2866705af7d2054
- MD5 b0c4dc2b6da65c85289fdf1036abba0f
- SHA1 d3887293de525f9571c9d6aa040f02d3a2448895
- SHA512 b9d0bc990a910f33b75d7e6a4989eac8ccedec953a62e3ac3c87280d4f9fb34af0d93a33e427d264ae0d3a52c081e656568ef025124c2250a9a92b99ffd4ae25
- TLSH T1FB31DB509017A0737F23535FE663BF9A65035503D42C10E0BBEB4A69A4EFDD60B6B50B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\Opera Browser.lnk
- Size 1KB
- SHA256 590d19de0be7f217c7c7326b9b91833f9b6c610feab98eff5b93363d7733afe1
- MD5 35cb60d3323d57d6679b6be30d6eabb4
- SHA1 c8d00da0912c7f9beb4f543996e8febf10fee60d
- SHA512 35c29e0aa9d2db547689ce9f12a407d41aec9e6bdecf12a41523df18949c1f505489c285106d00dfc1827b221494dbff1c8c7a0b02e4525136ff9a2139e2459d
- TLSH T1E32102046AC62B21F27F867580F72A39E125B811EB4A5B1C401042092D71692689CF5F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\additional_file0.tmp
- Size 2.8MB
- SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
- MD5 3b028b1188ac321e66add16f8ebadbec
- SHA1 086bcb2b1c0d300be15c1390841aadadcec4eac7
- SHA512 17c390e0df8e29ff9ad43e581db298ada2d8378fbb890dc5f4b17df8fbe21134f99ab203ea4752a419215d289c128a1d8bc14721bde80042e5bb4c3901dffb72
- SSDEEP 49152:+kinoIZOrzV7AlDfo7eT/uAtH00raHx774jx4aGhcr0glyGIGE1HVyVNW272DS/Z:+kiocQzV89Tmeradk2ha0gdIT11yVQ2w
- TLSH T167D5233275A48C34D62312321CE0FAEDA5BE72701E6347DB73A42B1F9EB01979A1D562
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\assistant_installer.exe
- Size 2.4MB
- SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
- MD5 b0408fa2a406f483e42c3ac102d35e9b
- SHA1 fbaca900ad54abc65ec2cb34d63727c87132d16b
- SHA512 2e8b9af626fff68ecd0204d6a3151b4518749143ec78a2f8f99f959399d1c8ea59987f99c38c9e48fe38b518fd8c91381356daf3f17944fa3432337b882e5401
- SSDEEP 49152:wJv8lBbu91xwyiZSwRDzWEibQojjHLQDpizF:wR8lBbu91xwyiZSwRWEKQWjHLOpc
- TLSH T10AC5AE12A86094B5D8563132321DEB3E9A30BE1657354DDBDB90BCC1BBB86E2353734B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\dbgcore.DLL
- Size 222KB
- SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
- MD5 b26ebc5cde9b1726ee9f9534dd6107d0
- SHA1 de00af3ec4de63a158bcd50c6e95b046669d3353
- SHA512 2e01c65b58369c1f5f4081cf377c3fedd87ae5fca63cfbc44dd7859a1e10a849d1bbdbb592349d793166f577dbd954cd8660f625dcbc9adc4d936d6a44f062bf
- SSDEEP 6144:FASh0NdOEQzFh0ekr6nzwBaQGdppLIg2dFl96Fl:4MHZn1n+P96Fl
- TLSH T14C247C2269401533DCEF12F062AF363A96AEDD90239490C359A05BDDD6D4BC12E3D6EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
- MD5 021b11c0fc1a09e49a2046ef07d1747a
- SHA1 4b955c1e7150db4f07528929fc529fde9738a2b3
- SHA512 6ca94fdf2b92928859152aa23f31df46944eeeac7988f6bb5d647341843d8d2aa91c2c810d17c8b58a03c99e4ca7d7e1ae6b6c2d9ea5029616d870b89794d6c8
- SSDEEP 49152:xEDlXSohR86M5NKBlv/2yOFVnzM9F0KM7:uFhR86MHyl0fb
- TLSH T128856B20E784813CE4EA1177E67C7A7D85ADE524073440CBAAC45BA978297D32F387DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\installer_prefs_include.json
- Size 224B
- SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
- MD5 a31327ed38a2e2aa048700169e5c9e89
- SHA1 cee83a9db48bf9c0d963bc6d03cc125af5cc4ffe
- SHA512 b302790a45f5cefca7131f81d2d15976d402a48147960dedb5eaea136205c7a5e04635521f08c63f7ab53f1b9dd283e575240076beca5f392f47f0522f105fef
- TLSH T195D0A755802BC0E365B00283783633DDC20B1B038C716899B3C71125C07DAB326E6E1A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\installer_prefs_include.json
- Size 239B
- SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
- MD5 d89bea9bbcd4817b77b7b90014f1da87
- SHA1 21cdef3b05e461f645e198bb92f7c787ad0372dc
- SHA512 70f794b897b35a6d15559a05cd358e98d2887096c60f7cac5c2e1d065e1a2c39618d64cc81b9fc2c3380075705441c3856b0df03eb6feb4396e8558ab2b1cc96
- TLSH T1D6D05E59802AC0E269B00287783633DDC24B1B0288616899B3C72125806DAA226EAE1A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\3e0db0e4-c601-4bd4-a512-273c1c7980c5 Opera Installer Temp\opera_package_202607101125161\installer_prefs_include.json
- Size 1KB
- SHA256 e13f7e29764f8fd7f53a7150437b49c5040774cd42c9cb728a47233172f8dd56
- MD5 6147d57c71e48937ba75381857b997f6
- SHA1 6f8683bd423183f5034fe7c9b8053ac53d3f845c
- SHA512 745913918316dee824c0ea457b156af143d75224704ebb4a582ef6ae0744f5049a3ce3e9b10c301886d7c06b8f5d5f5074383feb95335c8a4b423377e584441b
- TLSH T1D3210AA05046F0A32B73830BD9373BCAD9075B03CC6810D1B6C3086AD0FFE620F96919
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\19316148-9b00-4e79-ac3d-c2a988c1705c.tmp
- Size 14KB
- SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
- MD5 912d6f7689c9d513133d60762e81096d
- SHA1 9a8cc6d7a87ea3a2e551b704221e69fe20fa0ac6
- SHA512 ba07ccfa0a718e74ae50dcfa4ffae8ac083e856eb013ee8c174a63132938e013d0efdc32000c1c114fb6ab50dbf81f20a4b212f17f514a47923224fa757b6f1e
- SSDEEP 192:FkKNtwdBiXu1ZpNtvFAKqks4awuxf6W4ZfG05Ogl88+42v/eFZYdxh0MAxj8M3ik:lNOhZj1yz4q6BO05k42v/ZICM3B1L
- TLSH T1BD62CF211A18AB31C450A33DD4F70E4DB860E98886B1D072395FE6A9C5C0616393DEFF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zSC0AFF749\installer.exe
- Size 8.3MB
- SHA256 a2e8e9b2e04fe41207c6327b761507631ee22a57e9f84fb1da99760b2d372d65
- MD5 eccd435d07d94137b8301a86bfef6287
- SHA1 5a3f5f809c9992a02635418a0e572c38fe954170
- SHA512 3999bcc2dac17842b8d47e19d948f749916b2174afd3d2ef1d133816ff919b29198b0501144ab3ad986ba7d98300a73279e687e765f019509ff4b6fb4f3fea56
- SSDEEP 98304:H/06Gb0nu7gPcI/Ztlg1RbdsuJXMZ+gYNY8AF9:f03b0sgx/zwVC+gXF9
- TLSH T1FD967C53F2E601F8D06FDA748B7A5232A9357C464B35A2EF0A9436251E71FD46B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
- Size 3.1MB
- SHA256 445ee51b791d59bbcec5f14d314607fd1d7b3aa689a159fea52557ed94f128ad
- MD5 5e982315bae730e4a63dc28a2aabce35
- SHA1 98239c3981caaa72270aa5e19111e3add449fa6c
- SHA512 15779c24b4cf923c8d9f253f9c8190f890f34c837c285e55be3866423aaa03536f2e202d5be1e35e63192ca6b954be3554d1835e3dc19a73b07320ba594f966b
- SSDEEP 49152:VVAbwekXpbbgTLucW+QeGjZjh9I2A+qrdq3limDWFkNlFxwj9FeImbrKfPLJKVW4:DAaXpHgTRhQLzI2CruokNlFKujqdz/XS
- TLSH T1B5E523627B84D474C56321320F99F6A959BDF9600F66D69B238C2E3F4FB06829721F07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bg.png
- Size 224KB
- SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
- MD5 21eb6b8232802f32b6483eedb96677bb
- SHA1 b390f01600e521586e210936a4b57a6b89e66a7b
- SHA512 5cfcb0278e5e7473dde396ee34115a3f50a9ad195d99b53cc5cc33a169a42c8f729806491fc0fb607719139081fa3c774c37b1638de1289b73c0c4c80768cfcd
- SSDEEP 3072:7MuA+f6FJxlUhyLg2cugpbM5Q+jBre6cAJqmm6nkrw8sGaDy7y8bRzUnKdh8BfM9:7MuAWojcVdGSf+4BML49RzUnKUuLZ
- TLSH T1E92423876BC391F4590BD65FE9386BEC3CD4E7EC82AB113C931A42424D8416B85DE8F2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\e1499166-8775-43a8-a8a9-1a920062e43f.tmp
- Size 2.6MB
- SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
- MD5 cc79434c290887ea9f9eb97967e3ecf6
- SHA1 a3c9fa2a279a6a30c7c44240331c500e37b3e004
- SHA512 49bfd073fdbdab7ac6adc62a3f2a5115fce06548d124ed355f40e8234329028499d840785bc7b2e55a2f3ce2fb9d77bf6b2c3efd70508f6303ed0ad861c27fd0
- SSDEEP 49152:uwEkdF+R+C0LfbAeXf4Lylz4wXH5wtC9HP3W1FPhMZSXUq4yP4wITCvhbgK96H3m:ugTYYLUDLylz465OCB34Jmgb4c4wIO0Y
- TLSH T134C53341B62C4A21C023E737C2904F763FD9D5309F166BCB8263E4F665E89822F656DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1324_145212335\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1324_145212335\CRX_INSTALL\reader_mode.js
- Size 112KB
- SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
- MD5 ae8b2a40f4543a01364b65f8d540dd4a
- SHA1 a1f4820308048e4b6327db45f53daf323e8200d9
- SHA512 3fc0eaff657304e9d55e5f512f09f7e9dbeefd09b8d046a59c435866a1080f2d46ac5e56859f894df9827a85cd9568c9eb341ac570b3b203078effc97928d04e
- SSDEEP 1536:Ska6rka6JmEctzRw8qxUyIVGjYG6xpvAI3z6A0k5miSZ75U66dpXdd0yUY70Lcx6:Ska6rka6zszmxnS9lbv93NddM3prX+wH
- TLSH T19DB3D9ADB3927199928320E502FB0047E3355D451C1A5038F669E5DFBC24AAA62FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1324_145212335\CRX_INSTALL\spotify_frame_interceptor.js
- Size 5KB
- SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
- MD5 90052be4adb4d4536487cfb6486c3dd4
- SHA1 81676ddbf5baa7401e201de96a40e2ff5687d06a
- SHA512 ef36d3492bf0fc16ab9decf5aeeb804895c98b77de2338d8f350ba2546f4e99195f87bd41167e81848d9aa6d9f03353cf836c2d0302f086ecfe7641cd8053803
- SSDEEP 96:xSVa6rQaSVa6P38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuisb71TTta12Ho6Io:xka6rka6P3805se3m4XFzVJFs31wx6z
- TLSH T1B2B1B505818C4C7D8FB5028A9ABE235212DE2283787BD4C4EFA3C47597353CE9213BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6044_706326180\CRX_INSTALL\_locales\en\messages.json
- Size 401B
- SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
- MD5 f58e359a5a09514e503a7de060e5719c
- SHA1 469e51c68e204d8268eede68ef1cbfe1e6732f97
- SHA512 5498cbb61a7953f5780fff2ebeec08e48daae206e5c237686b41f771370874bdfa52243db1050b67f052d7ea400e385f73cc4c41185194f006c73f2e6f174b7c
- TLSH T1C8E09208D940AE6B52F792123C787A15F72E476B0500541A7DBC500D0FB1AAAD662B58
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6044_706326180\CRX_INSTALL\_locales\en\messages.json
- Size 387B
- SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
- MD5 1843060be3fce65295490b449d0866f3
- SHA1 aafcbcfb0bb42b494528e41be2c2c1a0b988be9f
- SHA512 ed8eec1c2d311979d3643e2110ab94e917706e8a6bb04afe81d04f3fdc2b666f5eca044f7d1fc15330f9bf0e7a56d05471746603b2cc40a9a007540d4afc2910
- TLSH T1DFE09204D940AE6B42F642123D787A15F72E476A050094597DBCD00D4FB1ABAD662B58
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6044_706326180\CRX_INSTALL\_locales\es\messages.json
- Size 424B
- SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
- MD5 a141894bffcb1c948e75fa3a4cd1c0b9
- SHA1 ee4ddd5e77b511bbaa535d683f4129cdf542e941
- SHA512 6dde8048629a446aa9bd24b4608bebfcaf1555cd38d2f264c61e7235141ffd871993279044cc7f88a3fbd608693f6af78ec10f4858def821a646350718548a6b
- TLSH T162E02B04D890FD3705FF52063898E616E3E047913814958D79AEE25D1FF2EA65467F08
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6044_706326180\CRX_INSTALL\wallpaper\preview.png
- Size 464KB
- SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
- MD5 b22722b42e8b196c0e26ab8a8c6508c8
- SHA1 2c4de3caa4409a164e31837f6bbf54c99d922c85
- SHA512 a0904204f795dc7cdc6612867a87f60cbd27d1edbc70007e1fe5c4dfe83165ca287aed3319409a0829815e5175480e085775a9a3285d1d20d629b28641fddc99
- SSDEEP 12288:lrGu17lQ0NW4Lwq23Po85e16slc0hyKQuhZSAS2T9PPdHNCPsOP83JDxj54:lrxvw73H521IKxh9S2TVPdHNwYDxN4
- TLSH T1A4A423E043F7207FC6678D44F640C86E15ACF52ED99C58CBEBEB401541AB8A4ED1C6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1188972477\CRX_INSTALL\_locales\en\messages.json
- Size 396B
- SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
- MD5 f4b909ef13d8b4dca31e542f14ecfc55
- SHA1 4381ed812d8073b5bd5b873b51697364a1690772
- SHA512 bc0b136cd2c055d27e7c8e4b8aa5540f3926df1e3be0f6b25d14c14ddb72602eef8a4a60e4c15085d63610f6696cbb12feb8d21447f35ec844997c6242be1a35
- TLSH T133E06D0489049F3B419E8269ED68BBC4AB301B6A32A0BD2929C8819C0605FF344B23D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1188972477\CRX_INSTALL\_locales\en\messages.json
- Size 429B
- SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
- MD5 5250cf7c9dd7e49a4ed52b24698c3a49
- SHA1 7f155a461d23312bbfdefc569b06eaa1d39cd250
- SHA512 24e45c5c5cc87c8284fd852f347b6d9bcfb6a60e81d87758c95c01b9535d3a6fd468fd3dfb599c763ba355991abf0ef58259fa27cd013974d8ce2d593f1dd7cb
- TLSH T136E0C01889045F2B45BD4365ED68EBC5EB34173A2150E95A3CEC919D4B21FB344E27D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1188972477\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
- Size 962B
- SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
- MD5 a31c3c0f384b4c1af2e9d8bc153d3824
- SHA1 f2174d637bb60be75695b82639e9bb0ff0fa9951
- SHA512 7cd09bb9b3b357f4ffac7e982a676d8f92ddcae8ce02192dedac9a7b3f3580ce2b1ea8be08a041094a45173d279076d19d3f5e6cc99be74d483921030e09edc3
- TLSH T13D11FBE6570FFFB289DD4EF87BCF0140107B09BA0B2069647C975A15557F52D49D0127
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1188972477\CRX_INSTALL\manifest.json
- Size 1KB
- SHA256 b655477791478d7f6f560c740fcd142b504c7f3a73093031a3257abc43fd95ce
- MD5 1608f9e8eadb961f5722fcbb4d3ee6e5
- SHA1 37da8b34ef9ddb7073d165ff35c3a3223adb952e
- SHA512 1baff4b22bd1c82aca6e21e4db64fc06fd3875c406c981ae828f04037f7fdcba59bce43d982f3aa9bf9f4b0b7b9696e905280cd4a925574f2dca59550876697a
- TLSH T13631FE51C47CAD7B15981A29BC360543DA646A875D207C5C33CF808C9F9CB2F01FA18C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1188972477\CRX_INSTALL\popup.js.LICENSE.txt
- Size 1KB
- SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
- MD5 56868fb04ec3f6436a450b0be0c49947
- SHA1 3114eed847366239e1b72b45af410bfba81bde4b
- SHA512 a2211ab99b6d04b7f0a7c5dddeb8156c7c24e8ff0b2860cbddb6273d25089c7e066ea6be363a610553ee2b275ba4f7750f9456b30251000596544330d8262dc7
- TLSH T1CA215B5A35F53633026149A2670793CEAB0C11EEA4BF347BC4918374AC344FE8394DB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_1378458162\CRX_INSTALL\manifest.json
- Size 1KB
- SHA256 8fb5674e49dc503b27e5959880938cd58ac16b8b1b96cb5e5274dcd88c9ea31f
- MD5 9305d11c9a63bddacaec9a29248b9cf7
- SHA1 7a0ac8f41ffc3b15d90618a03b49efea875b538e
- SHA512 da4b5d6e659ee58e949390bad033bea95cce0a9b6701d3dcc307eb1cd105e8179adfaa30686d0b2f315e9f1fbd897968a0469ddd6712117ee019c8658b3fa16f
- TLSH T1734142BEC8AC4D6205C46AB89C7A6753695517874FA87D0873EE014C0F0C62F10BE19D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_163732609\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
- MD5 0566b67d5fa120d6da250a92577c8873
- SHA1 0baf54c5f6a7b8cff4c82d22be9113c43a099c87
- SHA512 9dcb904ef68419b2462d88133e87d6f4258d8f53f05ed12868718740d6e9467ab2d8769a79727c3dbd01c6807aa5e4863f1874465a7dc95088bd724f9d897fb5
- TLSH T1CE516D6D716E2332D0EFCE2E04C6860EF8680E9C50489454BAD506EF8905B9C9DB33C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6304_163732609\CRX_INSTALL\rules.json
- Size 839B
- SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
- MD5 112b4a4c6143b507605be0de6f359ff2
- SHA1 4ad368eac9b4965eb0389d2da4b2723016c8c69b
- SHA512 9afaf96cfcde9688664d33f37168b9c637e414c3fb768b0c70cdb19cefcb42089e8f464a8d32bcc21a140414c0557fbc02c12a29a5eb662405d55ef7f1781b2f
- TLSH T19301B567C4255C230342217CE42B0719F970E14B6E646E2F3F9D845EAF5E47EAA7238E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 32db288418be2795e84d042f338fcdaa8cbe7ecd40c72f1ee166aa7c0592eeb1
- MD5 50dacd7503d6205b1d9fd9ef0ceeb773
- SHA1 d3fe6e8e1bbdee441bb8a6c6b3348670430e5126
- SHA512 bc4b983bca9f819d330dcdd548d6c7f1db56e1a6e1ce339f3aa3f8f1633bb5c3d1421f48e2692e56987308c6f61593118d84447044a8a41a8de55a8a7125f40e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\08f91a6a-a7cb-4d0d-ba99-3c2f2abd80dc.tmp
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\0c85b3fc-9c71-4a56-9e0c-54313fde5c75.tmp
- Size 4KB
- SHA256 75e404996a17c8e3a2a45ba253fd6b38a6c76edc123aa470e4a1f3a109460ad0
- MD5 e9314b8040f4f7a4679ef9c9547b1dfd
- SHA1 3a33f02b038c9e492dbaa84630ef03f34add3b55
- SHA512 096744c0ec6ffcad0550cfa63e97b834c483259392753c07f79537741027c6cc43fc31484e58854bf52cb676e0a7530ee94e539be32bcea6434ee111254e13c6
- SSDEEP 48:ixjNMsZwEQbL0srshNG7fmmSkSEp5RmH3f4F++iw5YFFa5pkvrS1BFhAkEWIUeXY:EZwbvJYhNhySHTRRrWIN8ApTQ81Ces
- TLSH T13B919391A8412A30AFAAC7AE77F47F294F7EC8D7311050DA36DE004D06AE27F8207247
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\2c4cb646-1eb1-4edc-872a-7a5568524f82.tmp
- Size 203B
- SHA256 a598a349ecabdd187116f329200358e94cb3ff93abacb12e7b74342aaad99bf8
- MD5 496e847f0f76720c0b8c027d0d75aa3a
- SHA1 603f2b9a3c6908ea95dc2222f9e4cdbe319992d2
- SHA512 a2ebaf60c0a064f06385dd89fbe77038f6fdbb293ad940c4ec286862fb7d939904f55a7b0273853b27df6e17d31a5be93678e613ca59fcc660294fce01bb74f5
- TLSH T1E5D022705A42615425F4E97095763FAB049C9832095EB820627C299700BC0E50392B3B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\40272e30-6c9a-405e-b612-e4eba4218ab3.tmp
- Size 608KB
- SHA256 e45a60e55506cafe908d45c6f218d919223af68bf235892caa6ad14ccea3dd0b
- MD5 7b1b983192cf0e90a0e16e71b31c8ef1
- SHA1 8bd8814a85c9705c35c1333d45db667dd632d82c
- SHA512 97e82b7fd5845afd6535838cbea9d385666800c24bab704ce8212b0dc451b086f046f4eb75c4201fe2dd67c54eca1847d4885619c4997308ff6eb299245f8edc
