Analysis
- user interaction
yes - max time kernel
88s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 11:15
Behavioral task
behavioral1
Sample
TLauncher-Installer-1.9.5.1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
TLauncher-Installer-1.9.5.1.exe
Resource
win11ltsc2024-20260709-en
General
- Target TLauncher-Installer-1.9.5.1.exe
- Size 25.5MB
- Sample260720-ncxegsat5x
- SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
- MD5 de90bdf89be7e8f55b9ea1e9f0a88613
- SHA1 ea25984a475c95ad41abae25885db7b24514a7af
- SHA512 42f6cc77ea8cd43d167236e81e4164da7c8030605d7d1759494f41f5b9b5dcdbaec3b4d901f1925f13d915756b52ec22927e1dc304e89fb7f9342b84c475d188
- SSDEEP 786432:ytpZzp8Q6W10rrKJBH5lFRqJkkt9O2B4Bi5e:ytpTTuPKJBZlC39ORb
- TLSH T1014733357AA29072D772363496996339F77EAD70AB3802D322903D3C7E716C15A7C21B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 33 IoCs
pid Process 4728 irsetup.exe 2960 BrowserInstaller.exe 4688 irsetup.exe 4840 opera-installer-bro.exe 5828 installer.exe 3248 installer.exe 4448 installer.exe 6076 installer.exe 5924 installer.exe 3300 TLauncher.exe 3296 Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe 3408 assistant_installer.exe 4788 assistant_installer.exe 5732 installer.exe 2976 installer.exe 4956 assistant_installer.exe 4484 assistant_installer.exe 4740 assistant_installer.exe 4408 assistant_installer.exe 3392 browser_assistant.exe 4792 opera.exe 3328 opera.exe 1328 opera_crashreporter.exe 4360 opera_crashreporter.exe 5264 opera.exe 2868 opera_crashreporter.exe 2208 browser_assistant.exe 2732 opera.exe 1816 opera_crashreporter.exe 1468 opera.exe 4856 opera_crashreporter.exe 3860 opera.exe 5592 opera_crashreporter.exe - Loads dropped DLL 32 IoCs
pid Process 4728 irsetup.exe 4728 irsetup.exe 4728 irsetup.exe 4688 irsetup.exe 3408 assistant_installer.exe 3408 assistant_installer.exe 4788 assistant_installer.exe 4788 assistant_installer.exe 4956 assistant_installer.exe 4956 assistant_installer.exe 4484 assistant_installer.exe 4484 assistant_installer.exe 4740 assistant_installer.exe 4740 assistant_installer.exe 4408 assistant_installer.exe 4408 assistant_installer.exe 3392 browser_assistant.exe 3392 browser_assistant.exe 4792 opera.exe 3328 opera.exe 3328 opera.exe 4792 opera.exe 5264 opera.exe 5264 opera.exe 2208 browser_assistant.exe 2208 browser_assistant.exe 2732 opera.exe 2732 opera.exe 1468 opera.exe 1468 opera.exe 3860 opera.exe 3860 opera.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera GX Browser Assistant = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\assistant\\browser_assistant.exe" assistant_installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Windows\CurrentVersion\Run\Opera GX Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" --autostart" opera.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops desktop.ini file(s) 1 IoCs
description ioc Process File opened for modification C:\Users\Admin\Videos\Captures\desktop.ini svchost.exe - Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\E: installer.exe -
pid Process 3376 GameBarPresenceWriter.exe 3856 GameBarPresenceWriter.exe 8124 GameBarPresenceWriter.exe -
resource yara_rule behavioral2/files/0x000d00000001c4a3-5.dat upx behavioral2/memory/4728-11-0x0000000000D40000-0x0000000001341000-memory.dmp upx behavioral2/memory/4728-577-0x0000000000D40000-0x0000000001341000-memory.dmp upx behavioral2/files/0x000b00000001c6cb-593.dat upx behavioral2/memory/4688-599-0x0000000000B30000-0x0000000001127000-memory.dmp upx behavioral2/memory/4728-656-0x0000000000D40000-0x0000000001341000-memory.dmp upx behavioral2/memory/4688-661-0x0000000000B30000-0x0000000001127000-memory.dmp upx behavioral2/memory/4728-1293-0x0000000000D40000-0x0000000001341000-memory.dmp upx behavioral2/memory/4728-1310-0x0000000000D40000-0x0000000001341000-memory.dmp upx behavioral2/memory/4728-1336-0x0000000000D40000-0x0000000001341000-memory.dmp upx behavioral2/memory/4688-1346-0x0000000000B30000-0x0000000001127000-memory.dmp upx behavioral2/memory/4688-1799-0x0000000000B30000-0x0000000001127000-memory.dmp upx behavioral2/memory/4688-2411-0x0000000000B30000-0x0000000001127000-memory.dmp upx behavioral2/memory/4688-3790-0x0000000000B30000-0x0000000001127000-memory.dmp upx - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 15 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TLauncher.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language irsetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language opera-installer-bro.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language irsetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TLauncher-Installer-1.9.5.1.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language BrowserInstaller.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe - System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 7160 java.exe - System Time Discovery 1 TTPs 2 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 5412 opera.exe 7160 java.exe - Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 svchost.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString svchost.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe - Enumerates system info in registry 2 TTPs 26 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS assistant_installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS browser_assistant.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName assistant_installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName browser_assistant.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" assistant_installer.exe - Modifies registry class 60 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\shell\open\ddeexec installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\133.0.5932.39\\notification_helper.exe" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\DefaultIcon installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.htm\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xht\OpenWithProgIDs installer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{CB1B7D4F-C0E9-4BF0-8921-1114197D3E59} svchost.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\FriendlyTypeName = "Opera GX Web Document" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.htm\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.html\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.shtml installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32 installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\ irsetup.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\URL Protocol installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic\ installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.opdownload installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xhtml installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications\opera.exe\shell\open installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\ irsetup.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe,0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\shell\open\ddeexec\Application installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.gxanimations\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications\opera.exe installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ irsetup.