- SSDEEP 12288:YG+u7MRx8bcbuDmkTVm29aM3itxZ+d6TpwVOLu4kiTutIJ0gSkCc2mA93XY0FD3w:jUvKU
- TLSH T103D497AB868C2CBB5F8136D560CBBA5940C2701FAE8D7E59E780CC4CD2A59673B7C117
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\42ee9fe6-b9e4-4928-a294-9c72ab910e6d.tmp
- Size 10KB
- SHA256 49c78b2b24cdef72f4089694e2e7885131672fcea68ecc96b09449bf80cc93cb
- MD5 e32d784df5d7dc5057040bc8960c869e
- SHA1 eb8513c0419ee5b78f17af54e21a995e2b73f19d
- SHA512 df738c13793d8d4e9043fef9ae703cd603ed27571d7bfb75cecfba5ddb0e374dd059450a36864569331dd8bacab4d1b81d0ded8adc3d1536bb9bb1e8fa38d80d
- SSDEEP 192:TEIMQ77H5t2ag8XMX4wcPPksuHWYSsZFwkigqqbA5/b+WNO8c1ClyIsn2agm43:dPXrj3zmA
- TLSH T1DD32415BA9245DBB2DC6D525F620F797E3F40120E261AD98EBFCCD1C44CBADC6422983
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\83408ded-2e87-4f04-90db-9465a3fb0d9c.tmp
- Size 203B
- SHA256 9458d8282fd6c38deb4882916431ffbc59689deb68011637d0d8a6234cd80d12
- MD5 73793f42349da995214f8bc6ce463ed1
- SHA1 397c0b2a23babf3f53454574a36837c70051c69a
- SHA512 2b82de4e3135f499d28bfc4257349cd0cfa55375b3fb95a12c8245a22555a5a2bffc6687b13f9842de731bbb50a24ed1dd4818bdd70431674829875181dca844
- TLSH T16AD02268ACAA6C2020E5B43092703BB328784835880A1C70406E52A28A6C6EA035EA3E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
- Size 36KB
- SHA256 74ff9216881de8b6bbb44917c53adb1cd4acccadcde2e59aec9786b491c0bafe
- MD5 393404757e5ecde582648b1d00e75003
- SHA1 4b65c02085d693da0d03a138bf79f00b2c7316e3
- SHA512 ffd86e75ecf6c8cf91237e56f9c607bec9d1c0211ade0decfce8e6012ce4391300be38cfd4b9df4666805e5e2fedb716d7698b50d1563c91672d30963c2f8e52
- SSDEEP 384:kdIkNmrg+ebnxyJc+cPsxg42bKqqVye2gUNtSdDegdlE:0IIY20+oMKDke2xNiD8
- TLSH T142F2D47BD4026CBB91B543D674FAA607FB4A232F1AC48D4B7B7C984C8F718236256709
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
- Size 256KB
- SHA256 558dc9ed8b18b6a1c927c15f494a0e20405bc2591660ecd234e7c0429ae05bcc
- MD5 3bf042f6c8013f07e05fc377ed79bc9e
- SHA1 b1d287339e28dd98e28c444888aca01b4749b72f
- SHA512 2c9c43506385d1004b93ad91992de810915b29fc6ab8f6df9ccdd7958fc7f2c612c2db75f92fee56acee33cb1e5f47ed18ed1a0ce9f7194030824c6f23adbba6
- SSDEEP 6144:sIAEWxDCWouqLEzTSA2dEmrNpXZG8RI8/e1FAmG:sImlCWouqLsDDCV8UhoFAmG
- TLSH T101442340AC713E98D766332B743B31FA5E52AF5B628C87540FC65FAA0357991C816CBC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\7143a158-bf4a-4273-9022-92cdc5654e30.tmp
- Size 48B
- SHA256 1b0e1a15db9c4df8aaefcd70044c504365aa48139ce92a4b3c19c44bb49c8b05
- MD5 b5bd73338afb944b28da054dd0daed0f
- SHA1 76cd0df0de9af01f0c6b85118a04df0c6efac941
- SHA512 268b50fad3ba17fecde1974b9a39792c723febd2759539376808c23793db4db86f0b00ce84828315105cd15d830776a1f8ba82039d804e2cfb2878161567d688
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 264B
- SHA256 0b619a5bae178029b9e45c3ba93b55b8b2333ba6543d5d15e26de30ad6a13e8c
- MD5 41555ec020e572fde7308d5d3009e582
- SHA1 4e94b1890f331cf396ab039f2169d6ef0520a665
- SHA512 a9c2235ad7a99e7a15f25cd5b554de0bead1843d6bb9b0053e49eae685ca9c7ab1e7f17b7d4642e4f9f85d713a66f19b6780cedd823c34e40a8f26ab06131dc1
- TLSH T109D08CFC90EC1109FF1E09B86E3B9D6416246D2200021B0B6CAA967CCEB76C89A787D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 264B
- SHA256 62d6834488792d7383e0df27e4e138c95f54ab3f5b77732cc6c7f11133cf4caf
- MD5 fe9d5af35da842ff012b1f21811ec5a6
- SHA1 01db3789f32eead11f7ec51bb28399877ca801c2
- SHA512 840080a3c8a121a5a6be0b24d3c41ea1bda30460052857af715e45b8509622bb0bd2acb38737729ebe1885b88061f58e1336e1b2f1f600a9353c56cfbc66a7f2
- TLSH T142D022BC102A0006F73D09390D67505001342D228002271A2E92B130EEB62A8453ABE8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 840B
- SHA256 9d494790d2d8c6263e5aa17d8e8d4f8bc6cb9398f2760c55a7010b09b2483106
- MD5 79dea475fd64bca869943c32fa61dbf1
- SHA1 9b4d4ca53037576b8175acbf15141ebb993100b4
- SHA512 d148a2c30c75276b1d803371391dcff757c543d9c3a5d24fc018168ad51782b37374aa162500ea544338bc3c07b43aea8e2cf027b5f9aad2dde620b08f0e616a
- TLSH T1B001442954900257FB1A02FC4EDB1D1C163C9B31841297071AE8687CA9A3AD4943BB9E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
- Size 173B
- SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
- MD5 143783193921e1837732e486606ff9a0
- SHA1 a8ca45aaa634df3957187cf5622eed0df97e15ff
- SHA512 cf4d60b699edb0d417a6f15a38cde0209977e1a5871a798040bdfa525f03ff67fba8f51cae3b112eb5777494fd7e601ef04190541ef4f0b4ef145af286daf37d
- TLSH T1F3C08C1C5A80BDFD6012739A66FEB4511BA7326AC0143221BB15CCB41B08D6B34BA789
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
- Size 502B
- SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
- MD5 aff453c164b18b5a3c88306549db09dc
- SHA1 10c162188db62c721df63930a6a656791b4dd4e5
- SHA512 bfbf53868f4382db6873d4d297938b633d029fb4c4e05a3ad7fce75d45c7dc6091a9296f3e42dfa507c614507207c2482af5aabb8d7f0840c8c5df2fa05bc499
- TLSH T146F09E57655227F4C87044AED7D7351613713AC2706842582155CC646CEC10A2378BDA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
- Size 47KB
- SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
- MD5 12df6852e9b0044df2753aab6356cc5b
- SHA1 c4d5c1f67bbffdd245b421e2a8b7f55db1e8fab8
- SHA512 7a74fcf50c0dcd031e96df827c86b8575ffa5ef9da4d1be730d1760748ab250f53e6cc705a60b1c42c3f19403aeffad4e7100e86a7556688d0452557115cfb9e
- SSDEEP 768:kpAtn38+HSEWA5W847Zrr8VEo3Of2diRy68hkxkh6GRohqksVZm5pEKr4VxOqsVY:0c38ZEbWXVGR3Of2ymhkeh6/hqk+Hm4x
- TLSH T1772319A56258687E0AC6D2ED925D1313912450F8691D84ACB33CEFDE260FDC6127CFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_1\manifest.json
- Size 1KB
- SHA256 028acb85f69bedc88c9f9ce97bf0c31615f83032d90de1b7017614a389648b71
- MD5 b5bbe01b69eae4f2eeaa7241c12c4d58
- SHA1 19ececd5caf4a7c69b25541ec4da490fd711526a
- SHA512 35b8270ded8011564ec05b9b43782ab10732c48a52382884d83a75c05e5e0e6d34c4658dbcad3728492259ccc8c61997b8bdb869a15d35c0f23c403f0f660d0c
- TLSH T1163134BBD99A893B06F0AAAD9C761317F755236B07958C0F76BC900C8F74A55202D90C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_128.png
- Size 7KB
- SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
- MD5 8723b83f007f8c910ae071e275f99383
- SHA1 9f76b6719f4dc7ce2ae4ce96a8577481735f1ecc
- SHA512 62256dd55be00b1a70e9afc127ba2079fbd563274c6829739f99fd02c6bcd2b2afa21337d8f58a7d64a716f41c0d739ab7b8f78058255bc1b59450eb0d0bdf4d
- SSDEEP 192:mbNUdF2i9HsyhJ589/J6sdWQG1i+5pqG/LzPYehuNBpDxw:TfLeyh09/J6sdWL1AUvfhOm
- TLSH T1B8F19E690531CCD4B5B99F755309C0DE2136CA98A431AAAEE0CCF1CC3C573697ACCAE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_16.png
- Size 653B
- SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
- MD5 e4fe7d0c1c77bb00d492bf59196fe3d3
- SHA1 350335cd55b2acb2b8957cb79257375513b525f1
- SHA512 73b6ed04cc5b46d700bf34bce51f50b19c89e9310053a473f577516a270b4ff7ff1ce954c18430c2625439bffed6153997a08d1aa6d3a4196b4ae5ad4089d556
- TLSH T135F0839A772C8958E9DC5C30B21F4297EA8C22E8C8431601A33F52313E63812138F08B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_32.png
- Size 1KB
- SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
- MD5 3e4cddaa76d8fcd9ac7b64fef89d4b74
- SHA1 3a44b23b9b8f950f9168361da56cf8f86958a408
- SHA512 9a6317ed1b9e919b3a6e3fd260f88b297b82498d294d7c86d1a40c20c35003694865f06632d1bf281417418b48122b4e01296e17318f7fe77612b3a716417bb0
- TLSH T1F221D8DF8464ED2E8531C8B3C14354E5E2BE94B3E47B9479F06BD8510C307958783E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_48.png
- Size 2KB
- SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
- MD5 1a3f93acc11338a092785da97956c034
- SHA1 ed1786563e53ad2fc076edabd25accb4ef241540
- SHA512 7ff3c3eb9b7e55e799bc8c8ca66225fff47c52d85e1326f99b2e7c1747624462231e8dc9c09cc4d6e675d072d8da41ea998f16a4576de76c6575cda271255e85
- TLSH T143414AB201335E202C334219CA7203E2A80CADB0C02A7E91E0CCDBBACB00DE5E2DF506
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\icons\logo_64.png
- Size 2KB
- SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
- MD5 9c3af737a428dd3daa949313d69be52f
- SHA1 c24aa988066fbbc4da252b858fa738e20cc42c07
- SHA512 ed9f869b3912eb8bf27624185c3ce648b5a586576deb7b1f9a0b6770fde1109a81fdb771a76f0902913c55aef7b6020f386dbd92a06c7ae106ca5fd593295c0d
- TLSH T129515D9D4EA1ECB15A2B46339AF935EBC5F0B37A0B2C277D60C94437A9C255231214E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.2_0\service-worker-loader.js
- Size 49B
- SHA256 4409861989b435ae91707e5c01965f2a6b00d0822da0bcbf6e8a6d1a8df6fc2d
- MD5 45d40d3c04d3a92401a75aca986a7fd9
- SHA1 798478b107f7873002771c0255a0849b61621e09
- SHA512 501ddcac02c8c698b6f0c1589bfb6533ed3cb10887568ab9c0d7efde0c0a37c69ecd525d855a414669fbaa0182b6a3cd70c80d407144dd508906cfd1747f230c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
- Size 86KB
- SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
- MD5 c8b19bb6ffa9ba9d07b010ee2483d6fe
- SHA1 db1af85512d439f749c1fd64fa8f7dfbbe5f682e
- SHA512 841d08ad1dfd23a85b3749dcec341c665457e0648509821ac140fe0ed753e8b0ea4a24e7b6ea5f06958f4ddb0b65f7e58250b783eea11c321fb975fbea63db46
- SSDEEP 1536:PYHgfauhQ7F7yEPlL65+aSWr0WUvpyiSBwhmSvGj1S+f8+:PYAiuhQOokiSBwhmSvGZS+f8+
- TLSH T1969308CDB6C7F26293E390AAC03F101FF23A6D19740D4454B626DDD1782658EA236F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Active.png
- Size 2KB
- SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
- MD5 4805f857f6ec86c67d6b63ac902f4752
- SHA1 9888b818fa830bcacaf384b70dce4c0afb0baffc
- SHA512 6da9c63f4896dd278b4a29aacd523f052b98c3bf2426fe8b1aaa79a47e13527ab2834744d713964605d2430e96d94d3ebe9526e63e76bcdcfabbb1cadc1a95c5
- TLSH T1C4515D49BFB8561FD4E8F602B425092AF5FB645094829981F3D3D09B5F9C414CEDCD10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Red.png
- Size 2KB
- SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
- MD5 16ae2826000173329d9ae233205c3b45
- SHA1 1ebdb2024aa19413be8c0382b9880b39020b4019
- SHA512 444f955355f080376394e4593f98c81a705a44f8c4bbf1d149adf0d2a75b9b1efa09da742fd2846e12b1c7e2aefdf5bb0ad0b641743933b353033bef8607f3e0
- TLSH T1CC515E91DFFE269C4ACECE6B18592266219D4686DF42343187305056272EC83FE7B55C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Dark_Available_Yellow.png
- Size 2KB
- SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
- MD5 690ecdc93f4bb7d92dcace06972cde64
- SHA1 d7a6f16e34188192e247ae55c29d93d6821c7dfe
- SHA512 0c86e835ed152a3c21232b1fb2e904cb28c44ede45908fb775dad250187894d13077867eb768a10819b0b93e935cde1aa1c86bfa6031888f4e720ed1059b4652
- TLSH T112514B9DE07D07542B13843842B67C2DA4321A384108153DAD8F4894A73FBE046AAB25
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
- MD5 bf24b39c7ecacb4ce180d5013d771066
- SHA1 8b05f38ef028f9a6ca5411dcbc347d6672c252a7
- SHA512 2398ba9b4216289bb2de142d614f312585f1e14e759d211ca169e1e54248761a78585f8ffd0de5f9112ebb349140f0346994b8a52a290ae22768a80d19cd8a9b
- TLSH T158515DCD26176426C397F654D206052A4F0841A72EDBF6E949306CEF9C53E0FD6DD760
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Active.png
- Size 883B
- SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
- MD5 426980c9ff405355a4389dd121b31b18
- SHA1 ec3e88aeb91bfd7f5a368c29de27b7ecd7a793a5
- SHA512 8d14e5b173374deebe3adae31514b40227279a3eb566ba9df121deb77905ba7d011046830d663b53d7553718ff1077ef4364e504b7766c40a8bf6c9695f66ad2
- TLSH T13411DAEA276458BC578E6E7960C601E87FA31B80C476327CC814A41FB56C40DF6DB30B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Red.png
- Size 895B
- SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
- MD5 5e8ace45e9a0da06dc1cf459448282d3
- SHA1 4bf77fde79bb7bbf83d6a970454d3f37460bf82b
- SHA512 04550abc95d708b831c152e9a29d86957aff1d6abfab7dc3ab1eb389c6e395ce6488ac24ef17c958c88b911a3fcad4551a6d6774c5fa64fb02ac78d01c4fef48
- TLSH T1F51163D7EB2F68C4240D8C365D665AF332483CF79D2811CEE6464421AE29A4899C56E7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Dark_Available_Yellow.png
- Size 895B
- SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
- MD5 ca414d88c570b79af1635441d40df0f1
- SHA1 e79d58ba493c2638923017e263405748377a8307
- SHA512 836ecd41819a40555fbc40b504dbb97c5a90d05c93fe9462ff5ec7348790ec6d25cc53f0738e90694ee416f73970829114ffea449145f5173388676c01501673
- TLSH T1D611B7855F459677827747516A3FE727F08C2CE822B1411A6A89503A162E065820620A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\32\Icon_Light_Neutral.png
- Size 932B
- SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
- MD5 5a8f82ba759b01fec7dbceb2c7287d6f
- SHA1 dbc1d49775f1487b5cbf9b6ad7e67d10e831a1e7
- SHA512 b82bcce803f5206e5c081e71c76ca973d240f687b5a4f9b09521c7618c6239683afc01a3115ddd93e58be299371d5815231bc9714a306c06abdabafc3eaf3132
- TLSH T17811F7DB0298B579DC3745FA31A235CACA6B19202AB50BE0074CD996352F8C090CA38C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\index.html
- Size 222B
- SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
- MD5 c590faaff78866c962af44074a2da1b8
- SHA1 418da44a933e3ed87a68b4ce849cab2c7917baf6
- SHA512 c5185d1822035385753eecba19f278ee8adf06cb15424c44ef649ca5b77c728c9c929a91f5391992df4144cb0287647063762b15f79a47c39fdf86c2a673666a
- TLSH T190D0A7D2C861442C43605AB56D61621D480DB914BB425C007AD924B81CC5B469C56698
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\computed_hashes.json
- Size 73KB
- SHA256 6981ab0e6f2328f8b6f583cee4b68ca6cb8359e800387774dac97df21043e0c4
- MD5 4b8ecfd2ebd080fc3d8046bec1812fbc
- SHA1 cca1116d05140d5425c24e257607881ee6e9c77b
- SHA512 cab57f28ca44770730a261cbbf9dcacf87d8bc457bc838970300ee2374a113b26ec328abf4ed71127c481a088761fca18d14db79c1182102d307f1faaac87712
- SSDEEP 1536:VwfHJDdsfy2dAOpdOFrHdjFOrcX33gkM4risS1xVa/Rd:ODd+jAOpdajdjFy+csS1x+d
- TLSH T1B673D0354F6C71938F2376FC1A031C26D995A3C456088D833DE087F9B69F82B66466BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\_metadata\verified_contents.json
- Size 6KB
- SHA256 7962ed372049509eb040645a6a96d37c60414647f7d7c6852d20e183d8fca45d
- MD5 061f7f40c777692f6b2db1bee3411226
- SHA1 55c87adc5cabb37e7a164414cd3f2e747ca01062
- SHA512 a6a182d2921975146071986ecef33106e2b34b1244e513e48db992279b13bde400329fb899e753b40c464b6c07d2db2201c8ba73892d1097207b0c4da393f1d7
- SSDEEP 192:i3yYhLFNPUBH7xkD1c219P+5QwQymP+BjHG7rsiskpwYl8ck10:JYhnP6o8ck10
- TLSH T131D1E968CC1E384CFE4173746DB466335BAD68C634197D8A9AC3984C55A3D1284FB8DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_1\manifest.json
- Size 1KB
- SHA256 4dc8cf07548e8abda9ccaed742ce955a4cce2b524abf4a2a73a5411c22aa567c
- MD5 124cc582dfc3fd010c17716d8cbc84c5
- SHA1 566beb4a69587fdda3f7652edf04eea82227257f
- SHA512 a26ca90bb43674a571bf555df9f3e421f7dce83b0d0ab7a7192fe5e1dcb69493abe2f1cafcf2e0370d46822aea5ffacdec7fd157c11f6242a930d82d8291574e
- TLSH T19B31DC17C468A97F55345B18BC350A43FA68636F1A009D8F35BEC09CDFB172B018654C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\367efdb6-12f3-44e9-a026-b3a443918947.tmp
- Size 27KB
- SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
- MD5 1f17cac9ff7b6851ed5bc95c2625596e
- SHA1 1a2f1ff883d5110a96e252b88784a00789e88add
- SHA512 87539de5cb743b9823566a3c9bdfa8e43c4d78db761b40215e3483a8e0e155af22f057c4de290d9343459ba44a5a5cefacd53aa4fdaf032ee16f88e7039157cc
- SSDEEP 768:+IsX2btgY8GIZbTbg4wjs2W0dWvlSNqv:+X2btg3vZPV60
- TLSH T117C2D773FF4CB61EC5C832B4C04A874561AFBF8C61725607B97C7E997B4E0438856A2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\73d7908a-316f-4091-83e5-b7b8c6052214.tmp
- Size 27KB
- SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
- MD5 ee77c4eb6b9e8b98db1acf41ba32c064
- SHA1 c44316ff0f61c9a7f27f72bc31925ab992de4f6f
- SHA512 ac0d2ae2afeeb0d82f75e86af6580c804c53abe3701734c7ad5e34bdfa4aa9144fc293a4c3d32207d3f0c70b9e3744ed8bee09cfbf96dc8ac825734537d04818
- SSDEEP 768:90haQ3glH/EKEi+B4MfgL2BYb8Ohg70q6XnKa9UgEUjJY99yVnX3akrtSX:90haQ3glH/1Ei+B4MfgL2Bo8Ohg70q6m
- TLSH T1DEC286C2D8C00264EC592F75257B1D39112BBFBABDB8B24DDE4DB1757BB32D24126A02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\87c61d4e-94a2-46ff-a061-5b0b9365afd8.tmp
- Size 27KB
- SHA256 7253d2ef4fe5c071a564e8da1a9bf035b2a365d2f71fbdec15ac5d2b493c33de
- MD5 81f3d5b94a2c4e76c4fbbae3f355f66b
- SHA1 abcc01b0f480e2f5b6850e30e74aa53dc420c588
- SHA512 74a530917b6f6d717a39fe000b9a8e0c6e097a58a471f1d409ee1226f766d92b3cdaffdd71ab51fc85578ebdd8b103db7f8728537858362a8641c1bf4aef8868
- SSDEEP 192:OcvP5WaDxGwi0MiECEv2VYLBxLj7ny5GCJsWtjVh3etlwLX:OcvAaDMiwDLLcT6WBV5etlw
- TLSH T106C2AAC390C84268EDA55F3410365D3D566BBFAABDB0F14F9D48B1763BB32D20069947
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\c70a3f09-a576-4e2f-ba40-93092c13eec4.tmp
- Size 27KB
- SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
- MD5 c7828175f89c5a3ada16fc7817c80af8
- SHA1 e6e6f4dd36fb419cb311093dadf8acb61db1d30e
- SHA512 b68e7b8c42c6d571487841ad41148f7452e970b295516fe025744f7bbc8d0d7986699b41d5f71a6b43fd4ac28b6a216e24c19820ab01817c4bcfd50677fe7541
- SSDEEP 384:OwU2+wy7Pxdr6zfM1dGSwrI7dG91rfprU87MJzeax:f1+V7jrI7IeywMoy
- TLSH T15EC21EE360CA08D9FFDF25F155861ACBD09BBB774A262178138363A5D3E4D20D5ABB01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\cd17f56d-cadc-435f-b520-d83b803d6151.tmp
- Size 27KB
- SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
- MD5 6665dc24ad2b19c1d07f1d1b17721b90
- SHA1 53651b10630b369b1d6bea708c85ab3c5e70dbc1
- SHA512 f3bebf8932f55eb3aaead22bb7096cb957c41e60d56e5049e7f33e664223a2074d587f5bbe7b0836f9d36d21ee342fa1f2b09fb6f4323fc49728615107094791
- SSDEEP 768:SnaH+O01PsM/oDlzcC25Ex2O+04h4FWPeD:vH+O0pQJcC25EU04GFWPeD
- TLSH T13AC283A294C446A4ED986F341632DD3D027BAFADBDB8F10D5DD8B8A37B732C31026502
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\ed58b7fd-5f47-4ec7-9242-36952349c78e.tmp
- Size 27KB
- SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
- MD5 dd8e6df155a2ff5f53f81679d8701c70
- SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
- SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
- SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
- TLSH T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\14155274-2bb1-4f5a-88ed-b3b3178abd4b.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\bb756548-5441-4a78-94a5-147bc8d70483.tmp
- Size 61B
- SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
- MD5 4df4574bfbb7e0b0bc56c2c9b12b6c47
- SHA1 81efcbd3e3da8221444a21f45305af6fa4b71907
- SHA512 78b14f60f2d80400fe50360cf303a961685396b7697775d078825a29b717081442d357c2039ad0984d4b622976b0314ede8f478cde320daec118da546cb0682a
- TLSH T139A00254944498FF4655836A05654463C7AA504780285E565B24115E42A25AD0450947
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 16KB
- SHA256 28de9b41de5f62b71eeec0359800dd5183273d1df1ec2a164e083fcf58f1a423
- MD5 13de236ff3577888dec38c229d716472
- SHA1 9fbd76a29444f9df83b38ffe77a24a57f76da8ee
- SHA512 cf91c66c89b148ca3228db20ae6d6c2aaff71e015d4be849d979fbfd54e8ce17bbb97e8ab1e3ca1a0f1bfa1ec43b261ff5cada71a5a6e6333a2c24de0061d16a
- SSDEEP 192:ojO67eqmmM6L424pC07nm2IiUS3UjALf77H5t2ag8XMX4wcPPksuHWYSsZFwkigw:ojWdXrh4eN1x4RKj
- TLSH T1B1723297A8300DFA2AD6D52AF550F36BE2F40114E360AD99EBFDCE1D40C76DD64129C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 766949599b4f468323c9a89d54244435fab7fd9863378971c754d5f683242463
- MD5 85fd2bac2c886c4dd530124eaecca302
- SHA1 0809e0fd7d9a3a4056575e5e8344381bb1bf0f79
- SHA512 a55704eb8bb78e92f4440b462474896831465c6e04909cf3e4fcff42d0d155cacd2612638790a449c8bd74ccb5a838019852d00b6f107d68324bb2be6da37c3d
- SSDEEP 192:U/c7eqmmM6L424pC07nm2IiUS3UjALf77H5t2ag8XMX4wcPPksuHWYSsZFwkigq+:UddXry4SA1xXRKj
- TLSH T173623197A8204DFA2AD6D53AF550F36BE2F40114E360AD99EBFDCE1D40C76DDA4128C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 15KB
- SHA256 5641aae1d074db0e531fd2efdd2031f3dfce59e74454985559c04cd2aee1a1ab
- MD5 b62f5bb67c5b7690bdd4730ddc7f0a75
- SHA1 46a5240c20fda5801546b35c339211d75f80420a
- SHA512 96259a5e6506a089e62d18166950ac23b7d3c1028223276e603ecfd486951440c96f67db67be7411cd8488545f337a05b3436e5010b220b562f4e988c5d9bcd8
- SSDEEP 192:U/N7eqmmM6L424pC07nm2IiUS3UjALf77H5t2ag8XMX4wcPPksuHWYSsZFwkigqy:UOdXrh4eb1xXRKj
- TLSH T17D723297A8304DFA2AD6D52AF550F36BE2F40114E360AD99EBFDCE1D40C76DDA4128C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
- Size 10KB
- SHA256 3b58ce2ae2889a37d9ad2a00690ad3db9d608d62e24e19f2268ee95fbddff1cd
- MD5 63adf81a60b6d93b02ee6367a4906244
- SHA1 37540eb563d614c773a6c95d37fa6121d8ba4eed
- SHA512 4368f8914501ec47f76e10a48941c8625d91e46d79a6528132792ccf6c4c365f758807bf9eec7323a59ddb50dc263d1eec5d47e9e7bc91e15663ebc55f20b0ca
- SSDEEP 192:T8Q77H5t2ag8XMX4wcPPksuHWYSsZFwkigqqbA5/b+WNO1cOClyIsn2agA4M:LXrAuzAJ
- TLSH T13F32305BA8245DBB2DC6D525F620F797E3F40120E261AD98EBFCCD1C44CBADD6422983
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 120KB
- SHA256 8dd05f84949a142e9f75c12e432b03ad2cf36ecaa1311842ba13f0eb530b5ed6
- MD5 cf43810540c6432b9da10592f0fbda98
- SHA1 4efe1ecaae8c0b85673e15ea89ab5893b3f50e0d
- SHA512 1d7a0c2549a6bacc13b1a4604e49a514979ac891600e0be93b5263867967f3e84a36e998a7e8e5f56919c7039435a79878238ea970c4bc903eabe4c5a9cc7171
- SSDEEP 1536:XEYTSnds8JaqjH8HIHN6YWHZLhHpRHeK9XHvuaHtYH0I1HY8keHlHOmHLU6CHzCd:XEYgdsI7ALTzK68UBsqPT4zaOG5HWVX
- TLSH T15CC3E9A7CCCD8E758ED88BF9DC36AB5B88A40115AF9C9F14A7F9404C43C6689213F587
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 91KB
- SHA256 aa6d487214095ba0bddc6de351eb4790ad17fa43b35e87abeb6cb70800258979
- MD5 02e39264730123f1fe4086ecf12e8661
- SHA1 e8b2add259b09c9a0d46e8ead5887adc10963ee1
- SHA512 481c6eaafb115db5db3fa71f04f968134a63b3f4f0c679093724bc34e679ac820dd89896ba538e7bef4232a177d3ce179f6cfe99042c8316f27a74b4910f688f
- SSDEEP 1536:pH8HIHN6YWHZLhHpRHeK94HvuBHtYH0I1HfHOmHLU6CHzCkvocXT/HjHUsOzOUHL:OLTPKrasqPT4zaOGjkDCo
- TLSH T1C393E9A7CCCD8F758ED88BF8DC36A75B99A401099FDC9E18A7F9404C43C6A85113F686
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
- Size 91KB
- SHA256 5cf37f1b070c05727d24ae6e12a9883892d894996fd91cfc22f378da9f2cb44a
- MD5 af56b2ea3e8695e265cd68be81b8af4a
- SHA1 217a0d5ecb4fcc2767d8683886861ba951297744
- SHA512 e2c373d9cf1f13c2b65ef3561e4792db1c5059e6daea44a2563163e9d9c07392b05703d854dea15bd4d9ad02f7160673ab4a96eb6b558f4851b543354b661348
- SSDEEP 1536:eH8HIHN6YjHZLhHpRHeK94HvuBHtYH0I1HfHOmHLU6CHzCkvocXT/HjHUsOzOUHR:8LTPKrasqPT4zaOGPhDY
- TLSH T14A93D8A7CCCD8F758ED88BB8DC36A75B99A40105AFDC9E18A7F9404C43C6A85113F687
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\033305d3-4802-4536-a11e-01f3869f82ab.tmp
- Size 72B
- SHA256 0a00662ef833c0b0ef311be08b1d87d3086c72323a18e198a42b81fe63c2b337
- MD5 30cf1da0dcee645f86b1d55f7d8eaf2a
- SHA1 cacfcbf824f53420abcefd5f0d9ffd1eaee73eb1
- SHA512 2a189897fd039c6a0bf6298aa65bb1a7738fd00bf14c872100d359d2c3efb4f81f6edd74a363fd3ecdb74ffa0aceeb2c9aebae3f5d2e4d14a442520094712294
- TLSH T1D0A0022142408516C54442B12C4797995300F9258000175376D0478B8C600508961549
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 48B
- SHA256 affd3bb02c91126da3467a71b8b43e3dd9624aef4529f1a75a68bf93a15fcef7
- MD5 09e554556cbb3998065f3bfefa173a8e
- SHA1 bbc576156e97eb9bc7eb1b7eec2aa85e895524d6
- SHA512 277f14bd65885ad59d5ab6730ba5671b33670150b113d262a2892767fc22d36ac4867afc684506cb9e2f19c0243a9fbce0160fe3c8770da5b28a2368319c1172
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 72B
- SHA256 33fc85d6083c68dfe79bd232f77c3282da75864323a307f0e3c6de0760a78c89
- MD5 b6abe1fad936c257e5e478f8d662f2dd
- SHA1 95c7ab7e78c8173bc2cb42693717ded7fbc868eb
- SHA512 9bc6fb3f9da1b5801516fb6962f0c49a47db572cb11877a591125d96b9457ce26e24cf8dde075caea2e7f59909d0b358138dc6fb2bdc7e498b528a476bd49fd4
- TLSH T169A00210015AD002E53C07B22C8AAD85BB02E8228000031775F0F39A9CE90505B51212
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 360B
- SHA256 fd549020554968370b38590a9064d1dd8bfd1ab12f8e9982b22639788dd1ce48
- MD5 6761fb061e47e74d7d1e8f76bb2f0463
- SHA1 d97ca334412790eccfd7593fdd549c97eee628f0
- SHA512 9f21f8bd3a0223c1d47b315bb99b9aa73dbe878c7c47bb4e634e686497a8eb3cfc5ed2c2d7dd27f0c0d14d9180eb9bdc2d70f5aaf683ec396c4d26d0c8b5e82d
- TLSH T163E097038B4026CBD0B8D33C314B4056333FC6B1A71A73C6083821742CB43730E06499
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\2753c78f-6dd8-4c27-80e3-2db506c4d2f8.tmp
- Size 381B
- SHA256 2cd9c587e59eac2f9f079d1b9c4da68e8583630329d2d43f7f5579021376e65b
- MD5 8b6d3974f8cbb3661b4aa7b13a44d296
- SHA1 6af9f2a7ae4783dcaec26a07809089aa66614dbf
- SHA512 0fc8c7b4b6faf1b4c2d9f5d83d58c2e5a6d832beff2fba8cf562990b48b700774012ac86139e1ff188e4856af9447e5f78ee0bccde1169565077d7937b29d119
- TLSH T10CE0F15344D7B4438A12745896862D34802807EC42D1A975CC5A011472E13D64482571
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\4e24fa14-2038-4b9e-8785-95068eacee32.tmp
- Size 13KB
- SHA256 d6fddc2633d3215845abd2811542b925555a1f7d9145d3712d6947c407fe3ca4
- MD5 40f8b326641d6d0b6ae68f1b46dcc945
- SHA1 6c2e9639d60df8a20084c712cc36b5fa0db60827
- SHA512 d9fe9813588691dc5edd06c539af7836443e164299bec30de6f69a93dff20eafe8c296ce3a9516500afa283dc458c8198b2594189a7d6406367bb58bf641a5da
- SSDEEP 384:j6zl4DUxLE351ABZPIaxzBM51SHUlH3Hnuub4bHf38F7:jk4eQp1AbPIEzB/0lXHuoEHf8F7
- TLSH T13152CF7333EB83D283EC1D12438560EF33B1ABE190233616ED27B075B99917894246BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\ac51f0ff-936a-48e1-a61c-0eeb34d2e38c.tmp
- Size 13KB
- SHA256 b0c12dfcd09b99318b0e5c973260d846a9f2cfacfb3c1d93c334a4d466ff921a
- MD5 7dcb3037e9a677d448dd654efdcf7c1a
- SHA1 38c2398a1ee91d84d7582714c36db77228fd7aea
- SHA512 c5af43996b6ae9c1f8fd5a837ebb98cf33247bab284e48cdb1037be94ed755ab3c9158399030ac789e96a62007c65f8ac5deba314d5c1864a653b04568602aa9
- SSDEEP 384:k0mdkk3eyeFA5iwhY/s8lRO8jjCYLnRjFiw4h0QR:ktsyOAysdmCuivhB
- TLSH T16252D0F518F8594EC0BC62BF236D8C2D7B1E907C355E392155164387EA0FD71A03AD48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\be0a57c8-052d-485a-9044-7641983e63c6.tmp
- Size 381B
- SHA256 fedbdd0f038ac2bc73afbc770c77ae9e7977f65af9df87cbbd2a363099f84e32
- MD5 08804be2dcf11af508b7dcc71604af70
- SHA1 cd4da64e0209a0ee5934b7ed36ad6c68d69c2181
- SHA512 780e17d24042e6553c23aa5e38ff526b5f1f6da66135a2b4f94e5c10a1981cb6d2da01b79721557d4b98f5d3fb651719d5ae2df004bd70e165751deaa4881d10
- TLSH T136E0F1059406F3829630D29282E7281B6DC472140EB39370B24C3B5484E5A1E1E85605
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\d123eb8b-b3d7-41d8-877a-931eb4ffc275.tmp
- Size 381B
- SHA256 0254fa2a53cf68ee5acd04f13e61713f371ce083f3f916b38e3e8a2fc8e7e332
- MD5 5084a07599acfb69ae78fa19314ffafe
- SHA1 d918dea3baa8392e3e01abc8772b59f859eedb38
- SHA512 8ed88c3cb034385cbf7491cfaf17d01364211ee127a0798c02fdb283f77d0512cb3076f766947c0c896cadd75c28bbbf4b23b26c4318318adb5e39b0e248e063
- TLSH T1A7E0F1C002A2174126C458594189081C96407DAD64FC30843D9043214AA3B3B5045A2C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
- Size 637B
- SHA256 b15da4d098e8efb842666ea439112ea049127af99852a998bc01a7571d4c577b
- MD5 655adb34f0fd58b011f812cf6362cda4
- SHA1 a576b7a239fb45a7dd4f13a86f44d58a4b448f93
- SHA512 97d6298943624fc054b311ceb0bc8ea54da73c150e9d26a8b651a652ce4b92b0767b697dc8af30a1b3e19110ac28f3eb3bb6a7f12fed10ec1f77fb5f8307d740
- TLSH T134F068DB7EF4F729C21D622A97EEA93F4034FD295D67B61939605F4410496C1071C613
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
- Size 637B
- SHA256 33efe72f961e60bbd3002fa1b42f5917e29953204fdb99d8d5a4ea7eb9a63708
- MD5 3f4fe6f261cac7069658598d402f986b
- SHA1 9c7f47da6eb73fabdc9d94ea9c0c91b331441f17
- SHA512 08cf99cbc59c6044813a02214efd791210e7fa519cc52f9999cebc55c931c7276884c75c79d35de05c87a1ece55b42e965f5d9ddf720c8f377ecc2756450d730
- TLSH T124F0233B10AE116E4EB02EF2C92E6D1C424D3D6583356454377DE16A7801ED76C44F26
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
- Size 493B
- SHA256 b6e553b50adf1af3d559d966d0e73b774b437690e1f8d25b4f4fc1de1bb1f13e
- MD5 e870af82d7f9772ffaceb5a74a6e7340
- SHA1 eadd8c878883af5fa39c44ebdaac35cb0e195340
- SHA512 5a411d072fb5dbffb97ae85af4eaeed16eef1a19198b16218199abac9ee322021be75935ef5f9cada93d49afcf64c3d5dd75bca472858727c0fe4596b89865ee
- TLSH T179F0DC42889B16A25183FC9B9B23DA1D29220A7FF40345B571089EBF07CB6F05CB137D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
- Size 845B
- SHA256 c2536d57759b1f8d22b6ef9707af2912d7249f69fb1ed5afff2bf994c52f4344
- MD5 f2dabd428b7274284194b1039a2ac0f7
- SHA1 15b5d702c2288c81f8094378a245573b6a450b1a
- SHA512 f1975536efa7cc7af3deedf6d81388d8065850781fbe95dc9344e5d727bf1b5eb2675df7fd74e5ab741675d396ca9b707e0962bd027cbd803644a65de1ff2110
- TLSH T1F30196A20397F67301714DDB07D7564158DB158C6D17850AE0307CC7B080B905A936C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
- Size 637B
- SHA256 8fce872cf5a83126e44c432e8f5325c268a5d57807e3a4622ef9a79731369c1b
- MD5 75c17635575ba1b02df365d9c1997ae6
- SHA1 38615c2098b39eacf64b6f32347ce9176dce0bc2
- SHA512 6c15f37bc2f620c4cc901358f129ba7964ca1020c9fcb56bd8f8487dd86d35659541b24837db0f2e18f14a5d7ba211f3220336f9d4645456acfe24f5ed391cf6
- TLSH T11EF0B7686C57D836EF05C8D0F5FD58050302C351623A21CD2D3A7A368B13743F2615F4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
- Size 797B
- SHA256 874b8e5bd96f0da1a4db8d585697c7ad757ee444a39489ecf7b1569afd0100d5
- MD5 896352e990712b1eb4758fda4ab13fbd
- SHA1 457947569d8a510ee9f294900e84258358a93e3d
- SHA512 f80a08f4de0ee2c2cc1180caaba7d0c7e6a98c301381f4f557074145a5a4cfb205bff4637edcdb51578f57413cfa36305a6d8f8a7c0eec708755c7f0748f2996
- TLSH T1C60175285142227764F403AF3CEB2C7945CD17B62E23478F11F8D19EE7B6CD1AA41362
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_22f4e13f-898d-491a-8920-2f9e5cd7efbb.raw
- Size 621B
- SHA256 ba651a5784db2ee0eecfb20343cdcb958a3855d2985656dbbfb93a5ef12cad1a
- MD5 c4ce40278a6395469c1e3f5b100ad1ac
- SHA1 ff964f5864b196b6689fed328c6a5a18ecc93451
- SHA512 769fe43feaf59fb0585f51347a0fefb468209f4bee7573cc0d331006532555421ab5c897ece66d33c9385b68fb6b0b277727039b498cd254a4279b5bf4755067
- TLSH T16AF062F2A14E6482B6D091A681DB23898E2D3AB8161D1D2745B0CC4BEC205BC4357FC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
- Size 1KB
- SHA256 06f778f882fa39959dfa89ab7f4465c8684b2c2b6664d26936fd6c0792a586e6
- MD5 6a8e359a197eec1efac7796e24aa4485
- SHA1 d29fe34c3526bb623d3f44f98ba0bc47ac0160cd
- SHA512 b591a1f2ac9417ef1264f0f9660230376582390d1ecf8e1ce4d55ef3983c25e016492afb963a4bfcaa0337a91d973b006ac6068ef71e312b13a3ba5144a83ddb
- TLSH T175211A465A22B0F1127399D9A03297D3351C02D19A7DEE479D107CD417F7EC18802FBE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
- Size 493B
- SHA256 7213ceb633673d3268bbfee83adf385f8d3c244ba6f4a27e02638bb3625c1e09
- MD5 0f6cf22a8ee4c8d975defa1ab7dde626
- SHA1 5e894a13a96d58ba0404bf14c448e013b111c144
- SHA512 14b3cc3b2ded4db4fd08ac84882d43532c872da9ba23097e1407f76eb35558ab2521713e341f886339a3ace73b2b4c94f3c743bc7a28064ee311b50955debbaa
- TLSH T185F05442ABA6645C9F6217FDA0D74F19930F839EEA8D42894B9338D2D2FDD145301A06
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
- Size 605B
- SHA256 3794a7ec02c4d6064cebb01bb7e28cf846710a2313ecb31b54ebcf86f1e96eb5
- MD5 4000e235910b5223be5b78b1c9341232
- SHA1 345fd016538a848cfd6ee1d8c86353946cc57a93
- SHA512 214bf1678a6373399c2a3279ad2214e4fe1a0c65fbca37f918023ab61c820389fedb14b754155f09ec703de3bc06c5f98765221c4ea770d86095450da30b75cd
- TLSH T1BDF00236A53C77C483DB1FF4D44F4628E6E920470B624248DD701B25D679A325E43919
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
- Size 765B
- SHA256 c5b8ad56cd76e82d18db3cd4f9bca978551d6ac504526fcbe2ed1536e4eea01d
- MD5 56b01128daa19dbe3b807196482c8f35
- SHA1 fefb850b9b0f1bfed71930cf1c7d3d0c96dda6c0
- SHA512 a495ca347277a19c95dfd06d1cac7098a70c2e5bf811bdb2a5eb5c3bb04efa36cfefbed5299b10f31ec7e98bc985c02df7cc9e9a2cf04a7d64660d66644b462f
- TLSH T1BB01C0C808BEA0B3F0B33862D5288A483A821E34B30C64250EAD321873E806C89CA803
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
- Size 781B
- SHA256 b44974c8642056f4c72284bb2296ee67d7b267aae96542e55eedfc448507e75a
- MD5 ea4249f8436a5bce7a8ff8cf0c45dfce
- SHA1 fd751d0ab042b0ec3f972a02bc00d88013303d34
- SHA512 d51ede528c51984a1d86aedeab07f849c7485be535d74111750fd258147bd9dbba8eabb91d47c6ed31bfa382a6de06e5b3f2b701c1c5f7db7ee5c4e40abec00c
- TLSH T1C401758E217E2DB64E0112ED481E533E786CC175920E61A36BB05D43CDDDC60D7792C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
- Size 781B
- SHA256 cbf28619491e00eb69237b9519f06b56a4b127fcb2638a80cd2c034a6e07ddf7
- MD5 dcc149f8e09d8c67442d9a775c07033c
- SHA1 9316f176706f6e8cb460f6b87c78f7d7a7dd477c
- SHA512 5f777fcb90c0c56444f7bb3850b84a6fbbf0c8b4f4467e7be15b1044d735764484319b7cfb5835b46bd1ad349f9e98cf89d281d8de7c92828d3ccb77907e7382