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.gxanimations installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.opdownload\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.shtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.gxanimations\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.htm installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.html installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.pdf\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" \"%1\"" installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\ irsetup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\ irsetup.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.pdf installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xht\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.xhtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications\opera.exe\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F} installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.html\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node\CLSID installer.exe Key created \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\shell\open\command installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\shell\open\ddeexec\ installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Opera GXStable\shell\open\ddeexec\Application\ installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\133.0.5932.39\\notification_helper.exe\"" installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ irsetup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\ irsetup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\ irsetup.exe Set value (int) \REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\.pdf\OpenWithProgIDs\Opera GXStable = "0" installer.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4688 irsetup.exe 4688 irsetup.exe - Suspicious use of SetWindowsHookEx 13 IoCs
pid Process 4728 irsetup.exe 4728 irsetup.exe 4728 irsetup.exe 4728 irsetup.exe 4688 irsetup.exe 4688 irsetup.exe 4728 irsetup.exe 4952 javaw.exe 4952 javaw.exe 468 OpenWith.exe 4952 javaw.exe 4952 javaw.exe 4260 OpenWith.exe - Suspicious use of WriteProcessMemory 36 IoCs
description pid Process procid_target PID 5012 wrote to memory of 4728 5012 TLauncher-Installer-1.9.5.1.exe 89 PID 4728 wrote to memory of 2960 4728 irsetup.exe 90 PID 2960 wrote to memory of 4688 2960 BrowserInstaller.exe 91 PID 4688 wrote to memory of 4840 4688 irsetup.exe 92 PID 4840 wrote to memory of 5828 4840 opera-installer-bro.exe 93 PID 5828 wrote to memory of 3248 5828 installer.exe 94 PID 5828 wrote to memory of 4448 5828 installer.exe 95 PID 5828 wrote to memory of 6076 5828 installer.exe 97 PID 6076 wrote to memory of 5924 6076 installer.exe 98 PID 4728 wrote to memory of 3300 4728 irsetup.exe 100 PID 3300 wrote to memory of 4952 3300 TLauncher.exe 101 PID 5828 wrote to memory of 3296 5828 installer.exe 102 PID 5828 wrote to memory of 3408 5828 installer.exe 103 PID 3408 wrote to memory of 4788 3408 assistant_installer.exe 104 PID 4952 wrote to memory of 5832 4952 javaw.exe 110 PID 6076 wrote to memory of 5732 6076 installer.exe 111 PID 5732 wrote to memory of 2976 5732 installer.exe 112 PID 5732 wrote to memory of 4956 5732 installer.exe 113 PID 4956 wrote to memory of 4484 4956 assistant_installer.exe 114 PID 4956 wrote to memory of 4740 4956 assistant_installer.exe 116 PID 4740 wrote to memory of 4408 4740 assistant_installer.exe 117 PID 4740 wrote to memory of 3392 4740 assistant_installer.exe 118 PID 3392 wrote to memory of 4792 3392 browser_assistant.exe 119 PID 5732 wrote to memory of 3328 5732 installer.exe 120 PID 3328 wrote to memory of 1328 3328 opera.exe 123 PID 4792 wrote to memory of 4360 4792 opera.exe 122 PID 3392 wrote to memory of 5264 3392 browser_assistant.exe 124 PID 5264 wrote to memory of 2868 5264 opera.exe 125 PID 3392 wrote to memory of 2208 3392 browser_assistant.exe 126 PID 2208 wrote to memory of 2732 2208 browser_assistant.exe 127 PID 2732 wrote to memory of 1816 2732 opera.exe 128 PID 2208 wrote to memory of 1468 2208 browser_assistant.exe 129 PID 1468 wrote to memory of 4856 1468 opera.exe 130 PID 2208 wrote to memory of 3860 2208 browser_assistant.exe 131 PID 3860 wrote to memory of 5592 3860 opera.exe 132 PID 3328 wrote to memory of 6064 3328 opera.exe 134 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe"C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5012 -
C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe" __IRAOFF:3969818 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\TLauncher-Installer-1.9.5.1.exe" "__IRCT:3" "__IRTSS:26673860" "__IRSID:S-1-5-21-552508041-2681165170-3229858294-1000"2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4728 -
C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe"C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2960 -
C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe"C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe" /NOINIT /S:C:\Users\Admin\AppData\Local\Temp\setuparguments.ini __IRAOFF:3839250 "__IRAFN:C:\Users\Admin\AppData\Local\Temp\BrowserInstaller.exe" "__IRCT:3" "__IRTSS:3869932" "__IRSID:S-1-5-21-552508041-2681165170-3229858294-1000"4⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4688 -
C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe"C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe" --silent --allusers=05⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4840 -
C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe --silent --allusers=0 --server-tracking-blob=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6⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5828 -
C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x2a8,0x2ac,0x2b0,0x284,0x2b4,0x7ff761afcd88,0x7ff761afcd94,0x7ff761afcda07⤵
- Executes dropped EXE
PID:3248
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\installer.exe" --version7⤵
- Executes dropped EXE
PID:4448
-
-
C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=5828 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_20260720121630" --session-guid=9545f18b-cca2-4b97-84bc-fdb4336bb92b --server-tracking-blob="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 " --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=C0080000000000007⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:6076 -
C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.56 --initial-client-data=0x2a0,0x2a4,0x2b4,0x27c,0x2b8,0x7ff761afcd88,0x7ff761afcd94,0x7ff761afcda08⤵
- Executes dropped EXE
PID:5924
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe" --backend --initial-pid=5828 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301" --session-guid=9545f18b-cca2-4b97-84bc-fdb4336bb92b --server-tracking-blob="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 " --silent --desktopshortcut=1 --install-subfolder=133.0.5932.398⤵
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:5732 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x2a0,0x2a4,0x2a8,0x278,0x2ac,0x7ff7756bcd88,0x7ff7756bcd94,0x7ff7756bcda09⤵
- Executes dropped EXE
PID:2976
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=09⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4956 -
C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x374b80,0x374b8c,0x374b9810⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4484
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=010⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4740 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x3b4b80,0x3b4b8c,0x3b4b9811⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4408
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"11⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3392 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream12⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:4792 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x100,0x180,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c013⤵
- Executes dropped EXE
PID:4360
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream12⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:5264 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c013⤵
- Executes dropped EXE
PID:2868
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2a0,0x268,0x9b8378,0x9b8384,0x9b839012⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2208 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream13⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:2732 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x18c,0x190,0x194,0x188,0x198,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c014⤵
- Executes dropped EXE
PID:1816
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream13⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:1468 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x178,0x17c,0x180,0x174,0x184,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c014⤵
- Executes dropped EXE
PID:4856
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream13⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3860 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c014⤵
- Executes dropped EXE
PID:5592
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized9⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3328 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x174,0x178,0x17c,0x170,0x180,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c010⤵
- Executes dropped EXE
PID:1328
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1680,i,11421243158721217941,9179980419602890167,262144 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1996 /prefetch:210⤵PID:6064
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=1864,i,2429456127008764104,6916464543063263835,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2100 /prefetch:1110⤵
- System Time Discovery
PID:5412
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=2356,i,2159110727738137145,13061383368321807579,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2944 /prefetch:1310⤵PID:4220
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3228,i,6777415828758089639,8096578912539714838,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3304 /prefetch:1410⤵PID:5804
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3240,i,6707305565768514504,13495823401410520360,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3324 /prefetch:1410⤵PID:3196
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3200,i,16803297801629285613,17281066604504684047,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3196 /prefetch:1410⤵PID:3152
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3216,i,12970363727247410520,6358687787856512091,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3284 /prefetch:1410⤵PID:5940
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3252,i,1920708019737383122,2197072882439317904,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3296 /prefetch:1410⤵PID:3356
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3264,i,6450693431624880085,15399200655455379641,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3364 /prefetch:1410⤵PID:3000
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3784,i,11946396772994447781,11785525107770548556,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4156 /prefetch:110⤵PID:5452
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB14710⤵PID:2560
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4676,i,6934613292856086486,1525267666113397272,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4680 /prefetch:110⤵PID:2440
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4820,i,13663099364048944320,10220393581417927814,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4864 /prefetch:910⤵PID:4596
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4900,i,15760572563495356968,11331898669237465337,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5008 /prefetch:110⤵PID:5532
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5028,i,11046507957982065670,8015022661153599894,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5044 /prefetch:110⤵PID:5048
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5184,i,6311679594519805288,1543462148603924141,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5012 /prefetch:1410⤵PID:1812
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5188,i,255026220090991408,2446464926341534633,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5252 /prefetch:1410⤵PID:1500
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5192,i,9261365517638169717,1791956804986456150,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5048 /prefetch:1410⤵PID:1420
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=5196,i,9109300382025959033,7266460876594583805,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5304 /prefetch:1410⤵PID:1720
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5976,i,13990822337560826895,11113124049300977015,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5400 /prefetch:910⤵PID:6456
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=1744,i,3707146112840401045,12044469830763918167,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=3772 /prefetch:910⤵PID:6708
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=7008,i,12108026700483079971,8064288186176923903,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7056 /prefetch:910⤵PID:6792
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6676,i,4976230741646492505,4708773897042616213,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6708 /prefetch:110⤵PID:2376
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6652,i,372992761579553501,7619533810130027576,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=5968 /prefetch:1210⤵PID:6384
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B5410⤵PID:8156
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x29c,0x2a0,0x2a4,0x234,0x2a8,0x7ff754e49860,0x7ff754e4986c,0x7ff754e4987811⤵PID:6224
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7948,i,11310305392459303429,5196904728000380341,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7976 /prefetch:110⤵PID:8188
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8136,i,5381023736890072235,3269420254697279552,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=6936 /prefetch:1410⤵PID:6516
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3196,i,15732382098674753405,6368881330007752360,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=5472 /prefetch:1410⤵PID:6608