- TLSH T1AE0175DD854C079B844E9680A9E25CE93098A8B8D0C133D48F41EB63ACAC61674F1133
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
- Size 957B
- SHA256 d513c54ede4c81a0ef371167f38af50342f056ba40f0742e480129cd50442b4e
- MD5 bb244c460d3e512cfa19889d19a59b4e
- SHA1 61d2a79c1ebbba50ba028bbb8848d0774aa0fe4c
- SHA512 812ac014e59f672fd9f40168665e6c52f0f2edbd7258ee5d008a44ae0bcf119962fe110859dad34735009673cbefecafd7cb0c220dc858ddda60f6b183e99ec2
- TLSH T15F11C4283EC33C568908638A92AD784482940329E78283017A22A7B01C3B08A3E983F2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
- Size 1KB
- SHA256 4f088964813b6ea47a5bcdb32f04030e063bd8b9241587d0d2216bcdd1078f61
- MD5 2ad181ec3e5e3ad19dfb9766c7b5b9ae
- SHA1 4f225b70bcc798e0db631ddbadd8c7c463915689
- SHA512 a536e0665b9579e979648660269ff641dfa616e8a29d18013b0e4d64c8e476047d7813ee3090b4798d96308120c315a63f249f619fb20a93aed44e6d94e28195
- TLSH T14521E7ECC9A0361BAEA424C931607E7D0B3C8FB80B7243A9CB550024561CD1ACDF23F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
- Size 1KB
- SHA256 bf2e1d65e5b8e42a86ac7e5e99d6ef9380c9d316e775ce352f48426f8e355b0a
- MD5 8d22d669b68b84bcc8dd245283824984
- SHA1 3b8b9a4fc042673cd4c4d11a88ee9c2d13fc9850
- SHA512 e0a21e26856947a3b0fc072cb211b6c25bc7b4e98820865da838b640df1134fd367e222c86b206f8b76de50019752d8e59c28ea47674b0b57d533fa0b54d99cc
- TLSH T10C11B5579177A8F8F2101AEEA67D006A00ED304841A9124B57D9D6792FDFB8708C5B2E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7341348e-845d-4d48-95bb-491d8e3f1696.raw
- Size 1KB
- SHA256 fadf9dda02e1e0173522e5bed05094139cfa5c9e58615f112fe2d5920944b77c
- MD5 6df68816a4bdfe2a28f96235c7c3ee31
- SHA1 dae398ac83fbfa2c1b494df8e91416413e6c0dba
- SHA512 5afd0c971582a02b009f16f8cd59a5104193479785fd082770a810bdbe40aef7669f16fa303c538ed43214f173096edeeadeae53b152d49389f6f8bbbab3e37a
- TLSH T15511F904BFE7C055402DC85A8A4769431B9637D265044F91ABFC734540C680FE8C40C6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 61e7fef5841e50d31dc545d1929684b6609f4334ec55505a688ff45b5b5581d6
- MD5 f65626263feea683f662681b24595295
- SHA1 4b82d03b1c87331623407a7f414b6d1328c4bd3c
- SHA512 7ab4c777bcf4fbe55b8a8cfc70fd362afb041f3d35924e20dbb1123159e8ed93a112c8e64d31881e806af39dae82a16c694ca0a27ed81717256f84af3767ceaf
- SSDEEP 384:R4BUZjhjr3hzRwQJuCsb/FT3kFssZuNx+v0vpD0/L26:RvZFjThSE0/lkFs0vB/N
- TLSH T1ED52D02CC2513F00288F1C9AC83B44DC9F36D3BA3C61F5D3059521B1EA61C9D9BED29A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 e88738e56ef2258e1b40cec623c846fce3d95bc9e10ca0440b4a9cb595089df8
- MD5 a235d13dacce7736aa2bd8380f0442ef
- SHA1 6d3bc6bd51f390ddfa3bc0df88076758a96a8b9e
- SHA512 02805e003ef6d9ab8ee5982496aaefe515fd489cbcf1815c5334f0dd542da8092525825a459038714abbf80a55d017d3ce04c4261455eb49ce190a5e90b4d6ac
- SSDEEP 384:98c+DzhZnvsDuUIiRiWMyF+o4OPHHjZIlW:9H+3hZ/10F+ROPHH9IlW
- TLSH T13A52C017517CAF98184C950C98038C467DBD045F84BE27F8077D535B2A9FD2AAFE9582
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 14KB
- SHA256 e94174a2ae2f27a8c6774f51c244ea0cfadeaaeaf873040083b62063161c2b5e
- MD5 ff2544ba076a4c6ebb3c1a443e4e159d
- SHA1 af3b571309b4b2c2434c3cb68f554da8195e2e08
- SHA512 161bfa5478530ad3c9a9be5763b73128dd492f0d86b5a42a21de8dc289f80b25e72f53c6b3697272a9e564ac73c1fc28d231c063f19282853cea11ed95c0b3d5
- SSDEEP 384:d+vx874/vWyPqjI7CUctJO5KplsPF55/9Ss:Y5874dBCUiJOE0F519V
- TLSH T1A762D01D2B9FEB6D50055373D662BAE88A4EFA198A430365D72C329CCD868C2B4BA141
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 12KB
- SHA256 512a896ffda0d842e5e076e11e829282ef66186a4dcaa7ed7a51a1d4c49e03ab
- MD5 e1047d4893e57c4e6a69f33edc35c246
- SHA1 a100c82110469e214148d4449795589b76e73363
- SHA512 fcec91f43b4446bc787e6f0374ac5d4a7ddc23c017d514fab54f4d4e266e23ce147a83f670763874b0c41ac8e8f0e0a48b800fd28ee58e5bf832f424a3a07fe6
- SSDEEP 192:4zmU58rsGH0kN/+jlal5QjvDyxjO8kT7W9t9e/bE+gMqKqMLxsRAfft/jCfbSHxI:4zms8NN/+j8lmjveIJTTyMyRSs8cH
- TLSH T12342BF428ADCEE93205B6796443EB118C775CA8C4B9E41744EA8E86435DFE8CB13057F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 12KB
- SHA256 27498700782f0d140fa3b5008327a53eea2993541c7bc08d08931070a1516863
- MD5 d494cae68fb5ecae469b35b701084a3f
- SHA1 3d82f303151bd5d5334b4b86e1945a690d71972b
- SHA512 532464da7fd3315dd54b832d59162a74e345ce3cf76b8025cdded8d16924620fcf7d5be66ecff1ffa146b161392639c1936bebd713fd2c799bcd65319c29ad47
- SSDEEP 192:TkpC8ZQfoeUc0q4JDAkzRNRklzv6BYU+5DMOYOaB7PGqWM/fFVVvi8UU7T0+vk:Ic8ZmUF99ARlD6C/4vOcTGqW8FS8M+vk
- TLSH T1F442D0DFBBCB50E24D232593D23729B9F872685183526BD1B8404722ABB72E8457136B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 12KB
- SHA256 b4f5f58b642cb0e698522b87bd5dbea60b15ca09766b8be90be2fc0f45688277
- MD5 eadc8fc4198b37da8f2677e585c6ee56
- SHA1 4b9f4f96282510cf8c5bbd4673353e78faf9471a
- SHA512 a54cec068dd1bc7c085650d419036d3a839252edd6d67a31bef53dc5f395ddf279e7f558c4a987c153a7da4f966ce45924b735a3a86135a71ae87f1e2a190fdd
- SSDEEP 192:N918vK4HcZTfQd8PM8t7bLqoop5uagfAEFuKJadjyvJSy+bCT:N9WCe7d8PVV2v5C4Ek2CjE+bG
- TLSH T1FA42C03A50D21F75ACC0C176CDAF648120F76493A4029A797D9C3AD1A7E7D88BC4BD8E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 3d51499c7caa13a023e10ada8a5a6ea9598f931211bf2dc3f9075074c508b559
- MD5 c449de7cad285a16fc7091ba5c28bd9c
- SHA1 4886a397cd238c8c3424fdb4d25a4b5248bc8be9
- SHA512 bf0aa188b6cb9d24907e931dcbef9678356f56b2b87a7db3440d330963084b90ff300807f7831e0fe802a26ad98fad602039b2c509dc96317818a0ba5c407ac1
- SSDEEP 192:5o2kg+2c6GQCc85Dkqnu1w22E67IMqApabVWaoosD6R5aGI8LbBstzWCA+lq1k:C2kg4bZce3nuVpwFpLjosq5x1lsjAy
- TLSH T1C652C0C05D06CB14E085F439269F159648D62D8A257C83C68FAB3375BD49037FB86F28
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 3d0f37d8277cad10198be78cc0acb6db160bc2c55930ec8a889aa9468198b8a5
- MD5 8cc7bece29827852fdd0a0f502b008de
- SHA1 4385e6202fac72d9ea95fdbf34131145888915d3
- SHA512 97e3224e93e8d2cba456d544d4603f71137e0799eaf151cc0fe0a33efdeb938c7396c4f64102e04456a67a95fd3784c5b9be828f3c2d4a210c6e91699652b06d
- SSDEEP 384:RlBsQvx2rMBf1jNguxS1tjr4GgumOt9NjeHAZl:Rl+VYBth1MDjrGTO1KAZl
- TLSH T11952D1B854E093708C4D599F45B40DD677C0AB5BA847F1080B3F6C95740AED8AF7145A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 e9604616e26b13f2c55916cc1ac8908dca1911d8579af2c9caeeb4ee8e3be814
- MD5 4dca1d51fbd1f915d45b973312df2886
- SHA1 40c33f3aa965241cdac15c9cf68a4d7773cb3571
- SHA512 5103a8437fe11dec1e7b1d56204736bba859656c50a898017214ca48af3479cc3c1a673dd6cea708a7e3c89bc7e701dbd33fcdc46cd930a9411a768349bd20ee
- SSDEEP 384:35vpV+2keWREuq2c6nhsQvcFQEpFCWcqCdBslAMqD:phV+2IEuqZbQvcFQEpkvslAHD
- TLSH T15252BF0706FFCEC6769889516B461693E035991CB9CDB2DB2084DEAC627EA9F1D02F80
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 5a73d435746d96a8b8248f45b6cb987b0d86ee70eeeb759ebbd3060652f88d91
- MD5 4f050590a2e4e51a79b22dcc8896be04
- SHA1 0526ca7d7be1ac5c5ad6c84d638483694a2c247f
- SHA512 1ef55ad204681d6d23f402a2df35cef7a6f8c2adcaa12a5d4419a680374ba577e30e194b3de1be2f5656d1f03ae90bf6bee3a0c1aa8a1bad83befe45d3e34151
- SSDEEP 384:yddPgSUyNM+FBjyW9SNlad3921Chu811Oe134Ybcu:edPg2NMI9nuls9kChuY1Oe1lbj
- TLSH T18752B05E78AF7322EBFE5911C38BB925298B914E17117735723D417C621CD0B33286EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 38e3067503d437234dc9a707691483305c55893aa3b619477a596ac8a15d1de5
- MD5 4fbd112466ad82de006bf87c2f0c29a5
- SHA1 c1c7324bf7c693ccd11f670ee6b018c73e4459d1
- SHA512 694db860b1926fd90231b4e4bff41f57ec556056a05ab3ab06d15b2a4151f95c03dcdaf4328b9285f1341cff61a1d87c8091e4d96c7c6b3f3add15d23ed113e6
- SSDEEP 384:7bdm0lMlj2zEj4k/9gPcdhSYvla4gChxPJc5vnSWcjLFSd:nd8j2rkFgErSia4TJAvvccd
- TLSH T1D052DFBEB38BDB98B4BC020DA16EE5248A189E557C63016FABF0E7066336681321D425
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 9db32d46c88dd2a556a34f793cb4119036be88e8fa0bae1823009c32223787eb
- MD5 a1e3382ac42dc289f0942d174086fcdf
- SHA1 e807dc517da1e4e05db8b295de0a40fd0a741928
- SHA512 9a1eeb1e71ae1fb6560b50bbf1832e141b7d0248962d4bd57a0a4ddf6636392f7e3277dfc8f1ecaaae2f15e8a3f05c9eaf39e04adfbe3b696fc66d5923c1709f
- SSDEEP 192:RDU7Smk/ddbTyGJdaQXLoOmq90tJu5eBc3Ftz9490JzutqR7DHHr+vM1MEc7:BU2/d1TRas9KPy3nZw0JzutqR3HL9Xw
- TLSH T1F852C0ACCA4D060377CC7289039F79232A87D49CA97A11FA274411F729AE2D77B13D5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 feca37ffb0d329723f138518c3cb5a4671c320cbde498c7d601aa61b77bfe38b
- MD5 21a536a603640544ec2d2a3bfa63f568
- SHA1 980844affd06ac5294e1ceb09aff57a2cd7d2e8d
- SHA512 2b9d737e702e615005bf13cae5467310ad71d9134200740173b7327c07129a82e6c1df8481a7ea65630e3511d1465ea2de82e65a8ac76d43df23557a82fd0ecd
- SSDEEP 384:xUVS3UNKoFj3EvmPQpkTTuJTW4ZjzTqCZPrp:xt3JoFj0vmYpkTTkTW4RXqCdt
- TLSH T17352C0BD06C1F2942D4A2FB8FE29D26BB860806B8098D3609F05FE6935B5FD350C15EC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 93a99b68bbc37cfa45b42ebea676a32554fc0ef1d7fcc4e2031c6e450f74a648
- MD5 77e7bb3f3a07b2d57e178eeda2810293
- SHA1 de61c96b803babf1874ec2b199793adb21d19721
- SHA512 9b9820be6f718825fb3286ed0f794ca98a16eb452f165b13f81d2f4807ac4eff303c1044cfd23d7bdd5a80c5d99466058e64802216112f8a8fbcdf8946c8a027
- SSDEEP 384:mntlYvuQcZTNtYqOD4TDGv7+1zJdQGHl9H:wSyPOwE+ndVbH
- TLSH T1F252D159C146432A9E0BA79CDBFAF47601CC02303BEDED4A8875C643B61D11B6D98D97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 f55043bec7aeaf2edb49b91dce9632b12dc3c7d578c967615340589c3a42e46f
- MD5 358796b333f63262ec82abfc2f18f388
- SHA1 ff64ca32a4b33a39a9c11bfc21f79ae7e3d1b3e5
- SHA512 0af548eccdcfeb0955e742f4abca5f8f9c15458f5c122e04a5d8db1c5a7b9e6dc8d847910c24b2e9b966d62a89838ccd6c2ea1ed4d4435ac06869e38a8ac40f0
- SSDEEP 384:6Cc/W7B5cU+a1n98w802Zd2IFnXc81rEMbBBKaK6:7WUz9jOd2osQrmaK6
- TLSH T16A52C04C3444A6574601210A27DF6DCDF01B0AF32E972A1E9D550A4A2DECF71ECE69AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 43918734789ad67e0cd23174678395a1f72b1942f8ccb9c449f4960511bd9742
- MD5 e0055d57e26aec0199dad453c16506dd
- SHA1 611ca74233bcde063a93da5b04411c44261f9c8e
- SHA512 7699ac4aadb8f8db349479c4283a2e50e458e23567a652937bbdaf94f7452817df9ac110841ceb0f15eddac6e23f67ae08cd8a43f5a44ecc5b10f6db168ffa52
- SSDEEP 384:i4w67K14wDBc5cOIwpK40eq+W4B6rioG/kr:iNZDsIwI+q+W4BwG/S
- TLSH T1ED52C039E889CD2FFE9290E55C0B56AD0D238C89627B0B482F6573D95300954E8D7FED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 8adc129d1887c348d382171d82bef7eddb95c012e9a25aa609099e6c0713fd64
- MD5 3560f7d517da785a196f8dabf51508fb
- SHA1 962b3f1ccdf16ad313dd72a6086b07ad71d18264
- SHA512 0dd67d1d20f31927c87f67083084845150e0ea20b7e0f9632b6778f80b20e8829dfbcd858a814ba2ab1740b22a5f3e4f0ffb87043b765e6e6e0b7274a34c8096
- SSDEEP 384:GelH4N3fum6yrvWGXnXr7kEVUZ3pq2pDhKHSy:GeOJViG3XrgEVUZw2Gx
- TLSH T13852C0EFE2F56C2246BD8DCCCBA584F314EED91530C242E04AD56A1C3D20162B4AC937
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 057eee81e212fb27a531bc4d72e998ad9c2f8ec78c2202f234b1c4063901fdc3
- MD5 516f875a9767bbf1023868721e4fe0bc
- SHA1 66f3bf46010c557c3d67a25e64937bf735d3d970
- SHA512 c6419a6512795f45f186dd85d77cb9233ceec0a839a8169cbd157497ab52e0da54bcdc0f1db7ecd44fb789e8c2ea1a02b0241e0b7f01ce2174f6f9cc8845fcfa
- SSDEEP 384:6hYgJY3BnQkGRCPQ8j6kkRikYBj++s8dyFpJr:628b3RCTjzkRDYg+s8dyPr
- TLSH T12352C025BA22BCD99F3E54137B5E269881E3FF504052034AC50B962666AFF1DEC88692
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 86b81f749e93ac5e94ae62a0cbb619cc690a9e02ddcaf6fcd143170e08030463
- MD5 e195e548ba95f745a7291d623cc04092
- SHA1 77939722be1542dd78c0b67fcab9042ffaaea2eb
- SHA512 316e973649589fb48b685539f396080415ad86c887845ac6f2c0f5a084c0fb1ee4a9a3556f93fedeb44228f072427698235e95946e4dc54ffa7ea7120012b00a
- SSDEEP 384:Ll6yuQQ89XLaM+TK4x0bJmaF4HHgMF5fJw:LxNRLaDGe08aiHHpF/w
- TLSH T13A52C0EB84CD7EB24C4438AB946C5730197750BA2EB581440AB0FA9C76EFC66781A981
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 4378a94dfa4d55a1cbb88fffecb1a385fe2363022c78f2a356a1adbab729e4d5
- MD5 b44649afed1539f907c549995af561da
- SHA1 6790bedc91f39f29ee5288aff97b12ce7aac82d6
- SHA512 f3a58b85f8a935e1ff4e2c640aad40833bafc2c72bf35d7cd8fbfab3e0a3503392c2cb611679fe518f8c703bb0699fd0bf26f79354056c857ca38fab14324727
- SSDEEP 192:wrBzrvPtHP5wFFRN+RwQJ/da1eBPOHiFstH4o4T7s9QIl80FIl+r/Lz+BuQNxGwK:WVPtVRNZQukiw14Ds6l+7+Bxrk4i
- TLSH T1D252BE65220BB6690FCF41217209A2D8E2C06E5F7E1866ADB09E034D32B6F82DFD9008
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 8a09ab2ecf8b9c4251ebcb171c79081e40d8e23163ea5d6c7a5dd834d9b6b749
- MD5 e6181bd39e614429ba01b24b1584b316
- SHA1 6cd3ab94f792976e5aa9b828b2f6c39f9a14a18d
- SHA512 e788360676a4492a0800e0edf0cdc21a56affb3fbee24c08d93699f2edc8ef52e1f693e4584bc58d91600d4864831cf71d09fcba512f1fea42ab2c547148142f
- SSDEEP 384:qpjBtDE/mVBWexI/1ps1ieQ6M5Jezw55QrONAPF4A20:qpt2O7svXeQ6yJezw5+qNA60
- TLSH T17252C0A946F7072B54C6DD690C78D923732CB986E78E39919B0C90DC850C5F134D72FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 4c67ef690142b9ea84325a4eead017c3809921373648f417c4398ff0462b68dc
- MD5 b4b86961ab717aeebc8b08e4dd367966
- SHA1 a097c97c1891c724dd9f35785763064720fc36d6
- SHA512 2c41dbd778da40bebcd02e9994161b753d7cbed735c70f2b68ca9b015734122bc59067454dedb2f1989a6c52322aa5547700715a733dc015edb73112869169a7
- SSDEEP 192:RP5fcqeUxbN1JaNZ6KUtVyafoQyUcr8fH5d4RWnFaYX5C+eebFavbfFhhgBTBEnO:oqrVJKwXAQArE4RWFaYX5FBCS+g+6fp
- TLSH T16652C03BB730B4837A6F9261085D8278204A1DCA25C3D0A55C266A58969B780FFCF9F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 14KB
- SHA256 e5d582ebc93b7bceb01385f7e28ec3a9765b0b13291b7583a558ee3a6eac98a7
- MD5 d6e59bba2465fe9f91bc01e42b4fce5d
- SHA1 bf8393265f0a37f3845d3e2964e1e09dabdf42ac
- SHA512 b06b2e4ed7035638e6c0a2c2807af4b3aea8cea65418a8c5f5b66b3355b294379408d04888d7bab185409dae53fcf66818e548598f23d7d3b8794fb4ded3901d
- SSDEEP 384:RaaT0oJky24Qt13TMyWU2sx+Q6cWz2UgUE6qWNL3cTlLY:R3T0b40qsl6Bz2U66qqLULY
- TLSH T13462CF6C008783AFA5A99249E77622121CF43E723A47357A9FCC3791E20E644D3F8BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 12KB
- SHA256 f12c732b3b15329f613b6757b904e882546c809262d0a2352198e7627d01450e
- MD5 64cdc074e0183e337e93e706bb04761c
- SHA1 11d8b77b87a87e5acd5cb1b4aaefba56e2503a8a
- SHA512 99acdfbf502f5087b09e3cf523ca77ece9de90fa2bd90f6ac540712b5f1c6f0cecb9ebe11e09bde39ce1fc2fde861d89da802d91aeecb7f08d93997c5b1934ae
- SSDEEP 384:kaUR+PfLcagPel/q1WXtAP70LkEGYZqYLdHj:CR+nwnPUqoXK4j4odD
- TLSH T1D942BFB0DE2B5B80D9B51D12EB28CFE102E7E26241BCAB774F55E7DC94AA8801C9D047
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 9d6c82114e8b21f4b52bb12646aa95e651ffa701fe224a313d8420ba42c353ab
- MD5 4d5092febc076216bef95afa900a60fc
- SHA1 457c70fecb920971ae0a9aace418bedd9531b7a4
- SHA512 34fc49e297322b127a0f19b2d8e2542e6f578db677f69e7c443489849edabfbcd7a8274824698205c7f4eb28a866fc4ff996a35f4e3dab537b79b579e43e2a29
- SSDEEP 384:7CUxuI9jykn+C6VUASH2jvT1RKdIT3/ze:7Ryk+CIdDT1Ao3/ze
- TLSH T11B52E15E966A304AA1F732B78CC5D007B1F6A5E8705F59DA0F0AE529074F436B374A23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 a2a21f89daa8fae00c147494243f0eebfa3c43c6dd1d93b386f8ce3eee03753e
- MD5 42aeaef7a4974ce50f0e77d61ac4c7d5
- SHA1 09b5f8f0e405d1a55567763a3a804ca1d50990f5
- SHA512 599eaf5dea7870476f6fa079edb889640526850bc842fdfad3f44434ffa86fbe37eb08bf0f52d525eda7d960a05f70ff2cd1049002150f49e791badfdad0d9aa
- SSDEEP 192:tuYejXfgqSl1+/Klm6ouQHlZIVGnq4k4iaOuusO/klrR31CU09/lV1WUc/wzG1xI:tavgbq/2yHl3nq4vNus5dCP8U+l1xanf
- TLSH T1EE52E03EF9C15A43C1C530D9908258D876AB54EE3493F4AE4ECB01420BC8E07E9F6B9D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 8eafd8728db110acd94e5fcfbf8ac6339c5e8f6535826eeb0ceae35a7824ff0c
- MD5 2307d0fee36bfb70e8e135c9785e88c6
- SHA1 551e757eb582bc4f2f4ae9a3573ccdff9f68a009
- SHA512 c11ef261c687362efb66a83d7e5f1834d23b2275631adf61dccf2c2537ab19d273f00bc02ff24568ae042346548d3929f0d98158b438399bccde4a9277d4cabb
- SSDEEP 192:bHCDHzzma7EC1fKnfH9SU7wwv4W2BmbvCqlo+++/A48qTc8tKGrZ/2GJZ7Y68v0G:k1eQe4qCJ+N98qdtb2eY68v0G
- TLSH T1C752C05B74D01B9EAE580ADF3AA637E02638C0D91F84C9F9E75A90F125C8C3A24F3520
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 b10cc2dc6502a17d2e5cda536934f49b307ac85f5ff380f70b619bf3c555630c
- MD5 efacc612bd722e1f8dfe9ffca4100303
- SHA1 a4df8388d955a45add1bd0a3e0ac126ff34f9710