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3220,i,6852492848073044012,15784035708753979837,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=3728 /prefetch:1410⤵PID:6812
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6948,i,719981030904136551,242146879791185337,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=3680 /prefetch:1410⤵PID:7376
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3412,i,735251674232045862,18204129424312245611,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=3388 /prefetch:1410⤵PID:8108
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3416,i,13108432903088793713,9903184317000364544,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=3432 /prefetch:1410⤵PID:8120
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=3488,i,14783848987557954769,9931328381570538596,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=3480 /prefetch:1410⤵PID:6364
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=8304,i,8062804358320403420,6022944512566318968,2097152 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8352 /prefetch:910⤵PID:6572
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8472,i,11171997894607447230,5990860698578126784,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8480 /prefetch:1410⤵PID:6960
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8508,i,9055088373799597174,15160834213806780663,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8524 /prefetch:1410⤵PID:6864
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8480,i,14848515758091118739,13784852455095786361,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8780 /prefetch:1410⤵PID:6688
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8516,i,14681421580049346315,11568950169808319073,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=8940 /prefetch:1410⤵PID:252
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8788,i,17924554729941655913,5348193822117567479,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=8964 /prefetch:1410⤵PID:736
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8928,i,7011578162982053521,6121033614850560736,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=8984 /prefetch:1410⤵PID:4772
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=8968,i,5712360300471999671,10516968665090649061,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9360 /prefetch:1410⤵PID:6420
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9512,i,14706984189188454009,8552387532819786591,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9536 /prefetch:1410⤵PID:7560
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9668,i,8481489840625210881,14742451887554182257,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9684 /prefetch:1410⤵PID:7260
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=4184,i,4431425895047435419,811372819053889011,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=3952 /prefetch:1410⤵PID:7800
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=9984,i,13505256370970115923,17978808870116370930,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=5456 /prefetch:1410⤵PID:1276
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest25-test:DNA-99214_GXCTest25,GXCTest50-ref:DNA-99214_GXCTest50 --metrics-shmem-handle=6952,i,15685768790551687463,12495157895452108707,524288 --field-trial-handle=2000,i,11455166123038390655,7682410730501995769,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2004,i,16312467933495509545,6316443219086912748,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=5380 /prefetch:1410⤵PID:8148
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --edition=std-2 --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera GX" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=133.0.5932.39 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --firstrunver=133.0.5932.39 --firstrunts=1784546250 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV910⤵PID:7884
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x234,0x29c,0x2a0,0x280,0x2a4,0x7ff754e49860,0x7ff754e4986c,0x7ff754e4987811⤵PID:8160
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"7⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3296
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe" --version7⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3408 -
C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x268,0x26c,0x270,0x244,0x274,0x374b80,0x374b8c,0x374b988⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4788
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3300 -
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe"4⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4952 -
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Dfile.encoding=windows-1252 -jar C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe5⤵PID:5832
-
C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exeC:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\bin\java.exe -Dsun.java2d.uiScale.enabled=false -Xmx1536m -Dfile.encoding=UTF8 -Djava.net.preferIPv4Stack=true --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.time=ALL-UNNAMED --add-opens=java.desktop/java.awt=ALL-UNNAMED --add-opens=java.desktop/sun.awt.image=ALL-UNNAMED --add-opens=java.desktop/sun.java2d=ALL-UNNAMED --add-opens=java.desktop/java.awt.color=ALL-UNNAMED --add-opens=java.desktop/java.awt.image=ALL-UNNAMED --add-opens=java.desktop/com.apple.eawt=ALL-UNNAMED --add-opens=java.base/java.util.regex=ALL-UNNAMED --add-opens=java.desktop/javax.swing=ALL-UNNAMED --add-opens=java.desktop/java.beans=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.network=ALL-UNNAMED --add-opens=javafx.web/javafx.scene.web=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit=ALL-UNNAMED --add-opens=javafx.web/com.sun.webkit.event=ALL-UNNAMED -cp C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\annotations-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aopalliance-1.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\arns-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-query-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\aws-xml-protocol-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checker-qual-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\checksums-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-compress-1.23.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-lang3-3.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-logging-api-1.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\commons-vfs2-2.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\crt-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\desktop-common-util-1.268.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\DiscordIPC-0.5.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\dnsjava-2.1.8.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\endpoints-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\error_prone_annotations-2.18.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\eventstream-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\filters-2.0.235.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\gson-2.13.