- SHA512 5e3f70fa037f36268c59a7fecb5016a347787300f8ae9b7c2a8fa153d05708c36fd7cb0955d47c546e2523f12bf0f996427b060465cc01f47352ee484b988762
- SSDEEP 192:hYWnlDMywZaZMlTVXLOXRB9oCYxRujE/GbAtbs49IA8hSsBvxoWst0V/+D:uWlu/gRBGQYubebswIA8Nvs2S
- TLSH T1FB22AEB0FC139B6936A917878269CD48721263A83A2FD28D5D05F275930A1DDE5D5C0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 11KB
- SHA256 d68f190ab654f39e8f1b973ecdb999f254cf78e672aa93e60fccecb14ad3b99e
- MD5 6be2211d5970e43f3c20a1377b4930ba
- SHA1 e81f831313832c1b28300787ef44d710c6ef1d13
- SHA512 8d0287479b07b35bdca3387f700d02644947fa502c9eaaa528ac81024ffa1c9230abcd88a0617f82ed08f30c2a845f45d543f59b5f43f48ea9323e0ce3d93b70
- SSDEEP 192:3J9TrXQb4Uw62FJN+yR74H+L0YKXMcxZISvi1UOtFGsxE9whghl6LB3xut64:zTrXQb4Uw62FJ0jdXYSwUMFGCuqNButz
- TLSH T1EF32AE40AB20146E4DE1079A0590CB082C73D5EFD7BCE1A3EA6B5929105E7F8637BCAC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 12KB
- SHA256 728c531ccb927424f6364eaf770a4470174ab505978b46f36f10fd423ebc29b9
- MD5 e2a784ff50a4eb472c6427f68eddae7f
- SHA1 628cbbb4090ecc5457fe20f6f8fd425846380b5a
- SHA512 e3f6fc58ad41dd70ea35551cb3bae82385197e656685312c5c37ae9200792c2fd35f73d00e3215f0b16777402ef46d1af27b88d4ca0df96e6ee3bd58bf59aad5
- SSDEEP 384:al+7gN7Cs+3VXHKRTv8AfE9B1efN+PJI2GrpRjYZdokKMqP8rAc:g9J0pIvwB1exbP9c
- TLSH T14C42C0AF64DB84875929BBD7026EECB810EA53200915DCB6217F5C6F5F70D0894E5F0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 e3ae2491b43a157902763319ea18cd3c66609f98e1382cdadbc825d5103c7051
- MD5 45267fdb25871207b72f92b20e8cba83
- SHA1 6cfc0a58bb70efa2009569e983178c656d24aeff
- SHA512 efeef059b5fff3f3541103d672ad02a6f57a749ab30224889136323d5dd69446cc6ef220016c6307f1a58912e85dc4ecff2b283c338b1ff5a0db40047ffc8c91
- SSDEEP 384:eyAsdKKarQ6W90MDnwwHn5xSsKHAGuppcZoRKpO+IB:nZkKarKuanw0n5c3AJHn6xq
- TLSH T19A52CF394D9752BB3558897BD060BC7E03A6ECD6B400483D4983F217F1DC263A1E5D6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 14KB
- SHA256 780254f9342ac78e2061f0d0ae5a8dedb9d676b57a818a36b3404c0573ba6895
- MD5 28c95cf7717836d366b8f3b2347453ba
- SHA1 f3432ad65eb815f577eabf9eab86befd53fa0710
- SHA512 f9e29c18dc0e2887ec1cbf0c2aa5e7481c717430a0e196e7dea1295f8721a5231b11eda4c93cbc4ebed1a7769e45667a805c5ee74ff9301c602957138faa5034
- SSDEEP 384:4nVxRlT23exIW49cy9PbSdqDkqgPqZCT+:4nq5d9ztOqoT+
- TLSH T14152D0EC68BCC9DDDB41664B91C40C9441D94FE6D1B8C22BB0F54258C383BACD41916F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 12KB
- SHA256 89abdba3cb8f9364fbcc1964d44ce50c20e78926e9fe7feb57a0a936c674a9ba
- MD5 bf92fe37bf3513fc634d78b211617e02
- SHA1 ac617b179dfed39043b05830695d79fa91edac1d
- SHA512 1c234e3601c3d67378f68a5c512e8a4cf987bc33978b32086c2af1435aa18eb7287e95ed34eabd07b5df604715ebe80e3ba6d4a6b4c37ecca5e90e384a149e31
- SSDEEP 384:x5IidWZRSZ6/A8EpXhstOrZmmrvZUrJo36YGZ4Z:xmQWDpYfphsa7sw6YG8
- TLSH T1D342C115EB99A43AF6752F61BB0708294DA13F01FE1691E055070B64DBC43FCDA72951
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 d43f9d64f2af8b89007db4a8d62872d5456ffa42abcada31a3c485e40e7cb85e
- MD5 50344c3dfe6050ec0180bb905e578b8a
- SHA1 16f086c4efa10319f6125e0bcac3d63253d1b4b5
- SHA512 2ca0147fbceae3be386ec74792a6a14d1775700f456458c42bb7705aff6f481dba0ea2c89e0b29a7e11791ad595c1e46fec9dc34ca832af5ebbfbdee8496f11a
- SSDEEP 192:ic/1jWg8lWG1I/Wrr4l0iEe2FXnc909YMPYJ8VQNNlw5NVRb473:FBs7SeWLpCXc90KTNNeTRbg3
- TLSH T1C922BFF25241BD48FE992F22DCCBB668D51B02960DFB907A6E10B64F752502CE0DC1C8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 f05bc699358d283f12332e1431036a5a1069b7cca8f8e5064ed37f3fdcdee2c2
- MD5 6d3be5f57450126e73c1b4d6425b3d7a
- SHA1 406bde17ae94d8d06b05c7cdb4ebcf3f87426b2f
- SHA512 a7752b4b4da6e495cfc32cdf23a24f602f0e16778c79fbf2e5f340fab7262971bf47d1a8e80c7881eaed267c0913a24d74dd9455659e87efc4bf1beb53bdc912
- SSDEEP 192:pvxHdacZ8YN+x8WEua0SQCANjbp77c/on7lR6bNAUWp661ed2:BNdac4x8waYHMY7lw1fd2
- TLSH T18222BF2C1EF3F87D324FD568004A951B838E76357592E7A94F7A0CA479A4DD301E6888
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 41d9459602253ebe41a245e88621965f859e203efae66b457e0d945fe046ea0e
- MD5 f3cc4aad44f239adf6b8bd499948ff89
- SHA1 136fa5b56cf22e6a0a1f04b956a15444291ce5e2
- SHA512 6e306054c00a0e44d7038da93dbd8bd385324eb0c0146440bc78a4c48903b711879b28141a98f574c68aa16099ca7a87105a882fd27f2246f8035e488326bc14
- SSDEEP 192:YCmxz1/JPwRAOmgwN0TNJFxIjJMlvpfo3e564A/Hf/1+cCdsf:YCmJBJPqAOmvN0dqjJeQ3Q2///sFg
- TLSH T1CC32BF17A386355342AB631380F878443B65CCA569650FBF340B2EAF9833F6B1604E96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 54d025f922aeeabecbd12969295efc6491f786d35edbea03c91cbe3ae0d26164
- MD5 6d7458792330242b93f17fa941da65c2
- SHA1 a6d47a424b6a5e4785bd2da663e000eb8a1a5a1c
- SHA512 7f21376dcc62ff0297254f326c2c3d220ec555e94c71619dd942a45090356314e690f91a646a1c0f83f68a158aa9675fdb9e1580d36462f05dcc2031eb65ced7
- SSDEEP 192:hTIHXC5BoatCQSHd0pyQtorcgLOdmPGFco5AnGAr5mfo9XMX42FUSjK9gvAKXu1L:5wX2C2LtopGHAGu9+YSegoKXgALfm6P8
- TLSH T1E432BF2E906229DFBAC651C715D5239296CF345A2935C397E60E9CE08472C3BA20DEDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 066c8d00d12451e80bfb271881b5e47d17904cc9239e81613513438e108bb24f
- MD5 327dbd9138b1b4e9b19b5b82f6ae17c0
- SHA1 e2948bd9fc4d393121deddb5004a5d15a2a28e93
- SHA512 4389ddaf9e38305a0596f34e47fe60fb12af3d14311804fa0ef497c1951af2c4b426fab0cd7999d04c09c5e23c15c50aac7ef59dedc4f34244d3e09681fea753
- SSDEEP 192:+eGPcPnqmHm8mXbOWYrQ5PVdrmw3D3B4MjY+uUIxDzOoymN1n29s+k1lgS6NAuWa:+nP23HAY05ddv4M07TzOoxNJ29BVUsuU
- TLSH T1A752D11852BEBE6E9F527FD6006F24D56D848B678BC47B449197BA0C02525D2BCB843C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 14KB
- SHA256 3f7210c2f5e5302965a4f50019f3d0f578956526f1f26c46bdee18ba63d00c3f
- MD5 89597dda920442c516117218d3ed07a0
- SHA1 f507730983e1feea45c0f99cea11997a4ce5777a
- SHA512 0d0764cf5d2f61adb4744fbba275be2f8b4ca056b7b30f4c168feae0f891f8848586c24fb6e12d375fb59ef11c83c3180267a0fd2ad46405531d55b4037a1d0f
- SSDEEP 192:lP+NOWM2euE5Kyw6VV1QIIZwl89zN8FIgWslVHKbptWv9ULdqX13gmcgy5K5z7gB:iOweujyN1Q4lmz5bQ9UphCJ4H8rJyB
- TLSH T1F552D00CF5E8935B950F777329B585B04BED6B0F8AD13106873EDA0D40E342A58776E4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 c44f5aa6ebbc369d5a2bb6ac11d315e136f9ba9ea49fe96f08615c0a232d4758
- MD5 f17133d112ca635443c740faa6834f95
- SHA1 bd09fe3f0935c5701dda4280995b28003a6b9884
- SHA512 c62c6ffb5935b46f5239ac0f969be5dcff46b9f28c0f9fb3768d91d42e08324931c9a99aef6a2d2d9164aa6cfce36eac7c94eb32bad587fd34ba01241d51f662
- SSDEEP 192:/cSh3oL2XHHa3+B4J/9gaHB4862gQ+iF4fPS/uwRA6abGg/ZuYaStf755BLh:/cWdXH63++/9gah4j2j+nPTeRa2Q/
- TLSH T18A52CF37B117362A44212DB5F109C69E682343D17251F6A2A716610BDC7FFA89A3661C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 957B
- SHA256 be7da3d8e3dd11c5bfc04b3537511d75c1033373a79b4f8b5044f1ad13a3ca38
- MD5 20d7727c8a8462b2b23c877392501ad2
- SHA1 f2ae4cc70e47615e0b56de6f01c4b3297d9a6d46
- SHA512 9014af1b12fc95201a9fbbd1659500b91cd9e7f65bee432881dbfc49a8b24f9ed60ae4f2f6084a329f762d3881adcec0def7c4e1b9457cc9c0de651746819973
- TLSH T17D11C8335DEB84377A0E0D0ED8311F1808A3556BE7A11F1080C51BD3861A09CE3FA1B6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 1KB
- SHA256 8ed9796ea8fc18bac4e3cf5d72a53e5b87769d6ba6b42dd27af6d9d75bc2b88e
- MD5 e0d9a7d20892166a00a3148033781f8e
- SHA1 db09a1bec618faa298cb26f24e7dc12e6ab748aa
- SHA512 436d9a5a0161ee2eb49726e7d9e330679833a349d90e2d844a92366fe4acaf99d6737d4a11f548c5e1def742340af35d9f8071a2cb055f3e7725fb5e979fac5f
- TLSH T13231FA5F4E4B3300428D4A869EB3F5494557B1D978633BB8E074C9B7C28C40506A4868
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 f0502d6c56d78ae738c3b77014a395964f87683e692436b92d2848e6016fc928
- MD5 8df4464081457fb56479480e39f6adc7
- SHA1 7984b89a5c7de377cda473448ba275c8cffc1c16
- SHA512 c4d50454f893ad0706c515d4e14232a2b92d45e9d7f0247301705c7cf3d7e1844d0cc0a09f42e7dcc827df0ec0e8cc8313c80417220ae74e26fa4859fae69169
- SSDEEP 192:QQ7M7G8+/cTJI99SaFFjyROQudr6VME1B9DkWS+sJt3Jq5cm7:TQ7Gzf/2ROjdYT9DklhZu7
- TLSH T16A22CF231EED8477C257EE18B64D40D65B32F8AB0A775AEA8F699237052333E248D531
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 e6939a488d19e1aae394f3893817dbe8eb175d69dd5138843f53688b620bab6c
- MD5 90968c352d55615e57eb43811ba734f7
- SHA1 b0a72e6ae200fe976e28f2facd459d5d34357154
- SHA512 e0eb37d6905ae115cf5b7d52387cf5381c54f906395a7dd571e1f74d530056c8efb1230f14f7d25d14a4248c9baa1d1cb2fd67d300160764a37e4c79a72fabe0
- SSDEEP 192:IwRl93RpAJGKL2N0BiUOfrwuUu0de5iP2omswQs6D6dLd2dcEyq+1P+5CE:Ii8CFUOsH8iJmZQhGRYSl1VE
- TLSH T12F22AF903AFF6A20B82639F4BBD114D89A9B3C068D14213C4945E7970F8B73C4397764
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 3a91f883044559f1122425cd0d5c9cf8c2bf2bb9f243697bee858658b01aef17
- MD5 154165059df818c9ccae35d00c0f5de2
- SHA1 fbdc93c9d223e9a7248ff92e019e89789c688ec0
- SHA512 698a599bb99df60acc27e93a60c934a4d1fcad9bc4fbec9c882fdcc78738221d3f129d86bcf44b9e2ad733235939059541505e142a5630a437a82b76934adb7d
- SSDEEP 192:zd1tpDVNdlh8R68fenB7AkZTpp0XBQHrkaSOlInXdjd:Z7phQdmB7AIp+XBQHAOIBd
- TLSH T15422AFF169274AB0E3DB0F6D670FDE1C245F5C8E5D50602E6272FBFA218A94E09EC146
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 6b5fbbdf76467b88ffdcd505d2c53f3af013149c17cdc7a9f6c75108515ae708
- MD5 f02184728b7f1f498f37ffc66dd35ef7
- SHA1 c6b4b300a7fe2c2629aae34a3d43e9b17640227e
- SHA512 366d218ba04624c605cacbbcc9e7ed930b71e0d8d54c5cac9aa475358aa70bb67442283e6da9bce64d1a160e1ae604952855eb8415e1fe78e3a83df5c00878b0
- SSDEEP 192:hIB4hYnoxhM2HZXJmhOZypc9KsPNgH4brhm7lQa5Q7Jcm2:+WYEHZ0hOZypc9KsPNgH+rhuQae7e
- TLSH T1A122C1245295E02F60DF9C51736DA9E15D998756D63CFE1DCCDEDA0B4CC001E223B6C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 acff21668e19ea271209e0e7762abbf932f114910849a177452ee3218d908a00
- MD5 90c06bee8156c37dfd1245dcae818b80
- SHA1 01ebd5c71958890e7cd0c145c195ea138ade8cde
- SHA512 bfb4c8c834810ec8371f6adc8180c63ff804f956c52404385d7c41b1ce6d0b2717a0a62180338a506c0c71566dc9bd4a3430ada86a4ce93d681f8aa339237f1f
- SSDEEP 192:yNIr2oKFW1yhnrszWw8yr4Quufn8OJS6mj5ZRsvOk+UCu881gOGwC7:yLoWHtrs0zufnY64/yvgu8Oux7
- TLSH T14E22BE7A7F5E328D2502415B08EEE36508CF88703C6585C6E636F1C4578997EA6C91EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 c07b5574d07d6cc6dfbb410742a9dcd47e53b2368188d6d270868b9c6ec36cd4
- MD5 98fd9e9a0881797fa36143c8ebfa3379
- SHA1 1439903513d9cfd45c9bf1c699ae060611a9b941
- SHA512 0c0321889e2b8486454d1a95d50f33628f36cf746536d6145cd70470f9f25ffe3cc7a878df8b9cf0b9b6a531e9f8f1cf4b9ade4224cd2ed22f87be209d01ac55
- SSDEEP 192:FYddMdPBA57vZdv6A1id78HcV5DOx4chj6XxqB1gpmyd4m2Pefs:0dCPupfT0B5DOx4k+Bk1kFdJ2Pefs
- TLSH T1B122BFD3CC2539E6B19A3582308A932209D89B326E3916E9370DEF446ECB175E006B33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 44db6d0e393dbc54a12b006abe7346dfdbe48304b92904afd869e8714c10c26f
- MD5 c06109eaac605986a66ec9e68ca2eae1
- SHA1 f3c68b28ef262322aecccd456f0ceaef2cbcb365
- SHA512 840f4a6846fb8319a596c894cfb7c70c862470ee2efce9031c951fa26a1c65ae237414674ac15561060da7c3b0d90300410ca85e4cdeab63a294ce06f125cb0d
- SSDEEP 192:wM6r5HGi95/8c0GWA0/+x9wTlBUzcnUp4my5Z38WXJUnDyz:Do5/vWAkKSQJiF9XJUnu
- TLSH T1DD22BEE4D4D86D09E1409DA8C1B92BC59FDA2041D08E86DBDAA4F5E50DF1138A0BF33D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 a4c84ec90f4bb3cd5daa7b41ca45ff4d5569e34e983f260efb7d65130c12644a
- MD5 b28fe22daf4e047ba488df8ff6e080c4
- SHA1 50182c562544c5c902f49d1b368a58c3477130a3
- SHA512 0a6ecdde954e172145c614daee57f48d1841cad930406943faf2ee807927fce696dd0b746319bc81cda02e1d501d7461e98520647c7931ca4b0c7cd471965956
- SSDEEP 192:sLc+y9TThmRn91CbKR5TAnBFf2NZ4EYTY/QxjBRUF672Dh3WENKjyD40z:sLUN4nyH2NCDTSQRUF6Qh3WR2z
- TLSH T1CA22CF3383962F89BECD02455335B92631EEFB532092A80D42E99CAD847A5B72068B70
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 11KB
- SHA256 3e6d8b277b007390b619858aae699b36d8cbce24259f26245f018a7ec9c04407
- MD5 8b7dd9799df10fd87a51a5474f7bc388
- SHA1 934b5a1187f9ab9747f856d04c4fc78b467c858b
- SHA512 d3681439d05df0829813f7741e8bc8861219b4b47bcca90fb23927685aa35ff53136ef048edf0ccfa9fd15e4d37493850bf0144bbdc2565eebc3359f654e4b09
- SSDEEP 192:qF4xRKc7p+fuV7kH+0IsjJM8tQBfogjc62LQqRFgvJYCweUoIqWc+8GaDUPZnUr:q2xY8kH+0W8tEo76JqR2JYSRclhna
- TLSH T12542C04E9BB834147BEC759E2E83C986E11C4AFDC3673091B089327E36E55E16885CDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 11KB
- SHA256 4b24a054be61660aa296338b20add468c93df0f7284d5a8b0571908effa087b3
- MD5 3efe28f825d2214d5519603e41069721
- SHA1 8c2097a1fa8f83b54ab14f4c2ffd724a66e1db20
- SHA512 dcbd5f186708a978be5c7700ab58a4e7812afbc4c80d43adb03187c586a9c92c45c2d61dbb7b44afbe0cd0651b0cbfc0b5d8699db4c4ecf00c281252167ae1c8
- SSDEEP 192:ceSovDj/+GZZANlNPVqAIcZMaZRoQvqsodmdoxnxYkyqgquu/zXwyyMHGJ2KzPzz:TvhrqlNNqAVzjod86YkyJquAjwyDHgBH
- TLSH T18142BF573FFA28D9E61DC86E65442BA799844502C1C376F462A18B6557CA03F2DE4407
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 14KB
- SHA256 24a2ee1bc9a1cbc1943cef2af72858ae683fb07ccdc6e1af5da5b23c84610c01
- MD5 7b1361399b3baf34c15d576f65a0cb62
- SHA1 55b64f528144d1bb7d01bfab5105053297665937
- SHA512 a452ae29f25fe9bb9b88a6a941051f9894fd75c9a3e5a9249223a53eec12c5cb7f88eb6517ed74fd2cc771a5168d7c706361942ea52decbfafddde136ae7ea6a
- SSDEEP 384:kEJgb6I9pqPZ7BvNnLjGcC9pZvBbUsj7Iq:5q6v3dLjGxdbRn
- TLSH T16562BFDA462AE667C8306B25F343CE59EE28CF0B41180F1399DD33BEDD944812A84B73
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 493B
- SHA256 5a09d2ab18a612ebd0ca4a4eb85ad6cbff23e9ffb2c49a1cb03b09b4251f6426
- MD5 4a04af2718d3888874e00e89eafe5e74
- SHA1 e8fcac8453d2b7a6b60fcc8fb1fb28488a36855a
- SHA512 f34d76587bfaf096d0fb314bf0961358260dc70c35ca7f047213d43b942dfb1729071e02b6a32eda342b33331c3ea2a8e59e8988a4cd716a38fed4846797dbc6
- TLSH T1A9F00E13AEB2C5031A0A0533B5B69546F44720C05A6A0D6F8AC2F2D361AC1712201220
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 1KB
- SHA256 a726d8732b78f9d09bef7841759b3ffdaf207421fbdb9ff7f02ef9ece71ee19e
- MD5 26af2c46bec1b6a45b518ff164365908
- SHA1 7c0f0e66a9a4193acc2c64738f602b333241d58e
- SHA512 67027104bcadfc4a6a2edf761734394eaa06d7d677a1f2ba6e7cf3cc251965136879f04c6c72e483224fdeb479ed7e1bc1169c431e85a481fa2796836038bd16
- TLSH T1B331FB5F80198F4B98DC82183ABB7743592563118F387D12265AAD0DAD64BC88BC6D95
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 733B
- SHA256 ff0b84f1fc008ff24ed869daf20e4bf2d2eb97b930cea84e2aa51dd064c3e09c
- MD5 3b1373ae50de09667d53e5b5abd04f89
- SHA1 2067e6a52c1f0dc2a329346ea2b23e6ce7b66689
- SHA512 183449a53f78a4254e3c557f5a0a6b2b6c458a9da0ef692ef976d137ff8825a542c535aa5d5a511cc584dc91d15267413329db5114ef6a52257eaa2683e53d6d
- TLSH T1940165A84C0076AE20D00F4805C124AEA0CA3F883B82BBF5055AC8DA314DB15BC4C298
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 909B
- SHA256 7d52c445f5c36689d71902dab573a7cfce8d9d152047724cdb6f4016d036989a
- MD5 c21e359fc43495007f49976ff198dd67
- SHA1 d30c33b614d8265f712cbbb7c2aaba29ae779b75
- SHA512 d7a39ee1a1295dda35ee1dadadc241504b9c5dc90813850ed6bb994cebc3ea69b3a67d44042d478bcbe0ed5bcbfd3cda81c4d1b50c3de83f29dff98be7695017
- TLSH T1801184ADA2EA1200D986CD0DA199CA6FEDA843706D0F8F9214CD81F0260F622E286F01
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 1KB
- SHA256 df0a3121e4b21d2155f5583847fa5a43ea773a174bf84e45d910f00c496d6efe
- MD5 d113bbd3afe283f6177b1f07e36e95e5
- SHA1 f335642ca00738b16e45bfc17b3b43c904adacd9
- SHA512 ba6b6049ddba34aaede407e536e6e6a785137fd1d4645521fac878cfdb6ed26ce124f7a31bbd4579b243d0795372a4d5d686a94a19d2f99b0b3c013903f2ffe2
- TLSH T1B6210864749157A6368FDDDA562232C739918A44A0B20663051A2940FF6318049BF2FF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 0410dbec541296da33e61a27f6bfd832ac67b4596b26a5819de2233fff05aaef
- MD5 221032ffc68f7297e4c7c7957c6cc825
- SHA1 b9daa9a507974447e63fbcab983273508ce26198
- SHA512 396a292fae0a4660d5297f3c1482c8a03ec181933b891fafd3bc9af3148d7d130557f3a85a2d920ca8bf45d40fde7acaedd8d6ee112ee6efb0dbe0926d0e220d
- SSDEEP 192:tojZMvxX4S2Un1VNDOIaDbdXrPHO/fdVPNRFSoM/pBVEKOZ7yiGOTLxDf:GjZ5Njdb2PPNRFSokVbOhr
- TLSH T11922AF36964A8E2B706387BF4370073B3A20A28773BDB5E0BB744E71161D442C9D3EA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 9edfacc97c524137eaf3a556d810514e92ca602d990cf366159f6409721e3d09
- MD5 d6ef64e2a93d407922ce16564fc9f76e
- SHA1 2f623b3d0f1fb2936db525258ec24051600faa91
- SHA512 6b994b1656d0773abec6d601e5c449bf8871920dcfba965e57d7d57e59839fef11c76e3ea8236264e04ddea0445f8ced0f4c6716d29cfcf0450da2985c7d95e7
- SSDEEP 192:sW30PfGsz0ZNFC0tfvS0r1uVWIp181xsCwqiaLqZ7MtYe:n3uEdCyr1SWIpy1WNiW7kYe
- TLSH T16322BF2ED489D6618F912FA654490019D7A0374E7CEF2584EB0F169B3E69E6C4BE00CD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 c9e4e364e647f7bfaf69d04814dba81d6eded4027f2e11299efce15f4cc76584
- MD5 f4432c0ad0c057ce77c4e673c739f86e
- SHA1 d9afde024f9c0def409a4b8c84dc234789390544
- SHA512 7371c973620270dc199615575624dc0821c6185865637306ee35e689e8837c6cd41fb6529b0c45ec6cef80836d2dd97d291986a27a54f601c3d6370f39fa6eed
- SSDEEP 192:xGWyrUPBVJiSy8Yvwn8uRaNH5jsjzWNedTObW3Ou/XjwsfxoHSDtFBR:MWyIJvyS8uANH5jsHWw1/XjwKE0FBR
- TLSH T1F322CFA3F178E8D60FEAAB40977A36D2C639B6097EA4531D12F3193B71227944430DE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 ba07b5de63367a037eb8e24bc8cc8ed159bf9ca211f6e192af5b3e3be0972016
- MD5 3fcb3e664e866bb3689f2978022bb5bf
- SHA1 4fc6a443c24d01dd45a848cf134c057db5f81ac2
- SHA512 fb2a1b69950637d3ba6d1fa51840cd38ef34b971526d29c39e63250cee7f196ea7603a78e3345e2b1df6a8e820b16fede05182fcdcde4c1809f02863ecf3706c
- SSDEEP 192:X0GzjFUilrySqoc4UmEdZBugciSwciKdCOjqoAVcj+Sr+NOb8rQdlVQfjdFIS:X0G9Ui5yS/lGC4f0hAQyNjlrfIS
- TLSH T18E22AFE90697680A8C52ADC7DB10BF3C44E36FDB908181F6D2E1C71B941B26A9F909DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 e90c6b89c30d5d4916a2114e6f92ff5a5248ccb0a8e8d27c7dffd2105c58a36f
- MD5 94b45855cfdc4fc559be6c608ca5ad95
- SHA1 e7cf25bb4a17670a22f98d91eae661ac9b410ee3
- SHA512 ca25f8dfb7fb6fa87d619f6eb9f0fbdbaf17bc6e5ffdfb1bebfe63178db40422b9e6d3b3b02eb5f3c74ff9b1d7cc14badf39f6a0eb948b57b0efc3c1f3f6c911
- SSDEEP 192:QZC16xF7hC3Umk48uG+054fSWmCaLwaMJLq9KcsyTY7JxYc/trj:V16xF78Etm44fxJLqUcsyTExYCtrj
- TLSH T17822AE219A7526B139BF2149FB6D2D026C5609C7AA1BF9CBCE3CBD409AE300D5727D34
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 986e8775f9de390b05da978f341ec5e73f41b88c2528890bcd5c1b3aedfb619d
- MD5 cecbbc6525accfbdb5b2902e49cd4a4d
- SHA1 a6f6fddc61d1e8c30b4c5acf3d18da52d58faf75
- SHA512 4ad9c213f8c600ad84576622f36ff30bad6eafea3acc9dfb4a2d68886f7f15c45b5395328a8933596fb692a71a0ea9352770a04f257be4e151a52a545ee97a51
- SSDEEP 192:z/TjfmQl8KDM2jKfUb0I1I991QydPBmbFGmIxiW1f+GupmdCjYaAC3E4:z/TjfmA8b2yXI1IPqyy5GhxWxmdCjYa5
- TLSH T17C22BFE818EAD5178F2E408795F13B596E28DE0E315CCEF39C935E4C0A1A3E6F254146
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 dac88ef80438cb130c93c8486eb9dca59a56c448b083eb931097064576cd20ad
- MD5 c2bb645518a70e7bd1db6a5f729e329e
- SHA1 d32b0acfce1eda2428d1a817a3fc3817e2b9921e
- SHA512 e0253c4754b56a669c03ed78d1a73f732096acf77aaedb7d485af2cdab797e9dbf31b33e7953393fdabc9eab0ecee547434c1893ffcaf881b0858401a9f3bb72
- SSDEEP 192:4vKfIXItBHAyy7L6hd5YgG5PUMVgh1iF0PZjqzJd5lIQq7wjyXD:NHtA7L+d5eJuS0P9WL5NqmyXD
- TLSH T18F22B0065B01B28D49C6ECE9ECB1C08F9E93076F65BB214938E61119C561B27B1C77FA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 28eade86d430738d54e71bdf7b86c3386b475bf2c942702cca6fe8568e4a3c20
- MD5 f6257fbb176c8e07d3e97ff2f126ff95
- SHA1 d111192a7a25434dc4fb3a624a3164bc44be2903
- SHA512 3451a4edb6692c4c05b9da6244e8db76e03e49eec3e8d7469637ea2fb8f2cb3dd8baee1846e7cd92eafb26211f44759068e4f3b3393af3a7d663549ce94ff32f
- SSDEEP 192:VzsmMCzUkuCnyUF3Td0tavfXjkDmVBw7JwmkBatPkUP7AI:FsZwUkuCZFdlTdJa5kUP0I
- TLSH T1D122BF9066BFCE8F41BC7103BD261DD3ACBAB98E30AFAD134464E474078EA9667045B1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 2a6321976b5ce1e151dfd506bf3c15fa49807caf9046652c2ba5456869c633a0
- MD5 68d5e6bbd33201b3371e02137fe3f7eb
- SHA1 a68646b4c067a2a166e99f5fa92fa2fce1a86556
- SHA512 c5430657a7cea9f543b7dc00f65b1e7d3023f35160b7c0c76572667d04092fc8cad54626aeaa93a06b2c3cf14a701bac71d630b2264f7e429be6aceb8ecc7335
- SSDEEP 192:7ZHhe83wxZk2u4PRrP+uQNW4I+tqOk+dAjP33ChsLdEEvXmOndddAIQDUVNUxPb8:7ZHhe83wxZjvPqW4I+U+dAjv3Chs6EFh
- TLSH T16032C0B557C5ACC5BAB43A7090F7A8C45AB02F7C0F8873BD09A482A1741611E0DEC675
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 11KB
- SHA256 cf07207e38f002a7b4252ffb2be6102e1afbd455c2214cf542080b64fb48a6ce
- MD5 a1672e11ca8e9dcf103222adf03e16ef
- SHA1 412bbbc21fc0a2ac447e4c3a696c6664945671cd
- SHA512 df38bf431686b55c6cd9e95326ad27b13154481dc878ba337cb636defbc54b25318a83e7b95a0f61feadec6d07d0bd9ee6c4509fd883269d62c2807e9a761b80
- SSDEEP 192:Kx+qu6G0t6+RQFPBb2MkkCq2rXjw1bKNKBe+TtrvDro:KUb/0A3PBSMkNprXU1Kc9tbQ
- TLSH T15832CF79898D5416E48272E89075E49FA003B8F108253BC3E381B4F242B98B3E2FA5D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 11KB
- SHA256 e9a85e0dad1f92e4763bf6e6502dd45d5838070ab3cc81dbe05cd5ebe955b482
- MD5 dbe7bceeac53f73b50ea75c2174024ca
- SHA1 9d451fe7485e2ba7de40daaf23cbbe579290cce9
- SHA512 5b89242c34479d85211d921065b167d1323b674248379d39e3a13aac95775f1ee819654181c6d0e00ff8ea28d89dde58b4f913c5afdebf78fe3b003daf702f6e
- SSDEEP 192:yOo7fVBUxPP1jdlyn6Q3zZRIwChGeQXh0QdO/2r/DqkP8HRljhs6SVp/8:rg3Ux31hlNQDyabOu/GKnL/8
- TLSH T1F042DF4C0025B36E58075CDE1F0978C6E0F9AB63B12F6AB1F5C51E0882D8EA746CFD59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 12KB
- SHA256 2a137a6cb139f8e21f11fcdc6173e7d3c8fa8e2a73347c5a4231256e42e7499a
- MD5 19bfe93b94f7ee024e7f0d49d3571d27
- SHA1 d9614a6d920c7956be5d7f936a3ea3d15fcdc529
- SHA512 a570dc6f112eb48da9f3cc191d9bb19d1c5e42e60500827687dfd2de2f9a550865f4535f6f30063e09f7365ba9bae33cf1f63af44d58c303a8dba983258adb1b
- SSDEEP 384:F96y1371Yu0wRNIV69qnsq2Fm7kqdoef/J:F1371Yu/RNQgosq2Fejo0B
- TLSH T17A42CF28F14A585694B8D4B3CC3F2440033A40AD369B2DBF4DADCD621DAAB791E9C6F4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 11KB
- SHA256 2d46ba9b65eedfc158e64eac97a86f6b96fb044ad1009da39a098a0f89c105fb
- MD5 078def86866e598dd6a4949edd6a37e6
- SHA1 73931555b1b33db94a29d86a1bd75bf274ab3588
- SHA512 fbae5712383260e00238c9ac087c0b39db488af79dbfa0f85071203dc496414a96be640e08654fd609de22ea41afd791235dffd973d14b9fa660cdcdbee5ce58
- SSDEEP 192:GiBqeoQ+ISxvkLJWEFL0kg79pD5DdUF5VtQz1nVZzgsugyC/jF4a5MLQL4GpwffT:zNgHx8LJ1rIpD5Ddc5VCz1VaNCr+aWLN
- TLSH T1AB32C08517C0A2A17E5B0E4B3443ECDBB419D0899475F5076AE3A6EC8356EE93CF5A04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 18a507fb9479c70a78fc55411d80c760f6d729aae97da59dd41027a4f996fdeb
- MD5 b50c7aee2e5ae1ad93fffdddf1cd3754
- SHA1 c12fb5ba24d4357a5f3fc0bec94197f7e827344c
- SHA512 5ab54fed9be0d6a922b1163f7ab2d227b286dec7cd5d5f6bf4c3df261d4eaee4649e4cbb7e44513070b2696fc0bc94911cb3c89436c1d0c6a755402504d8fe7d
- SSDEEP 192:LakO4E5WCHVvn/3/UYtduxJJ2NDFtx5FfHn:2kHExx/zLWJ2p75n
- TLSH T1B3129E4DE24956B3068943AC632BF4E7D7E6FE2F3877610503A0A889CB2C5A5F75B407
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 12KB
- SHA256 adf56a5477221f7c9a06c2971619196ba67dda998a3d2795a2e5192ea6b867f4
- MD5 4c5af3b761f9f5a7e87cef0c1c0598fb
- SHA1 b05df4331f5291e3a54f6b0031bfd734c9669212
- SHA512 006bb6f2075d3b10d125de27a3240e753a427e1149e29be6d0f04ad9de11a013d6d0fc5f1a9cdb4b4763f8589a7a7d5caaf70cd5f9389bea2b1de8a17de22f13
- SSDEEP 384:Niiijx64InyE71XSm/q0VWO5sf6Ox3iLuY6/DT:EiQ64InfiEvqS6iaX
- TLSH T15352C0849C3C5325A8D0E929636DCCE6E0F715E6DF4C1B6ACC10557BF9CE35059036E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 14KB
- SHA256 41fe099f89e77187d5f74a8cdf4f5d904e68d3429296fb4ba968c621785ed9a7
- MD5 512144d98cda09f8ce000eaa89124cf8
- SHA1 0def4ff24a1846fa42933272e7b999e621e48af6
- SHA512 217618cdfaeb358ffe3d0b3947996ed982d97b888415088090111c11da9b0adc3b455720dffc128d45c1c86acb74f9204b037639a56655f9fc6f95f53b1efbd9
- SSDEEP 384:cFhMxrhl4LVLpIlm94T7s55uRhoLhLVlN9i/Zjz:Go4L/947s55zLhZlN9ixz
- TLSH T12562C089C11E185BBBC4AE3331B8381D1497E8DDAD07173E456A1AF1C86E9AB5838C35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 2KB
- SHA256 4d012c9f8edf91c5399457cd67ad38aed09a6132bce6a182b522245adcad2296
- MD5 33635067a8e12b34b25ba5282fb9d137
- SHA1 fbf824f1a0b3aba286b6440e178ea2567f051c55
- SHA512 19244272111df4bc71cae94c66914477eef98dc3eec1e0894cd36f6ab25c192ceb226c49fd088a62e0cbe93e94379e21d9030a0a718ebb2d68d9dd403684bcf3
- TLSH T171413D846E64910318C67D58F2D27CC412E46585FD4247041240F8EDFE53AB3D6BFB59
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 1KB
- SHA256 ce7a7e7c6b3c9b552af2602c85e12a51a08ba3701dfc13857980fb9f5e0b73ad
- MD5 e1dbd93815ff9a26b15e8c7a91c1efd9
- SHA1 021e6fcb35cfceab9f7fe4f7533c329546e104bf
- SHA512 16573d2d32680337537fd7d17452757c1732f001a2c7a56a2395a1fb52f490179fdc2a10f12cdf40e447c660abe70928b0869e2efdff5db88155b7cbe2e5d5b9
- TLSH T16821DB23809440917C5F859CA2B0B15AFB4535F9AFAC13D689F591EF75641C3C91186A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 11KB
- SHA256 b757581b9e60994de963e5cf956e7f50ac9aff2ccc4189c8a0cf879022de278d
- MD5 7f4b7df25459a400e0a571c31b22d5bf
- SHA1 ad423810d28ba3667d04509a755824f7b6268e5f
- SHA512 2a7bc3198cc33cfd723588042da68f25701cbc834180581cd56f5b583eb3c2046101283a48b033c3aa03a6e7ccbf79b9b669727a64f1a776aae3d1fa7f5ad5b0
- SSDEEP 192:3hA0PFN7i5PmEih4iEs2nq+EivJZBHkd2TrOeE1uuMFhb/JJl8zg:3hA0PVhrE9JBrA1urzzJJl8zg
- TLSH T11F32B0179797EC138ACE4093C9B40164F2E38D1CEC699CE19A5A9870CFFE84D724C764
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 14KB
- SHA256 8317f3a8a6d403fa0549ec73d4ee7df406d5c41f48e6bcca05b4326231db2362
- MD5 e139dad83d318ef96655063819ab792e
- SHA1 7f6cfb966f85025296f01baf6f96511ad026d9d0
- SHA512 7f104d4814e89fa94a517121265af0ac05bba182abc6b9cdd1a519920f14e0c943c3ff74829d0e795367d7975c5ab95ff07b67f5cf4e19481dc431dc0819145d
- SSDEEP 384:7iThABPf3eoOzxkFcHKvT9hZsFXQJV0B8sI:7iTqPf3zOzGFiKvTxkXuQ8sI
- TLSH T14662D09C2C2E1B0A5B40F065A9D7BF224CD3087BD6CEF5A7A0099AC540D5DD7545F4F2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 621B
- SHA256 b68ba9122b1cdc130a7c99bef8b4f642cdefeac21663ce89d711ed080e2aff63
- MD5 a66c0174004503e5573440f1793324f6
- SHA1 ed3b84bced222e1940c2acdb2e19f2b2abab9dde
- SHA512 2a7d1ad20c5e6d801c29d1202b4137933b7ef35fbb75c67b9c14da66c9beef55c28030fde186badb27613dcf122b0250185cba4ca7c0cae63e6006639e8d537c
- TLSH T1B1F068578C1156D6080D53173F3854202DE18A132526D5083248DE379957F14DECC3C5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 2KB
- SHA256 7f87d01071569339b3ca897a435fe0951b1682fa3acf2087912743854088e266
- MD5 35d4c0d9f011321d8aab4a2f9fcabd04
- SHA1 82d45fe0ac5172cb7b6b97f55989d0160d6e9697
- SHA512 46b6285867843c58796fadfe91dda97169f05f45390de92c597031aafc16d23545453b0bdfd9c38a7a6bc865cc73fac884c75a45dbc6b747d1f7aaf0b8641cdc
- TLSH T13C412C0B8845C71F80016752FD3E8A10BB4761B1F5EA12304FEE6631F46D30ACCDAA95
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 11KB
- SHA256 c854559916edb26f95f61cf34ebcd89810d0060c9fb53f8b0c9cbde7d3b67b38
- MD5 c6bce512c0e92a88c3492aaf8b99b0b9
- SHA1 ae02d5f1b4df29e38cc61c1c713e12b47a4462aa
- SHA512 0123314de45c3a6507777aad100e7a021380c16a2ebc7c7721c0e656fb86955f196a6e2179ade6ce3dc140e6d52c90ade43a468409dd88497623191a743fd93c
- SSDEEP 192:WzLn4PfCG2lOyj8EtSeVg/mAjd1H/KIs22YZ5lRXa3ikC5mSzSHGDyca21vtw42:iL4AOysh+WU22cg9Y5SHG2cB1Fb2
- TLSH T18432C015483C41615560932C6583ADDCA32EF8F775B78A5EFD11850FF8B1807C393E98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 1KB
- SHA256 5373ae0547b4a87665e79797ac4d74d78522e94ad9ffa235db76cb7d5b648948
- MD5 80277884d7750701ab9526958cd70cbd
- SHA1 b5534c3dc69e6523edc7e9b6e7b7dee4992c8e91
- SHA512 78512d5bacc53d358e361ced8191d40314ca58be5e78ea7cfd8335b4d7b46cbfc845d7dbda4d7189a41a3917c2a49f778a310af6f36fa59d6a9801925e338da7
- TLSH T18D21B749FF2E0ABD7012992417B7AA400109707D4C5BF5222C86F18BDEF59ACF078B84
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 1KB
- SHA256 f670a2d7a7666dbcd11d46b5e426ea59315e6c79fd9c3d0dbd4188e0cea2c381
- MD5 851545258617a9fbc138ed47dd4c89ab
- SHA1 17fde1f0b2c3f4e9fc73f40a2047a36d3b712d8b
- SHA512 42f61d67c8720a6516d17c8af3eef1aee5dfc44a0947cc67486907cceec8485bb793e7536ee7774ef57e3b56c993d261c13b999c31b7c263025eb6588270466f
- TLSH T11821B6CC0C13946A904C9F2B5B1D6C11D2F5A6D0FC55BD5122B0D188927A3016B5EBE0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 10KB
- SHA256 012f9dd2ffde6731656fd552178a6ae57387fc38a231793bf09180924b1cc1ca
- MD5 ef93c86f222c3351647aee7adff4351f
- SHA1 49711d95427f7291041ae37b11f3bf025296a878
- SHA512 7f91b3d8c8bcd33dbd47258dce409d555c392ff80f2aa447dfaab348070761af04bb46ca3e1a347d6091e5b381eee0797ed8d454831dbe9cdc2f5c59e6b1a5d8
- SSDEEP 192:VnYVaGfRQ54LozcWKqQBkbvDLLmnmOVgmI8kcXRyo80SZ1lg/RntjgqSRIApxBC:VnWfROeozZ7DLorFI8ki87m//jgqSRp6
- TLSH T15C32BF5B60E4137B5BB202BF552E70F18352094986A119CEE875CD6F75C1E5AB88B01F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 f0b20cd49b24640c81916996570585167724b3d4e8457736aa8919b18b83aed7
- MD5 52e35bd92496f87831d77e2e09df622e
- SHA1 e5c91ccdfe3074a3acbe8c9a191d3629bff6188f
- SHA512 1d13a787aa1484b70ea0456388fefa607a4d768c0503eed0ce3d2a3feeacf61ac45a48d9b6e72e9c4cb64f47da8bf58202e04d019d661be1c31ca856ad7f1d7c
- SSDEEP 384:j8qys/g8YJ1EXbM15el6AiSN/rOUSVt3e+i+:XE3QM3eITSN/rOlVt3JB
- TLSH T1D152C075D90CEBD991649B6E45CB12EEE2B04D327DB7B9841AAD8013D8320AEC03FD5C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 182f07dc9c3a3cfa336c5d671588f4bec296628f11c705e6d976223b1265447c
- MD5 34744286bce5722febf614b92fac9e82
- SHA1 24c4d4a2981e516974267b5a146745a03fcd748d
- SHA512 eabe2c6d07be6275ab9e7a73ab7b1ec579e0b132b21766740a470d21e6142caea5c73babea7bcf781c1ddb8e1d0e84cf547c9074474f04f1c3ca4ac4c404b61e
- SSDEEP 384:HOdpBATOFjClr8Ye0Xp4CF24U3UjAE5dFFmwx:0FjMgYe0BF2NUjASfx
- TLSH T14352C053A243AD4F19344B7B5319AD8C76759764A92EC264212338373AED413373C68E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 0761eb06ed5e0b2846da4087aab338ce35fb85832165ca902d43b297d6bc825f
- MD5 5546c4c27bf6d6340248b5f2ccbd1c8b
- SHA1 5c1075835c73e507c42e237ba8a2c641bf52d4fe
- SHA512 dc2315fcf196c4656920857867866606c6abaaf42b6cdfeb183bb36cc7ff44b2b5073597382e3597cbcb4b7e621410baa4a22de710ec6efd898e8fa83e72224b
- SSDEEP 192:LpXlXAG0ElKj4ywTinZsjEwwrwxnsFSPSYAwQnpTHK0jkbXFGYEXn1gSVbbM395T:LtlAIKBwSGKrw2EHQnpTHnQbDUgSVs3T
- TLSH T1F812AEC36847578DA9C69EBC33E538EDDD00C0E196C16EEF9885E2BA1350354B974E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 8KB
- SHA256 813ab48152e6d7bac52fa73652699109ff59e8895d0aac2be3bc6328f49399b8
- MD5 9debb250171820b8649bfbfc0b259344
- SHA1 641c2fcf6abc55317893d4e99f80fa0e5d7782e5
- SHA512 299b4c40f3247740d65ab3a566e9184627a8d4ad921e5302f5a2d47eab9cd064cca1fd73e45d268bab0d051ab4b97bfa4f54ea034ee8e92ac18e7c7c5e8bceda
- SSDEEP 192:cfBqPRQp3xn780wm0WNKRtQnbeLtVUZKzow3/c3GRqqyD:ccPR2vt0WNAynytqZKEwEW+D
- TLSH T10B12D0FE0EA2236BEE75B04552CA12C012F07F2D576551678CA472DCE0D34B92872E86
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 1KB
- SHA256 f7a6d60b5a44372e09c2c4257a2a79fe9cc00a8c4846656af2ca96ab11344ba9
- MD5 cf27b0d6850ff9ec5e47334d28efc422
- SHA1 2326213bbcfb3d5c7ced6bd5975367ce73a2fe3f
- SHA512 23a600f31be623cb037ca3cc1d1f5125eab4f469924e39f3f00fbc149b590cbaba247e1c8021f46653fb61d938a1e6f9b79be923398037f8335a1e80a2048558
- TLSH T18F31FCFD1271D7FF928EC21DF412B82134BD2E654A2048B6BE50D933CC4B7CD46A5950
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 28c65db83792e07789dbce21ed78cfdc9b6e4f1164da200feabd056e5b9172e2
- MD5 66401eec1c9c01f460e55bcfd2350415
- SHA1 a49d1fe3e618045b0a23144e244713995702e6d6
- SHA512 7b7187b81cd810593007c47faf444ce010ca40cc1e7c0ce60aa1387ce0391425b00d741bd18c9a53d515192feb7dd4e8f79ef33a6a3f4402bd4998fb91292126
- SSDEEP 384:crN0+bKhVvg4/sqNcVgriCUaFNzrh1ER4r:yC3VTELV8Ua3z/S4r
- TLSH T17052BF70B59204DDB2A66EC4456F0EF5AB6674CC72CA300B5C749F518220B2BDA3E89D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 14KB
- SHA256 85993dd6b75927c6e6205213082e95e3e266ef55a62ea0f6e556d592596c5118
- MD5 9b4289b3af5267e150fec3fc3364d4b6
- SHA1 74ab634f4cf64e84c5c901f1cd1b84922e3b078f
- SHA512 6782025ff7e010a06febae9936581af551efa4495af2c5487383554c71d317a39d396567dbb707c76c8c046ba2d75cfee792d2970c37069b44c4b85e0b85b6b8
- SSDEEP 384:hO842nj0RAZ0NQVu+0/Qje1VhC58ryK+yiqd:hn4WYRA2n+0/QC1miJ3d
- TLSH T19162D01038CEB8D9D9DB12F9EEA0FB1E0D27C051849AE9D1F064C286B10989FCB98D58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 e4d00ec4a0fd8bf63fcf309a12cffec1f83ebeb4a01b9d7eba300eae79494976