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guava-31.0.1-jre.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\guice-assistedinject-7.0.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-aws-eventstream-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-auth-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-client-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\http-download-1.268.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpclient5-fluent-5.6.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\httpcore5-h2-5.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\identity-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\j2objc-annotations-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jackson-annotations-2.13.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jakarta.inject-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\java-image-scaling-0.8.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-base-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-controls-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-graphics-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-media-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-swing-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11-win.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javafx-web-21.0.11.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\javax.annotation-api-1.3.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-api-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-core-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jaxb-impl-2.3.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jcl-over-slf4j-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-20230227.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\json-utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\jsr305-3.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junixsocket-native-common-2.6.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\junrar-0.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\log4j-1.2.17.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-classic-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\logback-core-1.2.10.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\lombok-1.18.30.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-api-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svn-commons-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\maven-scm-provider-svnexe-1.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\metrics-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\MinecraftServerPing-1.0.2.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\mockserver-netty-no-dependencies-5.14.0.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\modpack-dto-2.282.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\picture-bundle-3.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\plexus-utils-1.5.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\profiles-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\protocol-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\reactive-streams-1.0.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regexp-1.3.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\regions-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\retries-spi-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\s3-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\sdk-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\skin-api-1.7.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\slf4j-api-1.7.25.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\statistics-dto-1.73.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\third-party-jackson-core-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\tlauncher-resource-1.6.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\utils-lite-2.40.4.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\dependencies\xz-1.9.jar;C:\Users\Admin\AppData\Roaming\.tlauncher\starter\original-TLauncher-2.9371.jar; org.tlauncher.tlauncher.rmo.TLauncher -starterConfig=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\starter.json -requireUpdate=false -currentAppVersion=2.9371 -starterDomainAvailabilityV1=C:\Users\Admin\AppData\Roaming\.tlauncher\starter\domainAvailability.json -country=${country} "-starterJVM=C:\Program Files\Java\jre-1.8\bin\javaw.exe" -starterWorkingDirectory=C:\Users\Admin\AppData\Local\Temp -starterJarFile=C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe -starterFileEncoding=windows-1252 -runVersionWithServer=empty6⤵
- System Network Configuration Discovery: Internet Connection Discovery
- System Time Discovery
PID:7160
-
-
-
-
-
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
PID:3376
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:468
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService1⤵
- Drops desktop.ini file(s)
- Checks processor information in registry
- Modifies registry class
PID:1404
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
PID:3856
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:4260
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5932
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:4560
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart1⤵PID:5604
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x178,0x17c,0x180,0x174,0x184,0x7ffe484a05a0,0x7ffe484a05b0,0x7ffe484a05c02⤵PID:1588
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F1⤵PID:8164
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.39 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff754e49860,0x7ff754e4986c,0x7ff754e498782⤵PID:4808
-
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
PID:8124
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k GraphicsPerfSvcGroup -s GraphicsPerfSvc1⤵PID:7112
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:7784
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService1⤵PID:8100
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Discovery
Network Service Discovery
1Peripheral Device Discovery
1Query Registry
5System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Oracle\Java\.oracle_jre_usage\3903daac9bc4a3b7.timestamp
- Size 46B
- SHA256 70b8737051c4a512902c03790601d6d3c4aed5acf8d9eb1f9e3fd6f446150c62
- MD5 fd8a2bb5e22a9c6d65bb45de7c30be85
- SHA1 a53225af6693699a4c79c99e69534466a1f3a6a7
- SHA512 d7d5c0c609020c22aac9a5a171bc776f99a72915357a1a7cd2350b67a658da53140f99be7d247b498b26f8995dce65a1cf64d7f15295e80d4f4a2de6860792a3
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 471B
- SHA256 72c5c49118bdd44b9bd33f21a899efba0abaae74fc122115f402e85a4c99caf1
- MD5 fc9835b124013b0883f59e99a88875e9
- SHA1 9b7bc95771e1710a21a039792923c853c4de7a03
- SHA512 7eca97ec4cf81c5bd077d38d479b5b64d120d5212a3c4d04138251d98246a91bcbe82ffde039ab83bf505e9b399e258c7aec5e5b3ecc6229a50a7d4043ba356c
- TLSH T1D2F0DC82D1F9982053020CEC3AE88E663838A0FA30A24194B89C4CF495A42BEBF52135
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 416B
- SHA256 6ffcee80827fd05c8b3a2d0afbe0aa863bab42502a85070b7e851a0e0dd4d739
- MD5 58fa4d6328da3715c9d19a7ce618b990
- SHA1 6364cd9cecd05411192d70bb63cfcfd1921e7d32
- SHA512 72600584e6a0927c524d7ee021aaa93962fc0fe08fd258a286e0bc8e241e303ded0214d1db2eb91581566603dc28f5a0e9eef03555b6f6b2fd25cc645dc7028f
- TLSH T18EE0683819F7812DE5F8E0744BD8A9358A4AF02A041992F41AE11700761AA00AE12A34
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Opera Software\Opera GX Stable\Default\System Cache\Cache_Data\data_1
- Size 264KB
- SHA256 9295affce812afbe1f37f822d460fa7bd6c52e8afd2db1452d59c31d7fc7a11a
- MD5 3ed060013b194f0812cd15ef8cda2a61
- SHA1 b317190bc24d394e8e0eac47a4440cf68554ed53
- SHA512 bbf6a9d97888cc2f2785c9b14761badf2ca2acb6dbb2c613c850119ccb84592314c5ccef70648958e141e9582ceda636f971c81807dc4f6ae3b80dbd24c8bb28
- SSDEEP 24:qysuslBPfgoXu+O9Pv93SuMlwi5iByh866O:zsxlBPooFGPvgRlwi5iMf6O
- TLSH T1A444D6A780504455DA7143F565A53F7CE2BB5A182CD9FF84F770AA84D808F6070A9945
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\133.0.5932.39.manifest
- Size 225B
- SHA256 0f5ab8c7090e4b3da7db456cbb8993121060d5e172f58c757f9771cbef70b87b
- MD5 1a101dcf104f8a3196a24770b417e913
- SHA1 21f255fa25d4f7c91756c8c1a787e3bee307d3b2
- SHA512 e2d9bd692236728ca53eac37af81c614f559e1c637b360b226b38aded1f3cba285da85e56fa52acd44f05ede571ad3bbecf1543f5b29bde15b7c5718f88ee11a
- TLSH T1B6D0A9018485A2996F2141703CAA300A42ACC7A70488608C78FC7867AFB3928A1868F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-100.png
- Size 2KB
- SHA256 9635c074c9d8edde0baf3111dbd7db49cbdc370c4f729c80ac382949f32be526
- MD5 b5a21b88b3d8a42df265817ebeb742bb
- SHA1 e0be32b4fc158db4e9783094cce614922114b742
- SHA512 21ece0dcf17b038400d09565438fce8be61746daa0250f2fa9d0526bba3d1ce6f8da5cce944ef8fa685c5eb6cf857b073d2a50ada44a44a76d84813871faa5d0
- TLSH T133415CCC56657CC8CCE065760A67A72C5FD3AFAF0A335B7A6010089ED99F1453803ACC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 28ce8fcb22080ce1f69346cb0720bbe5662959e413426f00062b706013da8c28
- MD5 0bae0648c3e320c4d439f158b4fd5531
- SHA1 4e860ae24f03522c89bdf37f3ccc10b54832861e
- SHA512 6a5e4105ccbe1664546798db057b93622c9cbd6d5af4967e6be4e390a18fec0ffcc807e3331f09ed0de63ed85569be7ec5eed5a7c663df6ce4a5b70e09500371
- TLSH T11A31293504B0A195E74A36CEADE49C2B449C6AEE183E0139D60E246FC430A5DC8E530D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-140.png
- Size 3KB
- SHA256 a36a13a5d5e3d39e3018ccc5f8859944c87256f8be24a3c08a6bf3cb06a26804
- MD5 7e529063a02e4e83736b0263cb1b82e0
- SHA1 17a3c4b76962e90b1d2fa8a49441157949f4dc78
- SHA512 571806725f83feca90360b246d167a8857edfd9edc8dc0ef7eeef80f291fd06088c405a5653513cb8aa309df08cd609df85a95e3379e3e5907566c876ca77cde
- TLSH T1A2515C3226B5A3D7E796C374A780921B3899896022A20D0092D9BB27F05C253F6BE361
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-140_contrast-white.png
- Size 2KB
- SHA256 0bd63fe653885286e180fbdf6d1dadc66af242b8ed6bd1d03d8c5eccc20e91d7
- MD5 ebe7d27ed3b4cb6566a10165abfaa941
- SHA1 fdf7c27058cf5daf7061756e938a33c1bbb26c3d
- SHA512 50ec8592d78f00a6387f06e077e0def88db26723c0fb8632c4ea06f2e09488db0fb82e0eb1f03da53f9c750f6cebd29f7889b1de342e4f0ae69f88c4b7b1425b
- TLSH T1B05106F6989A64D8BEA38C5BF7F583D001643DEACA6906D43BC45820EABA58A441038C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-180.png
- Size 3KB
- SHA256 6a8f64754c75edcc9abc1138e44acbd7064d7e8e2a28783939241dbd6afa30a5
- MD5 f332e088e89b88070ef1efbeca5b90f8
- SHA1 86129a8b1e2e7f78d6ce23c58a37fac9da5e566d
- SHA512 2314aae692c024f914661e46cfd76531da6c09b94c084fe915a0594625927df30282d09518a950eafcfdd2e499b1e4877cf3cdbf5509de0cc756dadcde43fd45
- TLSH T17D815E49F7942B0AF64AD07A0703F172487B4060179A730EDDE72988795F4CBA36B787
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-180_contrast-white.png
- Size 3KB
- SHA256 a706b332e6a846357a86c30d0e8bb7697e7dd55c2ae592dd45611ddce0c0bf14
- MD5 98b9f7a4f4322e7b46de392fd20f66e5
- SHA1 d009d227522206c40cf592e460c9642cd03b8769
- SHA512 3b3e5baf3cfc57119e0812de2816df6c7dcb42e96c4891e47c4f32320fd3be2f27a0118051a6651595baaaa30069bb1c0d78aa701744a44534cabe7547d4becd
- TLSH T101716D453798377AD6D7C2191DCD00D3C89C23DD355E6A3CBE47D0B065B21576E7441A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-80.png
- Size 1KB
- SHA256 7e6b0d9ea7fda1b5ca7a0b01290521dff943da4cbf1498412ca7d749db42c32d
- MD5 1f2fb1bf463b2ff2bec96784debfef84
- SHA1 ae6f721ad937fe39f86602f71002435b18bf1edd
- SHA512 0c92c4f75e620d0b636cfd83e89c69a44f6a96a00006fbd0b13637ba5dcc77c9b302029e62f4b80766811f31810f9c20ac1a98b65c38789951ca0e19a5bb6894
- TLSH T15D31D896AC81A05BD3777972212589F78EF32C0605511E78F0F16130A9678637AF2620
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\150x150Logo.scale-80_contrast-white.png
- Size 1KB
- SHA256 dfd1054f989cdee25f19ea792f363f042a125cab537a424f0224bbee13607e39
- MD5 17471bb63ed62a6e545b6b626a763511
- SHA1 586b9efde7b3a04580a49f8fe7739593d42d303e
- SHA512 f619d963b62edb07c8077c3c6ae60ed8d3f3dd5bb1d05a2b83dca1a7a4a346598b055f6c7ea22e05bf281b1de0f205f5d1054819000759d9450ee1fe8f6491ae
- TLSH T17121B6CB7941E7567E21CCB920692044DAB57A480E7CC2EA7521A8B6871335CB7B4DB8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-100.png
- Size 1KB
- SHA256 a333d7e4293f5269426b3fcb673a284f3708a66f957de62403b6570b24bae8f5
- MD5 c3722e0232ec20ac8f99cce7a040b294
- SHA1 91ca47da87ec045ed3ef5d97243167f08fb9e10b
- SHA512 71940b8431e36307ba5176939a169b9259bb6b43c32529a10a12c5ea31447bddccad7eb9ef7cb309b175ee7bd56e70926bd5aa0855d0fd9497547ecd7ff93158
- TLSH T14F310A5E007CA6A894029FBFDA441F98F3C25C883C58DB48850C9A9DD66B8F6F0C4E5A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-100_contrast-white.png
- Size 1KB
- SHA256 ebbe0b4761ea8968a0a3fafb383ac7ae175e98cd31a0f41bdf5fcb43469b58ec
- MD5 504d80d276adcc0163a8e4720013f9e7
- SHA1 6d34a0593ffce916cd19b66d61004fd7e7eb2cd1
- SHA512 9961259704ff97c0e1899a33259f62155b73264e272064f3fa90e64124513c7c8bd6ab69a39c1efb271ecc2972ab8fd86fb836f22153a9bb35419c3816d11337
- TLSH T19721083B1E4BE6093DF97C61EC0D52F6A836723E4C527A4519176D26A224A6060633C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-140.png
- Size 1KB
- SHA256 207519f1c7b6c7509bfeb7b55724997eec6456c8baf55e882e72fc5cd43da221
- MD5 667bfbaaeb2d2b372b6e0d4bf4992ce4
- SHA1 4c6c2e07183963f59391945fbee077b55f8f6b2a
- SHA512 ac63a3dd2f6088e7849e3824c35fd58ca78ec77dc31e1f6cbd47de7cc394318cba7d2309912206a94180267be057c2af5c835424019e2a03ee33a2ab801ba9a4
- TLSH T132410C6EC9F04A5BE0CF56A79A523DB6B0F783D514047D355041502353B0E830EB717B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-140_contrast-white.png
- Size 1KB
- SHA256 464afaf960c32abdc2c3937a48bf14c5d1a819b017e719fded591d43a65d94c4
- MD5 93223e8777b581e988b703df82593b17
- SHA1 40a035464c27041ccc87c7935c45100d93d1c948
- SHA512 b8a3ee4a71e609625eab51f0f6dafcc82cc47ba2c567cc8bf73cf6423056f9171276289bfdcc8428b7c07645097664065ee9b0b78874425bff800178222fed12
- TLSH T1CF31B8E33C06263ED722BB2F74208CD5C53B7A61619CFBEE259A5462946B3C9044EA10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-180.png
- Size 2KB
- SHA256 d6367dbc074e37f3488c26b0bad229bfe99f5c6bb0e28d37b41906c436152b57
- MD5 704d0a2693b350e7c463b0ff2143835b
- SHA1 0313ad4c3690a590ac54552d2c27806e73776600
- SHA512 4517b2fa911149885ec5549f3173d3c774716740826873e4b2199c804b17e776a5296565930e5acdb8d5476710a391b21e6da8941df64c525a487db4619a1ea7
- TLSH T1C3515CE98D504D4ACE42F079880A4FBA6026C61246268A1FF7ED51F363E67A3481F685
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-180_contrast-white.png
- Size 2KB