- MD5 a90d11926d0e9026a00a41cc21509ca1
- SHA1 5bcdef1ae781b8e517bf015986f168611c6fc684
- SHA512 1a67c953fc583bbf74a94ae92a6556d70c05310669e8d5d1287f3ee78d79fa898fd61bc750f24b8b56b88bb415c7190c0a982676bfcfbc34fd598d845dc177b7
- SSDEEP 384:JOvifZFdu8rPHLkNRIJUQL4r171TY1D6k9uzhbE72vP:zhFdRPHLIuNU11TY1Az7
- TLSH T13A52C06519A057641B769DA063BFF848A2A946070BC54929C5BF3238EF7033933EB573
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 11KB
- SHA256 5c1f3c6b383e0000440486a32e2357d57550b1a4e7d87e570249214cc1b344f3
- MD5 89c023e8800be49f29b4aa81cb4963c5
- SHA1 8fbb5738a9b069f05c7d72d945dcfe2e81143587
- SHA512 55bc9825a220d7db1e0031b7221da48e64649fcc9c89991fa488d3f8ba1ccde1d435b480c74420f30e61c04480b4b9426d4d97c1f56507fc216233303c58ba31
- SSDEEP 192:Ec9A0rRSKHKZYcxzI2NG2lUmHRyxLcvV2H25UodRVdf01:Eg1rRSmKBIDmxyxLcvVHRVdf01
- TLSH T14932CF688B4E4AD82AB7129FA870076A9D8AC6938D17D65CC886411FF069F1CB805E73
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 2KB
- SHA256 d6d0d71fe6e94f3e71f91e017678e627281f8953985ce9e5f8d5f9cad65db758
- MD5 e858d63138206927235772900deee7e4
- SHA1 ff6eb8f334cee67a66fe7e08c1ba1d4ba575f91b
- SHA512 c3abbaae1155155825ddc2c0e0dd039ec01a7b802f537f52542b0074d88604dd2b1afd303c640098198f9eec62676f7a8b2a93cc8f9c3d91ab29bc1de8f6469a
- TLSH T115410E68DC1177AAF131D640C225A77710288A738FD6DDCD0456FEE58B20D24DDA445B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 1KB
- SHA256 5cc9981df55dd7b9b788fa2057cbc54380d50fdec2ed6d543f566544f8361837
- MD5 912a32b8169b67a4cec0f50dc0fee4ea
- SHA1 805fa76677084cba0f8637c751b7f9353bfbe18b
- SHA512 1b23b0c3036897443450a82cceb1fac6accf7924598c3a546d550f5e7da030c12af0e1b37bae1d0924a44dde9d92637b420033250516e8e76c5fb4eeee73cb72
- TLSH T18F11B608A0EAD612303E7087F951063DAA7619416F1A266E348D24DB3523F23A59E37B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 1KB
- SHA256 282c7ccadf86f34b96bbf8acd9e7c5bdb9588738b25192e4baf1a43f31f1f73d
- MD5 8f1a253e73bdb67ba84c4d690c469b19
- SHA1 9eb533a0e6586ef79bc42b4b95a6d535019ed2c0
- SHA512 b07e13fa4444f065a07267adb9a3c0c792a84929847d0313369446d5fa124eb24db60f0ee3b78363e2959a503644706806230dde496fa461ed4010410a47c3bf
- TLSH T18C21FD85961D2B5156533FF1513C2CCC54759ED74D51A893CE2135B011EE30FC7D516A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 8KB
- SHA256 3648f625e65dd3abd8f28f2933ccc157afd68a65939ad3b826ff04515935bdc4
- MD5 3c903cb8d02fc94fba296a9e721a5e17
- SHA1 0a48091f8fbd03625717b85b5184feaf76a648f4
- SHA512 dd070293730353170659f3b48d91c38f5b3bae06e27c3b89bbfc5ddffb6c316489541e2affd867b15abe0201ea608bed21212f8edb1fad7d015b3b624d340aa8
- SSDEEP 192:i8gnvkuHayJKJIMO3dF32z0xfvy2qY/KThyO/W73otsCRbOOZyy:i8Ab64KGrdF3n62qY2EstsC5Okyy
- TLSH T13802BFAC10D2671BAE6F9740B3290294B8DA21DCC6EF89674ECD5F122D083125252F0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 8KB
- SHA256 111be99277a3761cd0a9af6b7bc0289ecd2fc945e9df695ff149c57d46017b48
- MD5 af28ac925468c2b33f148236936b6639
- SHA1 8010364f0841ae86dc6fcf3de697f9eded16de65
- SHA512 2a11a3fbdbeed30658b512ceeb55679fc41d377eed7816d0c8f51ef873c4f36bfa4db09400a849063b3d4e01a3e785e3fd2d09d2aa605a4146a7d05ad8bf5036
- SSDEEP 192:D/IG5rMVCLzJ8AbTnayp0U2VQ8iQsp6StMXcD5fRioIOJpBBjCDQYNm7+o5TKx:Dx5YVGeAmyRL886QMCfHI+BjmQYNm7+j
- TLSH T13312BF3D8159ADFDBFBD342160675A807340B99AFE6022CC8B89CD01A5789F546C52DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 3948b727f3cc355c46e04cf127d4d1f16f69d2ac16ded8ad5c2c4de8a2951cdf
- MD5 cdf0a1ba2d6aa1399f4a899dc2a57a57
- SHA1 38739cd6adbee6c89404f9acc8bf164835ad88e1
- SHA512 0e068dc4ef2148bdcc91a3343cd483b67373d41769348a7624f204b4994a1bf5a4886d96ea228cc5e532e70f16a35fc8472965a047dc20b98415ce53974a91f8
- SSDEEP 384:L/n4eFNQ9qYMh6i+TpcqVrge9jd9jpJO2UWB:L/nFNQQYM0bPV0eRvfrUWB
- TLSH T1AD52BF61D54F764F0AADEC84ADE5B85CC9F32578A57806339D2AD3905D8EF1B1C484E0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 14KB
- SHA256 515446b5659ea2b856b5d634106890f7ea55f98e0b5ea5a2a3917d076e533a99
- MD5 d3cf31d5f582f6ab071792d3ef1aa713
- SHA1 e9bdc87cf0dbff9509d2d1d4dfa04a7ee3ebda6a
- SHA512 4f9453c72eb467e36e3f034cbb1ce4128fbfaed04f2586158459f98bb7a5912ce2a107923752c44ac50b5161f5ca602300fb4bfbecc6beacae592ea8be3b28f4
- SSDEEP 384:KFiFhF44nY/ZMinByz+Q0ZXwGFo1NDu10ijgBd:ii0/GinByaQ02GCpvd
- TLSH T1B762CF31FBA5653BE0A18D35E6249D3E5681ADC0894FB3A3B096347D38B9C6016479EC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 322c862ec5f8056115509bef02f80851da5b8debc7f3010d1fa32e2ba78e6f41
- MD5 70139ea0dacfd07ecdeca4a60f1ea01e
- SHA1 2e5673da1252d991c68ae4300b45209e84316d81
- SHA512 61d3468fc7583be342afdef5e826799ca880053769abd60359e78518d358aff91d6dffd12e5684342b66c0ad732db9beb69d474a830636220a5dfe58c2952d5b
- SSDEEP 192:LTk4a5J9iSKiNkeYGDBhKpmRG609wFqeZu2dUqeSYftiSiui:k4a5J9iSL3DBUuG60bgddUqG1iS/i
- TLSH T14412B01201EEFC659591869C9B705E05EECD7BF5CE91438C49080B873EEBE141B23F5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 13KB
- SHA256 5a76122b0e85c027291dd4ef229daf87db921021e971a311228f26a392cea7a6
- MD5 0b33a5e4fe7227af8aa8e69f1369e3ff
- SHA1 c2a30fa38ed1f314a563a7cf3756ea74a3f4adb5
- SHA512 e6bcabd3fe7652f821c1f51f45e7b3678c3c99c193a8a45c53a3c408960ed4680de0b3ebb4bfd21e001419b1f82ce7f14fe86355a3e5d70a56b56fbf64445143
- SSDEEP 384:K+E4+PgFiimHcmDMh9r0HyzktJ8flkFral:K+E4+IXaDMhZKRJxry
- TLSH T1D252DF36DE7F8B4F3D703E220F5C766302960075D60EAB9868F20EC8B6105FB895616E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 fc6109e880653775f2ece0ed222b22a66b757aa95acf526278762f1461225c66
- MD5 2cbd337c172d0fb0fd62c9dc747e92bd
- SHA1 7d6c70d8dd5aea7daee8baced5530c21c4dffa28
- SHA512 1e2babfc73142d5bed0c4f320041b6316ee76fcc6414bee235e5152024cd7122d132b619541fb2899560c85c14c3154e7ef90360fc567eaa60fcb20af952f27a
- SSDEEP 192:A0qJ/wnUK2O8NVQRqRofBrK6CkYFkDh/Pq8Rl3ftjJwSE:Lqx2UKV8NVQR3fBuZFAh/Ptft2x
- TLSH T1FA12BFE5E54B0FF2915599700D37003B65722587E1F52C0E844723A2BC3E7416EBDAAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 2KB
- SHA256 6a76b5bdc050a5ad85ba3640614ec5859abd2e508af3df415c3a3c4df1eb22dc
- MD5 aafb4907ea173d74b2bd29cc2263ad0d
- SHA1 ede8fb9f8ed64b575a0647e2639d3a3438d2ccd0
- SHA512 3d5601e9dc5405b7e2d5fa64d02dbc26f07542c29261e1f6975ee4d967891f82c9d5a1798d431fe0ec8caa7d94085ddbec37be82cc0a0de7b036f55038c61a82
- TLSH T100514D8BA4F1FC65D6EF41098C536E0F5F05C40CADCABFAE865021B044C475A407A59A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 3KB
- SHA256 a3cb57d4cbb668f1f0f29bed66a591148a31990dcb75d7e4ca51c7d292b8b6db
- MD5 f15fde23af3cce3b7eafc358c34089b0
- SHA1 280ffaacad9d74735861b200938b0f4daa6e1b19
- SHA512 8ed626a2757ff6a216540fba411c206267e3f7e6dded0c582c50ec76f1c70a6f1960bc58aa201328b2ca0d4ac1d8980e2706fa51813d3a643f72a99f4182b070
- TLSH T1DB716D10D5EAA1C832430389470B78209879EF345E177F2774D666364DBBC0AF6AEE5C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 5ee8c5f3812be381eee89afe5d8e8cd0e7205e574a282120044d1bcbead3289e
- MD5 af36b3289429c23d626630b57ee77887
- SHA1 6bb8e106841f9eb93c1dca3d276c030eab41ee10
- SHA512 3ebe95a55eba45aa107ca98ded0d0e20d7e204f3665002da95cc7a75e427e395686903a5ffaa09c7823bff2eea99f0a1bdcfd2dfcb7f9f7eb04613ebf80b1c15
- SSDEEP 192:emmNsdWHaVQc5o51/TXbIQflABGYsfEDMUN24S5LQ6azg3G7Jcl:eqIHaVQc5AwQfXdfQBo5s4Wql
- TLSH T11812C0B176D9305FD8DE59B23487931A4890D2B0781ABADDBBE43B984073302A3F6924
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 f2bf58d71de054216c84b5767b015292b8eaecf36541b5b0b160ab03853905bf
- MD5 d0b13e6da27d52bfdd694d3684a10b44
- SHA1 b6ef3f85b10a081714ff2e2bb412031c2a8d150b
- SHA512 66d3cdfa140bbeb8650e6f5135235a291992b5c57325b887ff2fc0afa97b902f0be3722fa740e954574e377fbcac3b527d590627f7e39ae14d364680b95f1741
- SSDEEP 192:UYwyZ5EskWTX9Wtv6FxuyrTfJNpqXUjUHWZIDqJytyARgUgCkal9iL4:DG8yyFxuyrbJNMUAPDqJsyagCkwG4
- TLSH T1CE12C143A7FC9B77D72880BCD4111E1053A175BB85EDD9DD684A0C2F28D15E3D6F8425
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_cf0f8ec5-014b-4000-b355-87a5556f4721.raw
- Size 9KB
- SHA256 0b56b121560a462b5945ddcfab22bff57d53240ff135247da22295b2421af2e4
- MD5 dfb19d55fcddb305d29afcae4dd1c8e0
- SHA1 0b52a5ad93045a14c4c453e2e4188f290286d21e
- SHA512 c0242f1bfca63ac5e42b49d125330a3ac1145567f8682268d6dbd33260c65271539128eeab8f27f6095a3276c319ea76c15eb680fea176ed4375012963782d16
- SSDEEP 192:RSWqYU42rRPgvAdLTUw4rKbQMtyX5SwG0z3ygPnUZYIz2aMmRbC9QOkT:RH5/uPaAJUbTGw3/SfPbhH
- TLSH T10112BF95B5AD7733CD9A671076C13BD8B1496C31A7EE69103852BEE41F50EAA0839C8C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\bbc4572a-c881-44bd-b108-5bbfe984df3a.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c6a9cc2e-8eb6-491b-8c5c-7f77fbd0e74a.tmp
- Size 456B
- SHA256 eae24743f7036e3d8765877e56d7ebc179fc42a433058d3eef443db7f563519d
- MD5 aa4dfc9169de4d4edd647d287f18bf67
- SHA1 2d6aa8bf2452dced86b11c60072115217dd8a9ca
- SHA512 20c363c134eca3a8b0139ecbc2867371ee9fd60385acf8779f1505c278ebc86000172d2ed48b457cb7ebb153c97c94fa1d5294635429b94295559315fe33deef
- TLSH T16AF05445F974414899AC97E137A97E51C73A4981AC9452D264DF206D821510D4A15220
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\d7a53b9a-f125-4057-97e2-9a6c064d56d5.tmp
- Size 171B
- SHA256 1661e9d91063bc05fb507337727bed490818f1d4b31fcca91c32e5e3614852ea
- MD5 f3a18bc01456ab4462e02e9d30dbe763
- SHA1 51aa9e83b87a52f852fa214c0d0299ff31f430e3
- SHA512 bccb59e16951405f05621aec57c97d8adc4f3a2dd2b5225b6e1294dbbf537ab1bcaf43ee234177c3c247c298d30a77b45789294c082bf435816118394bb25685
- TLSH T1BFC08CBBFE42680C6EEC5E78F01D35A016BE0D430408946020792BAC02AA6798358FA0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1324.0.628040523
- Size 2KB
- SHA256 6ef162d74233aa819863d5c847a381edac5bf7e776b05326cbbce8b1753e3824
- MD5 4a9ccf2085f8ce1344b4a4380c01df9f
- SHA1 abb4a8ea1f92d8cd807c79cc5fea5b680533f061
- SHA512 79ee89a1ec5e7f98f9bd211ab2d2684927beddac11bfc440674d473f99180ab8c66b69d71a1cd4aa620eab9674502946cc984858ea8e24456ae6d6c86447bb80
- TLSH T16B51F1508D416971AFA6C72E72F13F2A0FBDC9A33111549D32EE004E1ABD7BB811B51B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1324.0.628040523
- Size 265B
- SHA256 2f8a2d64d8d759c3cf0a1558d3d29c715a18475a1409ddeb504432483f247b51
- MD5 97651c6e6a9254b730fbd1a175889468
- SHA1 452eb39a803687316d8fe2fbcf7be7f0e39d898c
- SHA512 4a655202f971525bf986d213f07e9a8bb525dbb4067d13efdb2c446ee63bb5a0489876cdacb717f7c05c65b1c29ce34cdc75ea687bf74287d0376445a2166822
- TLSH T15ED02B60184A9860A1D09EB581697FAF0678C93104061824212C076641F83BD1357A26
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1324.0.628040523
- Size 1KB
- SHA256 e9a749d78552bcc88aa158e1a961baf18d46e228846d14e4e5fc3a491506b42e
- MD5 e41bb1922554965014f1f8ce3241b1e8
- SHA1 2d78728f2dfe2acdaf7ed98d5cfb0ab0ac89f9c8
- SHA512 4400ffc0c26887865badf0c3987050209c752d929e6c7333fd88cc1ed6396ac26551e9c6670c91500afd52ae509a69f6350915d0a84474b6fd6ec38c8c634281
- TLSH T1A7211E509D8139716FA6C63EB2F0363B0BFEC883211154AA32DE004E0B9D779810B62A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6044.0.122609655
- Size 2KB
- SHA256 69c71af3dd0c1c0722566e8647ec9bcf4d3a195830cc8d5684b49aabaf689c21
- MD5 c115371838f9a742c47b7294fff73465
- SHA1 69165371b2a06c685732d3db084fe6e8563f8897
- SHA512 cde13edff590027d17a675b37c7b7b9a134704db8444e586220511f4783f74e40af3621a8311ea837d0f33d62340347e7fb778ac7a3dd385ffe64a2e1c42e5ac
- TLSH T1735123508D412575EFA6C76E76F13F2A0FBDC8A33111649D32DE004E1ABDA778107517
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6044.0.122609655
- Size 265B
- SHA256 2dc811e4570290bc4ce9e3fb0a3750907bb677bee259388fe168f1e30947db27
- MD5 7e4404511e2d230e8a3701ffa8ee6fd3
- SHA1 3b293653ea9f78d08faeb02d559273268cb96da5
- SHA512 178419d19223c930a14c181ca8e678f8ac3559f17fb80aa56d254cc19e64f61bcb210acb92bdf6b01f45ef0cd7590249a78a5c5100f998b909161febd65e58b8
- TLSH T15AD095501A05A17475D1DF784639BFFF053C541740423C7111BC041701FD17C0346B32
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6044.0.122609655
- Size 1KB
- SHA256 24e3e7865ae6c1fd9bac29300ccb615eff181e7cbc41a3b31a4f2b7961c96e00
- MD5 3ffa695a9cf275ddf2ec927f229c27c0
- SHA1 188548114c60dbed8eb17dd4925efe395c29e805
- SHA512 e995cf2219883f93ce78521d5ee123e7f9f791c6ed6a84b45a074ca1fb771f3e9961d3cb37f65014d1312cb26170dc00d9cd369ac2acda22bb22e352f4f8bef5
- TLSH T1012133109E4139716FA5C67E72F1362F0BFEC887211154AB36DD000E0BAC778810B62B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 1KB
- SHA256 9e237ea3db5205e2752d0fb9f705a8890e0e5becfb5fad1599613eb906f191a7
- MD5 df80efdf4a860af6c0e14f1b5e3bfb56
- SHA1 00cac498e39e001190c3207a585ac499d9e06ce6
- SHA512 a89cd9a5348bf18e72924760eed411f42f10033342cf8f931e8ff6253683418389bb422710ae50518586648c1ff38328d88034de72303f42c8f33fc831190a47
- TLSH T12D312EE3B02207341F6AD3D27B7CBD99C7764CC9B88056E6ED5C601C428F23E49142D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 1014B
- SHA256 6bbf22b3b28cbff8cc799201ce281ce64e07b37944430f54e707893a5b976a78
- MD5 86aeed3f3c80f8adbbef7a265b55370c
- SHA1 94018f0505a5fa66b01308cd1661d03e858a0de5
- SHA512 9cb204ff76b98991726ab0d0691c85ad57334c9be941496543a3b4853c47e88d8b69d3e95382d7d351b58361a4f2b093adb3b3149712fcb43a0b9290466bc7aa
- TLSH T157110EE2602503282F69C7E13BBCBD84C7B68CC6BCC14AD7EE9C645C824E22E09182D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 1KB
- SHA256 77f7f64ed2e868f79c12cc32404c7dda46a1434b534a6732ee68f179091789f9
- MD5 f8f2eb3c466ad092d60cab5c3a55fd07
- SHA1 5705a3feee60309b17f1ea43770277c72f742077
- SHA512 fa1284bdc75010c7b61cf4553e05de6213e0796aeec027d722fe79c514aa8f15bea7c9b428f0ab6c6b06f1977f67960ec8b007952e29f6ad4eb38696d9009e30
- TLSH T10711DAE6602207381F6AC7E27BBCB984C7B68CC6B8D049D7EE99645C428E12F49182D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 1KB
- SHA256 9fbc7203fd8a0e2ce6e71506c499344f6431bf0313d1ec3a8111586b834b3b16
- MD5 fa1e40a8dbfdddffbe19aa8e505cbbfc
- SHA1 8afebcdc37ec0b485c833f5386336baec151e3fd
- SHA512 c5dc94f0297930c757d1ce3725b0b7a288026b49fed9d6b70d9ab8bc09c9515808805f9111665251883601ab666ab6aa3bcf1e7bd01f437232122049d964cdec
- TLSH T1C531EBE3712107245F99D7D27B7CBE99C7764CCAA88059D6AE5C141C42DF23E4604690
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 3KB
- SHA256 7748c09e928c366ad6f3880efb2e086a96efd2bba243175f33e75f123b6c1bb8
- MD5 87dc01faa359dcc3dc939f12ec29af75
- SHA1 78e37cc6dd14dbbaa5c95d6b29abcfb9e8789449
- SHA512 ad6bb154bade27249026ebb8a778c120370494c2eb51a7b31933c014e9d5d8248af1cbe2e2fbde4b9b0085b00456efdf1ef421d85c38a128029b72274af07b11
- TLSH T149812EA198412634AFAAC7AE77F47F294FBEC8D7314054DA76DE004D06AE67F810B247
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 4KB
- SHA256 c9b93b48ff4ed3266d58a71cdeb2cd9e7c44f7a94b3da472e0b8bffc6069b7ed
- MD5 5ab2271170b539a7d1243f6aac161956
- SHA1 81d011c43e68d4de8632514f09b6eddaad8ed195
- SHA512 13a27875edc965e7f54fee6595eba13103eaffeffa7fb122a91b3c6914616c4e18ece7ce501383f34fe1c0180eacea1776025d8f6c944d97a2339318ba5d5fab
- SSDEEP 48:LWjxecyMsZwEQbL0srshNG7fmmSkSEp5RmH3f4F++iw5YFFa5pkvrS1BFhAkEWIS:IerZwbvJYhNhySHTRRrWIN8ApTQ81Ces
- TLSH T170917291A8512A30AF5AC7AEB7F57F298FBEC8D7315050DA36DD004D06AE67F8207207
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 4KB
- SHA256 b4aac3400c9cdfce130b3a727ab991e45b60501b4024bc0bf018e34e156c43d8
- MD5 76e6093b0d32c2ed04dd21096524aa23
- SHA1 bfb4993693679f82bc9dcdf30096dcd387c1c12c
- SHA512 8a956827578f3df8532072e68285882bb80ee8fd140c395648dfd64d230d60a2c5e9db0064589ae94ecd09af20c2d0bddd08b9b79360d75fa293264498599f54
- SSDEEP 96:+ek7ZwbvJYhNhySHTRRrWIN8ApTQ81Ces:xklwTM1H98A5B1Xs
- TLSH T171918491A8512A30AF5AC7AEB7F57F298F7EC8D7315050DA36DD004D06AE67F8207207
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 4KB
- SHA256 4c751403175a684780dab507c0d671e36210ac494275cb2b8919115b8746c05c
- MD5 05618a4d61aeec26d094d21f58cebae6
- SHA1 874ab8862c62259035eae7851b1a146330312610
- SHA512 4ca86e76021633f566e7329ea25b329899fbdb62cb0f03fe63352f8071fd93b17d160410bd3613cce821c7854ec75e9baf0e8cd1141016807e8c63799ad3d839
- SSDEEP 96:AekuZwbvJYhNhySHTRRrWI48ApTQXw1Ces:zkQwTM1Ho8A571Xs
- TLSH T1D2A16391A8512A30AF6AC7AEB7F57F298F7EC897315051DA36DD000D06AE77F8207247
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 1KB