- SHA256 5d46e4056f3915c279f1fa9edf61d93529fbcae5c59d616380ec5d9405b7763d
- MD5 39e2fcf13c20103c5f449c06d3a4cf75
- SHA1 ae8e1bce2be17ed450d891864e6aa22642af39ac
- SHA512 8e4902262b064008804d49d1b5f27bb7b8f33ecefb05181aa69534e1d21662719dd4f8e0677c58215f6c5ca9eb4fb92fca54a89f9720230afbf06a70216abf26
- TLSH T12D416E5701B03CBC6DD9913B53750697D4F3D68FF2544C0B6688345DE4F00D009256EB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-80.png
- Size 1KB
- SHA256 dc20e5aa2b500cd5b5c9f89647d3487810685c94268f22678e27820e2454bb3e
- MD5 32d3e390613cddbd639e70ddb2511ac0
- SHA1 c96ac088e72d756f31896b16776ef100379f802c
- SHA512 7381ceb8fee84f398082177f30dc01593beefa729c73b0166af686bcd25d54312b202d9243834b754769de41e9a1deed74ca91a76dcda918a749cdb4f08c124b
- TLSH T14311F94011E157001133EC75C8192D61F10BA2934745E4A431FACCEA7085B8AB0DF5CB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\Assets\70x70Logo.scale-80_contrast-white.png
- Size 901B
- SHA256 dd6f46d32c3e235508f9e4c7d7f993bd807d955bca7e63cf3d57c6c4c102f46d
- MD5 e6add5afc73f7b06fc2348550595f8d6
- SHA1 4d658bddb93fa6cb423ebc61bd20db37e4d37db6
- SHA512 55437dfea7f68a4572dfc86b5428cbe9db86c0d32d0b09ba6b7b1cf8e49e5f1bb94285bbdc97d8ee00d70ba75921db59644787c1be1672fe37cee09441f249b6
- TLSH T1D811B76D6AA4C735BBF50D30A075410F4675218F351104333D6EB66133A09CA54DD04C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\assistant_package
- Size 3.6MB
- SHA256 5a68392ec016acfc72ec4e168ec0f07f2b997a7556ab648d2ed6f7c99d4203ea
- MD5 6fb60946d2c40cbe7252429bf50399cc
- SHA1 363aac4a8723153509967a62b33da0e724f745f0
- SHA512 a6f5d5c830649e3df3eef6211764417a1ee14d5a62b90fb86684d3f347d6101bc9a80d08aa8f1fbcc01c89a8906d383dd104c1d8e0a5c9c5fb7849f54891c737
- SSDEEP 98304:WkiolXufYP+Ro2RQiatGXrrhv8BxvJ/wP0njLPZjoPc:WmXu3WtGRvkwcjLxoU
- TLSH T179063321B7A5C870D57312334DA0FAFD257EF3A026764F9B23441A2DEF601A6E714A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.39\installer.exe
- Size 9.1MB
- SHA256 75d337be6e3e09f8186fea427928e6cdced8249f1cda03cd823c2de715f446b2
- MD5 e249414705767bbe6e7bce909b7499dd
- SHA1 e17ef94ea8fda60cc4d1eb1affab46e994a80273
- SHA512 37930d4059ca79f1ba7d9d314aade9cb2cf3209bab964a20303e949139076ee6334802c747066e596c00bc0e7405e52a12073f11abf9d7fa03b47f9635bd9f4b
- SSDEEP 98304:pU+SWsBgkWKjqf3bZKhlGWuKUjzQweIgE0qsjKFBI3++wteEmk:2WsBgUO3b4k6Vqep3+Bqk
- TLSH T17FA68D53F3EA01E8D0AFCA748B7A5232A9757C464B34A2DF0A9436250E75FD45B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\Opera GX Browser.lnk
- Size 1KB
- SHA256 a401d588d78e583233212f56512c4f73d1b39ac142c42bf3c1d72d0f6a6121dc
- MD5 1302864385343b2d754f07708f2a547c
- SHA1 2c9b32de6f99f30ff26a9ca6e35dce84817aaa8a
- SHA512 1679f16dd43990f75bdce0d8531eaaba28803b955d1a88a6522ad199e60ccf2696f2277f0e39802c5e7a3c87dfa3470307377f70d647914085d32e137074e866
- TLSH T15521104A77DA6B51F2FBC63504BA2935D13AFC10EB1A5A4C022442851935306A858F5F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\additional_file0.tmp
- Size 2.8MB
- SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
- MD5 1bed04ab23ee645cad438456a6d465fa
- SHA1 68b7d9eb6ff0bd159281a2fd55a7a24860ba765c
- SHA512 9ca295d1c574e88eb8506ba3bb4096ff3860e605b7870fe11a2eff27c85a551894345b7524485fb4fd5ed5e9cfbefb917f735ed51085cfd3adbabd9a28909f23
- SSDEEP 49152:MkinoAcJ53ld/JCHyHuw+yIfBfnDWUKT5qDztnvkbPsGaW6EYFZoMzu3ug:MkioJJ57RCH2uryIfi0mz+W6Eory3ug
- TLSH T1E0D533317D918476D22392330DD5FBEC66BFF5B22F229A9B3388072EAF201A24715557
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\assistant_installer.exe
- Size 2.5MB
- SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
- MD5 31f5e82954b11ee1cbaf09294f7d5d6d
- SHA1 580d39bfee5fad23b31ea4869561b4f9d15f322e
- SHA512 e3ec7a6c238faaa1561b12b67217edac16e5c63ff68483daf4e7d7bf6b1bdcc16e2dda5b11a7b69434dcfd864cab6e427854d8d70a2cd7cbf744ca8b15a6fe9f
- SSDEEP 49152:6P/Ojp1psS7+BMvcOZ+XMxNBfAlVH5p6h7yMo:6nOjp1psS7+BMvpiMnBfAPH5p6hGp
- TLSH T1CBC59D02B89194B5DC963032361CF77E9A345E114B364DC79B90BCD16FB9AE2223739B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\dbgcore.DLL
- Size 196KB
- SHA256 a2777992696c953c001dabade3f236f731987b58061efd8c894815f9939f979c
- MD5 874334b4e7891772e6543f666e6d2411
- SHA1 d9f0ca0263a50f254c6516aa9c8fbc671d978025
- SHA512 c5b205cd580c75df43e69215028874bd233cede85c1829e4bbc67a2160c786a59124ef49681351aee383c27ce764fb7e47fc22e8b454b0eed8f0bb4020edca1f
- SSDEEP 6144:pASh0NdOkBakZykbp/eyhr+SJors+k0L3nTd:8YIqFLnT
- TLSH T169148C6296840833DD9F11B8B29F333795FEEFB0139194C362549AE4E5647C06E3A2DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\assistant\dbghelp.dll
- Size 1.8MB
- SHA256 102419e70ed462dd1ef4a30d94b714c4317ea838d7acc85ae030dfca19f609ab
- MD5 7660d7d4afc11706c9b4f03aaef74a9e
- SHA1 38136ffc06c49fde4dc4210e9f9f580b5aeecd53
- SHA512 e8f2f71ec524dd7435515c012ccbbe2e29d0de866a64fcfe604c0a9888425f0b6a7f89baac8078a1715f6c7dc411a5da4d5c0b92c720195d9ef00eb57ef4fa1f
- SSDEEP 24576:gDOSE7VspFPxh+EqYbt6lyn2GyQWKACVOxHTdMgh9IVbMAQyvyXiuVKHeeKKwsf0:gqhRcFPxhHYCBRnyHO6W6NIyX/kQs2Rp
- TLSH T1E8856A20E784813CE4EA0177E67D7A79866DE134073440CBAAD45B69782D7C3AF386DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\installer_prefs_include.json
- Size 227B
- SHA256 97331f17409895395d817dd6dab7119ff107665a9f866a3c2926bfa9ada6b1b7
- MD5 85803bf6cb6a4fbf49fe35f71481215b
- SHA1 348229a8ae259b69231495dc5060d3a28c622608
- SHA512 5b68aef4caa0eee6dc13997f0f93c244a88425887516cb58143fb0c7150d7304cf1a73203bd8bd52e04428ab8dc9cea9f3ff48f30607ca0fde8dabf399520dfe
- TLSH T10DD0A749D127C0721BA18287BD7232CE62532E528CB67989EBD712709035DB321E6D4E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\installer_prefs_include.json
- Size 242B
- SHA256 40ea1fbf69784552a6aca6f03f95b7ec4c38332d39c88322835c70b661d643dd
- MD5 0e0bdb864d23a576c0a145f2410051f6
- SHA1 e96404d405d5644cbb06b8eeb7b65ab553c2ef05
- SHA512 2b99cc5024118915aeee2a0e74693b04ce94bb33a96c815affd13c198c8b452d9c2e3c8b2ef6488a5cb68951a8e7b2a94e7ab6ed27dbec0fb636c1f7fa9eb116
- TLSH T1AAD02B099127C0710BA082877832328D21432E018C617885E6C712209020CA210E6D4A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\94439c40-a1ef-4778-b941-8a0887af10b8 Opera GX Installer Temp\opera_package_202607201216301\installer_prefs_include.json
- Size 967B
- SHA256 07747e3bf413909ecb4b6a3ed25adcb9ac6819dd035c8084f1ff538123d71cdc
- MD5 08c09f44de94117572f384502985b731
- SHA1 a72cbb64397236a8beb35c56fa47817fbe72edaa
- SHA512 49edc0710cda6b49378ee636b5dc35da438534d4826f46db2a8f98e3ab0348683a9f26b48ce8651f8c0bdaf230f097200ee93938878f682fe95c9e751baa0498
- TLSH T19B11943E915A60317F66829FEB37250A76035B414C2821C5E4D74134A0FBCA20BFAE1B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS8E26EC99\installer.exe
- Size 9.1MB
- SHA256 89317570d2f475fcd42f1ec82b895c2f27bf58afd357832c8c8b4ad0a5e48e0c
- MD5 ef7ba7f02d1317ae94c7f7c9fb0649ea
- SHA1 7ddaba5b79d9d467ebdc2acda23f1e9348f55e1c
- SHA512 288756e195a5ed9bc82a1f1315c0a51215f8c4f92e2555707af674ec9ba9debd3f1da59cd5e4ebae0e20f5372729ffa29896b66dffdca1a751ed362f514ceec3
- SSDEEP 98304:fU+SWsBgkVKjqfgbZKhlGWuKUjzQweIgE0q0jKFBI3++wteEmZ:EWsBgFOgb4k6Vq2p3+BqZ
- TLSH T14DA68D53F3EA01E8D0AFCA748B7A5232A9757C464B34A2DF0A9436250E75FD45B3CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\200.ico
- Size 116KB
- SHA256 9dd7020d04753294c8fb694ac49f406de9adad45d8cdd43fefd99fec3659e946