- SHA256 3085943073b18287270dde2bb255aa087297b3b50c9c0b85ed8deeafe4ab9a2c
- MD5 c0b95d3803643c850d758971ebe9c79c
- SHA1 b212aedfac131de3af8c118591dbb25d6e81f09d
- SHA512 e4d8f09cc1e7ad67f624d21ddd0e6129f5cd20733f4765eb714f1b4141ba978ee2ec1a27cf374100c163cd428b677d125aa542cb3aa9b340dcb7cf5b75e87f22
- TLSH T1252188F7602147345F5AD7D17B7CB999CA738CCAA9C045DBEA58549C428E12F49142D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 737B
- SHA256 c5f9b5d67a3a225f98ed1ff57d6aedf83eac3ca1d9bc8608b3ade6e20f45ae64
- MD5 1cbec4337c0d5aa0eecbc80c01f866d6
- SHA1 7dd1ae01a99477c6706e331698258b9d0d21a57b
- SHA512 96af5c7265bbeb4385076cb0ed16aef0073227ce9ddfff93332b48d7787bdc90fd44c9a60ff0e132e1bf7490284d0cebef14c0b8442f69cefe1f35efa377ffd9
- TLSH T149011092602957389F69D7E23B7CBDD1C7B74C81E8C449C7AD8E255C825911E4A242D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 918B
- SHA256 75aa670e8606a74bc431edf6cab3adcc06ea00f086f3146f753ba9fcd8a5c261
- MD5 89ae5c0b5fd19f23e4f4e4d6844d2629
- SHA1 be38616b72a3b5034db1aeb2ca34646c2d6a2902
- SHA512 0615f98cf41b6d76fb10bfd5d5899ef63b48947c2bdb9390319fc7958658084f4475a747c13f244314988dbab2f33e01678528c49bd72540c242d945277e01d2
- TLSH T118119CE6652653281F6AD7E23BBCBDD0C7B68CC5B8C049D6AA8D245D425E12F4964280
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 1KB
- SHA256 f457bf0645b49a367fe33644a34b3034addd306cc7553242dd144da69f762ab8
- MD5 26d92d1cea42455b164b01fb58d45d32
- SHA1 fdcef875e2bf4ed41d846090837cfb42f450c45a
- SHA512 03102ae2c3ff16bab20abad2c8ac78f92ad895426a61147e848b8b6fdc0c6b13e795fb2b4e938d4e774bac14bb0e3b0aff3e45bb5872b4dfdaccbed631481388
- TLSH T1C121FBF7602207245F1AC7D27BBCB998C7B28CCAB8C059D7EE5C645C428E13F4A182D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 1KB
- SHA256 b6adf1ab4c3f046c49167eda6f5e1db10f0e80e28c4d9dc88ad581b7b70ef6b3
- MD5 e3ec0555bba1139e6408f3bed6a90bf2
- SHA1 325ada0f7c737fb36726b9c18daebf18a1d1a4e1
- SHA512 f2713bc24c9cff7f043f2fc6b2b7361ef0097ff78636db544f96a04a6b38eac284c832d4a8db76425b645f200a06e72c3ad5b9e5da104ea2b7857f1c9c2c95e7
- TLSH T1BF21AAF761210B241F5AD7D27BBCB999C7B28CCAB8C055D7EE58545C428F23E49182D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 1KB
- SHA256 5adef2454b1526261190626f10b3c1981f9c79c9aba2a5d9799f1ab954ff3d98
- MD5 fa131ba47c5daaa77957e4fb097ddcb0
- SHA1 7572d14891204a14b9b38706c75fd866770deb15
- SHA512 556cc4b9ab1341b8e31827e116ad881d7144bbc1e3c1c84d222ba1f6ad180bee15b978c01b7fd1808f43d702e3d4f1b534f8894909e6e298cefdb487e1bb0288
- TLSH T16E21A9E7716147281F6AC7D27BBCB998C7738CCAB8C056D7EA98645C428A23E89146D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 4KB
- SHA256 d42d79ec7a53984ea86dfa819535bd27eb26f7afa4aecf1f9093aa5323f8e9d6
- MD5 1c9c31f0d8e8f5049dbf5ea14c3f3c1c
- SHA1 45f9618ccd82fca3671a08eed429015466b09484
- SHA512 1449abc1aca8251548e0c0322718d2505979d5642f4163bd49195532121c78494e0fa1f03ca63d0b789a96931715cc371ce0c113fb967e4eb8a6fedc424197dc
- SSDEEP 96:RYDekuZwbvJYhNhySHTRRrWIN8ApTQ81Ces:RYSkQwTM1H98A5B1Xs
- TLSH T1CB919691A8512A30AF5AC7AEB7F57F298FBEC897315051DA36DD004D06AE37F8207207
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 824B
- SHA256 42e19d0100f03ce446cdfb318935442f9eec5a27d72cef1bf7d534012503f6d7
- MD5 50c657b51ba4f7963023b42e7e8b85ed
- SHA1 ad724b2597bf20fac65ad526d1d4b6e8d21547c7
- SHA512 810787129b98f522a2e3429fa48a5668a8786f8382f07257a229f2a6b68d3db8a113aa3c9eefe60ef5cdad3c2d361338a5cec7637b163e50a10289cd8842b764
- TLSH T1A801CEE3742652245F6EC7E23BBCBD90C7BA8CC5A8D44AD2AA8D245C465912E4A14280
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 2KB
- SHA256 0c32ed9fdc032161a163bc250ba6db66f1e094425a3d9a4f4466c932bdfb7149
- MD5 435ad9c594626e1b244a32951ecb9147
- SHA1 be101e27c195f707d3ebb99b71d57e06f9593c2a
- SHA512 77362631a668c0052234ed17bba413afa1cd15da7018c0041ed535bd0252e349188a3254fb10fe618e81b0fc028188e46419e97fc4deefc43db08364c7132353
- TLSH T1C95163E2A55127741FAAC7AA77F87A69CBBBCCC6754045DB7A9D004C038E33E850A294
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 4KB
- SHA256 bc922eaa99ae1c9e7e2f8400e9ef31d0945379ef441a51097113c6b236fc4d68
- MD5 5e1a955ba0b227e4268c2d0556104d47
- SHA1 e0313166d36eb9139b2a2b3c75682a46f7f28b9b
- SHA512 09ac6b27e116826afd949df096df370dc11f3db2833c6a8959cf8e6b3c10c15a401edd2bc1d077f55960b32f984c484f149f5576cd81e02059008c5abfcf4d68
- SSDEEP 48:GjuecyMsZwEQbL0srshNG7fmmSkSEp5RmH3f4F++iw5YFFa5pkvrS1BFhAkEWIUj:LerZwbvJYhNhySHTRRrWIN8ApTQ81Ces
- TLSH T162919591A8512A30AF5AC7AEB7F57F2A4F7EC8D7315050DA36DD004E06AE67F8107247
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 4KB
- SHA256 8cd44fc9dc719122d6f337f018ba41fdacb447b246b046030234bec46a2d23a1
- MD5 00516e3e383d6fb3d136ffe5058fdb46
- SHA1 ff509584415b11d98931b19cc3803845928e66ef
- SHA512 86f8bcf8e16e1dd15ba9085d01482b88ecad8cc3e3d609713aff040d65449ae9c59bd671a3b823679a86ca012102aae89943ec9ce33221762ef02508c923db74
- SSDEEP 96:36etZwbvJYhNhySHTRRrWIN8ApTQ81Ces:3lLwTM1H98A5B1Xs
- TLSH T14B918391A8512A30AF5AC7AEB7F57F298F7EC8D7315050DA36DE004D06AE27F8207207
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 647B
- SHA256 35e0bebed4d22f271fcd7cd056f8ffc5319cdd0bd4a4d26d51aa0fd1aeb7576d
- MD5 0381b29fde449050aed9cd869853cff6
- SHA1 40369c95606e490c48e286b04c275e2dbc34b8af
- SHA512 8df729dd3f214cb4debfdf36a59fa8a57d8237af1f5bf67a838d4a064ff867ed979cb67dd8627e7869589259b93347784f0f07316f3d0dad074609a20f26e935
- TLSH T1F8F00891752552245F5AC7E2377CBDC1C3764C80E8C049D7AD9D746C835D11E4A15750
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.0.767607951
- Size 549B
- SHA256 dd37c2a7da5a1eedbb32fe8ea0da9127fe41b7cef4c92ed8b0a087f5ba599b50
- MD5 ae38e38f2761f3d125bb6a5c4c874455
- SHA1 3cc6f8834268cd2e5009c0be1e6aa97274a9c10a
- SHA512 6630de11f27702cf406760e36f5c0b1f51d67f46b554f7c3c9c9295ded64351b49b6f05213dddbf590e1d7a973db9f4badf40c8a34873bee157b6d320cad2eb9
- TLSH T1A1F02080B9214318AF5AD3E037AC7E91C7394C85A8D845E3A8CE74BD831920F0B26150
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 1KB
- SHA256 50f98444461c66e684cf2cc630f33f2d8939c6029492add9f35e5ff33778d51d
- MD5 88ccf96e41b131945c388459c379ff20
- SHA1 4ddb22286200247010b6a2bdebec05cc3db72b73
- SHA512 e02a69d20f8ff3c900e8b460bc008e3ae256f9e6e2356e96ee3bb85858097a5f148119cfcb1af3be59422bdb80dd418986333865f30be9da5704da6333763df2
- TLSH T1A821DBF3201547281F6ACBD6FB7CB999CBB78CCAB98095D6DA68554C02CB13F4504AD4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 656B
- SHA256 b3faba7d6415b2240ebb55d51d4584dcf450af96903c0f680bfd38c46607fd4a
- MD5 d6b5cb9288b8129e290f0cef93e72065
- SHA1 c7072dd1f67e9a990a1202f44e7f77ddf21827c8
- SHA512 b74ac68c95e4a64374e82b43392ad6fdf419b7152df2b36568cfb72ccf37712cd9f2039a457cae412edf60c0df10d2e3cfdbb43a77bad5afc8b6812cedb0e228
- TLSH T178F068B1385121385E9DCFA5FBBCBDD1C6B74CC2688065D1D59C765C02FB12E0500F90
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 746B
- SHA256 61c0bc187a07cbabaac968e4818d604faa82626c86d50e721be42506ef8aa772
- MD5 2b460a3b37174ff9902e7dbaba947cf0
- SHA1 5e8ba2ae94f8c3c7b389e64061f30085cb4472cf
- SHA512 a1e51bf94f1786eeda8cba7604ba6b50a9d55034a827522b8b3d07bdc0bcc3a77bddbca670107ae32b41ef8706d987160754a3cbc17d5118e652eb1e14fe97f4
- TLSH T1890110F22456122C5EAECBE6FBBCBED1C7B78CC27C8495C2D569225C02AB52E0504F94
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 1KB
- SHA256 1591603702bbad9f555cd2c88fcb2767d3559ada254b1a932544a0970f654ada
- MD5 679a16c82fdb9bd400eca86f41afa375
- SHA1 1fab9cc4b52488104ac2b750480de2c46337d2d0
- SHA512 a13f769b20a205a5007e3fc22092054c69651ed0d5b593b8567f07e6aca80b3abdb701739e97fd373c375e755951cd401daeabfcef2a8c45c6d2e84703c8ed05
- TLSH T14011F0F3246517281F5ACBE6FBBCB998C7B28CC7788095D6DE58655C019B53F0104BD4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 1KB
- SHA256 0edc42b3f0fe979a9574881c21e566329feb184856a69f891d16dad24568841e
- MD5 ba2b59e9085a770703494ced06fa8eb1
- SHA1 20d0376fd1407d2a21a1809bf48d37d58595a89c
- SHA512 0d920de46f14ad5d67b994b4aa9184ae1c5022126f8c23187091614e9242065ca580b5990a7227509d5d2e3cc523464316bf0e438cd948b62dc4964f3f1caf0c
- TLSH T1DB21FBF2202217281F5ACBA6FBBCB998CBB38CC6788095D6DA5C594C02DB13F0508BC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 1KB
- SHA256 bc90001b008e0b0a16f28ef5bf592d86fce8c060dee6c44b8c876127ccbe6026
- MD5 de2bddb32b9f67197f8d1182f95a79da
- SHA1 6c0977d81d1ea01244e5db80fd56272e4929cf4e
- SHA512 dcf6710402e892f6afcf3ddf23f1a9c59bc7b824171801e9677dfef24b40890ee47cf4fb5049155db1619d5023f0fdf4f8072bd93410017424246ae498542cfe
- TLSH T10021FEF3302107281F5AC795FBBCB999CA734CCAB88095CADA58554C01CB27E44047D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 833B
- SHA256 8c65132098caa27c2adfc5209f60d75f070eec5e20791b1ce531dd0d50f530ef
- MD5 4de8e32cd82ff9aca66081530ee5305a
- SHA1 a39dd8d768f1dc5cc0a64cf74dd1ec29d6616082
- SHA512 6c084cadde68c674e0a61c4929edec2a021daf408d8399a4bd4f3f33e7e0427918fe8d385724e1faa6cbf1e3225d0199971b19f50daa0dde479878a4e225cc34
- TLSH T19D01F1F2345512385FAEDBA6FBBC7D91C7B78CC6788055D2E659255C02AB53F0500B80
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 1023B
- SHA256 585b2404c606f75e97e3785ce9b8bd2744ed06833d0d9830afd17ce7119c4e28
- MD5 e1c1696f3a5f86930b34de48578329aa
- SHA1 989174c5cdac68b6b818a21da81107e86d96dcff
- SHA512 757809c931c9662970bfaf57e3d972185832c6b7b971a585ecc96704c90a16b8b1eccfd1cb6cde2d41f2c4860e257ef7d03dd9835aa51996391ac770cd96ddc9
- TLSH T11D110EF2242513285F69CBE6FBBCBD90CBB78CC7788099D6DA68654C029B13E0408790
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 465B
- SHA256 d65585068b012022e65a645539dec315bd7f0c175e839c5916ff1ba1532b9749
- MD5 d24312d554f694556134bf7f59744b9c
- SHA1 f55af2a988b869f176854fc81a5d07c248a5dafc
- SHA512 9051a5e476966f85e6e0961cef21155b9c8d1a0a7e2ddb583c998955e93e0bc44c9be0c854b78f73acc732023db0b3bf38b75a3524ff8b902a2724a27499febe
- TLSH T171F0DCB07C54111CDCEDCEB1FBDC7B62CB7688816844A1E180A921AC01B793E010AF10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 558B
- SHA256 4d4e9ddfbfaf3bb459ce600cf83eb62bf1b83c4f09c0a01c972853e6c95093ed
- MD5 1ec76e1d392ca0d817963df28e5cd089
- SHA1 a9f5bd59c6c8207eefc03dc9d07a22a044b80f56
- SHA512 7f69afa8741ca71cb2211e637b2dd744c7ee4b921b1aba25fbca3290f3bdef47b58c3ebb142f1c2dd4dd0e3f5766b4ceeb8184ab7316b4f0a94ddc487e37782d
- TLSH T153F026B02811120CDEDDCE65FB9CBA51C7764CC1588050D19498359C057772E0510B54
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 200B
- SHA256 9dd43b2ad4605e6e1bd22b0d6bbee26ae1c44ec8152b40c0d8e184de4769cff9
- MD5 69cf48da6f3fac13ea0304e4cba6ba39
- SHA1 5e73e9a7e9f4bca7babceff9241e6c8f024ab012
- SHA512 de910522767e6ff44ee75332dbd5d79df7abccd766487d2577bf03925f793bdf3a3a2a23311789d3dab363a659bb3a6e24f3a1684e5a274e98760a198868954e
- TLSH T199D02270BD011844EC6A1CB8F45667710CB901822809956060A817EC013AC78165CF30
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 927B
- SHA256 895acce7931595e74d7860af24d58bbfbf13e2278a83516238715a746fe357de
- MD5 17a09d36f694e0a6684ef8d6140aa669
- SHA1 e3ce538a52501e51c120c17d107f4de567752f55
- SHA512 26ff7a28719e8a6f0a0521ce8c4bf7b1a47f4f691d3c1b6efac5eada11f55be7f4f06a22a1b58df9d6948312f4cae4469f22757e1d700249fa34cc767586d96b
- TLSH T1DE1104F2242512281E69DBE5FBBCBC95C7F6CCC67C8055D6D998625C059B53F0404780
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6304.1.1577839937
- Size 224B
- SHA256 93aea9dd2ed3859e96b706fa5fa1aaebfb54ebea788dae4901f7ae41b867cff9
- MD5 3f8142221d88fb281ce9958812708df6
- SHA1 a7d169acfc4c8b0137101d37c2db4bc771cffbbe
- SHA512 5adc23b7cca090999b6bd12cbee5f419d02b293ee742da004822215e27fd2610f50662dbad2f575de662c26496edc07aaa60150d2f890e3e258c5d3b24980c00
- TLSH T1B2D023717984145AADA89C3FF455772318F90C421C0251A451BC335D0317C6C8B4CF30
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 2KB
- SHA256 83f8e895f184d00dd4907449a3d480a4fc2fff8375920ed12597de835d3a64c3
- MD5 6d6fede931880a967a885bc35dd0fbce
- SHA1 5e78c443949c7ce7927caf427923321a6ffd7728
- SHA512 51ecfe6b26133f017c17857911d442d6d6338ac409b3a1abc5bbc08c7d75f1df35ca0d956b5f7bb631a646e5d0cb434dbdcfc32965f2e50b5d424915ad76c8dd
- TLSH T17651E7B27414892367B2E64EFD167F43DF361007D2542B88D5ED0D0D64FB9AC1B16822
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 5KB
- SHA256 923c149606b49e811473d6ce2d8fd69114459ee553eb5778601569e84d39520c
- MD5 f3b4acb1de8d9602688fc6a12de9c11f
- SHA1 0f8766d642fc5f47c5cb9fca6483abe562fca49a
- SHA512 15faca06a5cfaa3844d1dc6ecfb5517fdf61b2a50fa1dfa7d230fe1f4108550c8c1ab362aa205c83031780b297712be59605e6150920f34f57d8b80e2712b7e3
- SSDEEP 96:cNJFqCyWlxOXflfrcQSr9NDotonYEsq4kZ9lhhViki0x2wR4IRYFaQDa:cNfQQxObcDURWZVQO2rZaQG
- TLSH T1ACB19536A409D923A5FA868E72167BC2DF691106CF101EC58EDA8E0C41EF8FD3406C8F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 3KB
- SHA256 37abf401b2886b4ef898cdfca2b07a93a298fbcbe1f78e580767f17ee4787186
- MD5 9f12f0eaa300572d7ad8ba73622fde54
- SHA1 472d2c7e29134cc60416f91350970a5daa9c1a70
- SHA512 cfe32c356297b6e1ed1321e1808e0cd0f3316f303419f7a0059a90f9d9f91c854a5e14485412552b15ff93a0d6793cc1d2d847a143ff9edf154e6d3b1f759ca3
- TLSH T1EB61D67138188A33A6B2D74EF9167F43DB261007D6146ED891ED0E0C54FB9BC1A26822
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
- Size 3KB
- SHA256 7261509278e978139ceea0e084a5dcf40f18c415c495ffa0f417323757d2393a
- MD5 00d794a51bcedacac826f32a29dc6b40
- SHA1 546eeb344ad59f3ad559e1e18b35db0f64a857c1
- SHA512 fe167cb019a2eae2ee6693ff0811fa1852a9c9912e895dd13bf0dab43b8eaead152de9eb8dc1f6001faed3dde413201496ea70c5d02b7c734421d21518b7ba1c
- TLSH T19B61D67138188A33A6B2D74EF9167F43DB2A1007D6146ED891ED0E0C54FB9BC1A26822
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
- Size 151B
- SHA256 622ec351abf55692a276662b4515683deba316f8386cf079c91f7a1aea04f84b
- MD5 ccf6e3a89e8e780641e0e23167a80f83
- SHA1 406600f2ad143c21efaacb410aee8a9005390f28
- SHA512 3233916de37245fdf79251e4ae93adbb5d52cfefa5c36838409b9e82b23b72d0023e05fd3eb360238b80217be7220af295cf294dbc1f30df1d6d8d2ca8f7b34d
- TLSH T130C08C0F11130867F8D981883024BB88D3B5320BC9EADC16ABA44F20CAA02821096090
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\scoped_dir6304_2003650431\opera-one-dark.jpg
- Size 349KB
- SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
- MD5 fc3dafe25d5bc30a830ab92aefe52634
- SHA1 2e1bda9bebb1539aadf6a2c6ca33c3b9ac8865fc
- SHA512 d9ec9ad58ef765de7fb1cf737e9d287453005edbb5c47524e19938161c14b16b59084e9b91a2b40389c43fe9204fb9fd41698aee68968fb2fb046a4cbeb73829
- SSDEEP 6144:SXn5tlDpMtckM8FeR5HrNVvuxQiW3qp6gIQ7B/7SoK2RIFW8aE6mM+z:QnfMtc/RBrr0QiWc6TQ7B/7SoK2REafC
- TLSH T1A0742397ED4262D66B26D0F13C52692FE3066AF31728454B322424F7B3A1C1AD1FBD78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\SystemTemp\scoped_dir6304_2003650431\persona.ini
- Size 217B
- SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
- MD5 8fc4f4bf76a946d682606a6be94a822d
- SHA1 3248c1d836e9eab63f0b647ed3249af2dc0e342f
- SHA512 5301c9918ed28c51ffa1d06796f897d7d7df3954a339718647aff9d11c7c96fb27fe1cb0fc7438c5ae1e86cc9a7322fea7b41b646ae03a4d51f70aa4bef6f488
- TLSH T14CD0235211470321D103D7D920717ACD56B65168C604539C03EA7093F2472559592D50
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\scoped_dir6304_511133154\opera-one.jpg
- Size 194KB
- SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
- MD5 c18898ca5a97bc5807f3be336fb1338c
- SHA1 83fbeaa1c4a4b69599cc6eb08f8958a6908f6b32
- SHA512 f7163299688c9fdaae8882c38e5992cd23d90f48a6d36a307e756794c6c0541afbebf12b584c2e03464008e2e4927e775e57e3f982e412206b7d9db271976a93
- SSDEEP 6144:bcztf14vie9cI/+1YhN8iuRIHN2XT7/N7:bcpfmiscK+QReT7/N7
- TLSH T10014125012852B6BD4DE763021AF362DC703F5BEC63E94065180AC5BD9CBC931EE7BA8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\SystemTemp\scoped_dir6304_511133154\persona.ini
- Size 207B
- SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
- MD5 a2294db65c800d2e518ec4943a2dd187
- SHA1 02e293150a096b6342d1c39ab57b27d5c0c8cd7a
- SHA512 115c2d5573795136eaf70cd9c89478d3b1c4dd95aa7189cfdf59319cbafc7f90a01e57c34050bfb24095bada13db3bae26515a1d4c2479f646ae52851dc41f53
- TLSH T19BD022A621820222D203C79C207173CE9AA692588A1442AC03EA70A3F21B2A9C297D60
- MD5 SHA1 SHA512 TLSH