- MD5 e043a9cb014d641a56f50f9d9ac9a1b9
- SHA1 61dc6aed3d0d1f3b8afe3d161410848c565247ed
- SHA512 4ae5df94fd590703b7a92f19703d733559d600a3885c65f146db04e8bbf6ead9ab5a1748d99c892e6bde63dd4e1592d6f06e02e4baf5e854c8ce6ea0cce1984f
- SSDEEP 1536:5HmLYAoZllsaebGVeTZ8Sz3HjpAAAAADYmaAAGg:UfoZll0bGVmjWh
- TLSH T1C6C330260E6D3150D3992D79BEEAE3384E764D90EC6D21A314ED782AF9376EC13ED440
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\BrowserInstaller.exe
- Size 3.7MB
- SHA256 e20f18d8c5d3621a81d35fe43d759ddb148e35d1856a94fbe95dfbec93127a10
- MD5 05db02530acae561d2e4b368ccd45f52
- SHA1 050101d4689ee8012bcf7eff4cdbe15a3851ecc8
- SHA512 8a3e37e6d5e73fdac7f4b974dd350011b83b410b2b26b140bb53f1c497d3fea857c9ecf03e931dba53908eeada1859d4f3797f47d187d84e651b1fa42f548b37
- SSDEEP 98304:DLDSCHji8v64cym9lYQre8JVal0S8R4+h8GdspyRLndhyOu9w:DHfQbVTS8R4E8GduAT89w
- TLSH T15906F12A7A72C072C6323630969DA379E6BDB8705B35829317D01E3D2E715D2993C36F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.BMP
- Size 12KB
- SHA256 1d7a67b1c0d620506ac76da1984449dfb9c35ffa080dc51e439ed45eecaa7ee0
- MD5 3adf5e8387c828f62f12d2dd59349d63
- SHA1 bd065d74b7fa534e5bfb0fb8fb2ee1f188db9e3a
- SHA512 e4ceb68a0a7d211152d0009cc0ef9b11537cfa8911d6d773c465cea203122f1c83496e655c9654aabe2034161e132de8714f3751d2b448a6a87d5e0dd36625be
- SSDEEP 6:BlcgEMS0gjjjjjjjjjjjjjjjjjjjjjjjjjjj/naEMh:TcNwezg
- TLSH T192423A021F61C274F2CC0CA44D58244CEF10CA5B211B02C54C75073597C06D73EFB35A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG1.PNG
- Size 45KB
- SHA256 a42ab4d62c5a5286202df15f9ad32b22396d5d12c7a4db8c5a2c98f90160ade1
- MD5 b1c738ebb530ef3312b3d7209d2a8079
- SHA1 9884f02de44291f3217c03b02089824b7b25b55a
- SHA512 f79d826d716239deb6077717dd6880236eab7a4a6639bf5de678500e6d5488b5a70938988207b8554782878ff5472e23b577db288cf273007f8778ca08b8a9fa
- SSDEEP 768:FU5FNyQXHLMQk/CIEB1TGAPytWZixXgqZrPvgzfF7OBhTNj9YGhaBcROHI4QkU:+5FNyQXHQ3/xq5bytpWk7vg7FeTNuGhl
- TLSH T14523F21ABF030526AF1A1B70B91D71EA14452289FCB789888F670817B1CF9E2F64DB49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG10.PNG
- Size 206B
- SHA256 348e3f3544cca4c9ca2af323fa8b3453a70ea421c82b331681dc1d4ef74921f3
- MD5 5ad7b05326e53ab9d91b36331c3f84ea
- SHA1 bea6d94e541a2380b9506df97349aed1ebb1e04a
- SHA512 51dc9a6c323207e628f7494cf83451687d9a5977368d761489b48c25174edc0dcac3cea2705389001220aef8896c03c8dcb878e963545dc3cdf51f59c982847a
- TLSH T1E8D022C29B42BC3CC10FD039EAAB1250D8BA044E16638A4CA06161262310FC4C2EAE83
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG13.PNG
- Size 41KB
- SHA256 1708790d5496b9cc325cc0249cfa272aac3c3738188fc41eef83e8592de247ff
- MD5 d157aa0e365b8a0b4a72096792813fb8
- SHA1 8ce762ca86b54b91c38b22027a4a36417c3919fd
- SHA512 aedcf9706ddd901d4a5bb5096daefef5506007fc96351b44521bebbe70ecd1aa8caecf1cb76d9ff461c73b32a73f577f62330a19b764b0870c0b087828c449f5
- SSDEEP 768:pJGBX+j3ksnMoMVCv2YMgvXVwHAt8fTzwqYGtIoz8V0bWa2NrrCwyF:p85c3XnMbc2tgvmgtITzGzY2NrrCJ
- TLSH T1B613F1E881CF028DD7A552440AFC62863FD2DA58B2551F1EDD8A36F93DF34646C8392D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG14.PNG
- Size 43KB
- SHA256 6528bb11becf79c17c77a9c6624b82074b9dd6d3e932852c8fe1da22a57854aa
- MD5 c1380329e781c0a64b39b7441848c380
- SHA1 f038908d637389cd56c2bcd524c1f98090b194c1
- SHA512 51a9dcb8955cdb7b78d3ffbf8da8ecd866d46b325b0fe8c948a2ce81302ffb11ee933ee5de2850ec92950a5a5a1b7cfe0237a3817cf5ced7029ed9bfb2464f0f
- SSDEEP 768:fKdTjAjz+7WyOYqVxkwGW/wh8P97nd6alQO/IrLXjTVgqjqC:fKdfy+76zVxm8PzYeIrzVgqjV
- TLSH T1C413F210C4CD9A6703CF5E12E46538A5B8E158C0FA2DC4AC38E6DE24552E7EF5F107D8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG15.PNG
- Size 644B
- SHA256 207bd7ad2eb7f48a2a1be1253363fa120ae79e25eacbd37d6b9be52d2128bfdd
- MD5 803fe72088e9684779985bb4bc92c3c7
- SHA1 427d3cbcd903a8ca0090914de9df0bb25f148776
- SHA512 df33b0f72d3fa7da46ecb6f3d3b0df8cb3983d5c1ed04851e24bb3e6fc68eadbf01a1ffd5d3b98a5e9f13dfcdeb6a66e3624c66ab2ecccddd582de7569fff72b
- TLSH T164F068D615D15478C20781B480C502A3DCBA1A85DDD786445180B73317D1FCDD5C236D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG17.PNG
- Size 40KB
- SHA256 06fad383e3506eb1be52877bee839b833de157a2601af1c443ef1244a92f5d8f
- MD5 46cbccfdcee617bb76271de3c8293da3
- SHA1 ccd7bd2af1cae294803facb927b6d172e5fe8a29
- SHA512 e88c47376c6d8df4d8d351df14b7c88820dbfafae24ebfdc6d6ea07afab14c7ab8c1d0394e3fe3759eea7051f67ff3005651e4ae00a3c2f7c7a020fe48765423
- SSDEEP 768:PYY9Me/k8H5G7Ee6KkwtLIAKI3z9MmzYPjvdz5bnuPusRWFBFHyAoK5:FlM8ZSEe6Kk2TT36dz56PDS7H0K5
- TLSH T17A130111E6DC90A27A965C083488703B95A330C95DF57F2F9813F69440EDB0F69FBB68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG2.BMP
- Size 12KB
- SHA256 9c893fe1ab940ee4c2424aa9dd9972e7ad3198da670006263ecbbb5106d881e3
- MD5 f35117734829b05cfceaa7e39b2b61fb
- SHA1 342ae5f530dce669fedaca053bd15b47e755adc2
- SHA512 1805b376ab7aae87061e9b3f586e9fdef942bb32488b388856d8a96e15871238882928c75489994f9916a77e2c61c6f6629e37d1d872721d19a5d4de3e77f471
- SSDEEP 3:y9lMll2/l0uqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdqdC:BlcI
- TLSH T128420404113000D5D1450175007471C5751547D5D004034C30114C14451047703CC044
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.BMP
- Size 12KB
- SHA256 4c85cdddd497ad81fedb090bc0f8d69b54106c226063fdc1795ada7d8dc74e26
- MD5 f5d6a81635291e408332cc01c565068f
- SHA1 72fa5c8111e95cc7c5e97a09d1376f0619be111b
- SHA512 33333761706c069d2c1396e85333f759549b1dfc94674abb612fd4e5336b1c4877844270a8126e833d0617e6780dd8a4fee2d380c16de8cbf475b23f9d512b5a
- SSDEEP 3:y9lMll2/l0ZVTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTn:BlcSj
- TLSH T1DA42040F110103C5D1C700350C57C1C4F51F45357004035C1011CC344D10457034C044
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG3.PNG
- Size 475B
- SHA256 d339d7a5fcaff72292150f3c7db87a73caa396e23224b570e053c8bb96a3a897
- MD5 a32b83463a6f7cc50e6be2c85ba53ac2
- SHA1 e07c81d391d9acfa5a0ccabca0cffa4bc5c6aadb
- SHA512 c32d1cd6fb8d50cf373ca96df9a150494015997424de2454aabf0c090192538e5c6a1e20e1ad7d2f520b628c3bfe5b47ef79c02e18bf044101d7c25217580df0
- TLSH T1D0F0D4E9578D456CC14F4535631B5063FCA239C69A6F57454C286D1B8B59FE84031F81
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.BMP
- Size 451KB
- SHA256 64da5bd044908b2c3a725c5a55edec1644be498f41ea05d42a6ae8cd797f1d80
- MD5 c87f44be2c13b601e3c6c2d2fe07a60a
- SHA1 3518ba686c692c016dc46cc03846932f87295496
- SHA512 25fd25de9188dfc3286b2acdba323cf0e7334c650e7796ac9e7f19e8a40b565a606cafd5b00039c351ccdcf40642c73914c6174d37a206ac81ca1d0d4b64df3b
- SSDEEP 768:vdG5BfFYTNBwfaV6EzmQR/FQCSY+OpVbSPIFJJN:zTcySY+OpcIv
- TLSH T171A4AA965E139503E27B037BED616E21A1EBCED9E61A65A7C1C33D90E8F36EF0524043
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG4.PNG
- Size 368B
- SHA256 3207283d0abc0dd36c0991b40a738247394bbc92e5696eb790a5c888a9f28106
- MD5 c864e0b6888f3aa5365c1b60c71db536
- SHA1 f3b86b6dda72ba5e90e5a7f0afb4553f6b9c211e
- SHA512 dddd8d83f80ca045bd6fcf697e3df717a56de7cdc3bfcb44d92b889f5fa570bc0671b3fac05233e459e1fd9f9c998afcd37bc766cba544e9b0d98546f37ec21d
- TLSH T1ECE0C0CF5B54AC28D9CFB976071B0590E5725D970C67C69831A0A4B91FACE489487282
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRIMG9.PNG
- Size 438B
- SHA256 d16a8eaf8f979e45bacbbd8ef14afe482d74e926dff2e87e569342874ba34145
- MD5 d5515147e2fd43bfcb51088cba0a2d11
- SHA1 24319ae988efd59fdd883b14642bca432cffb049
- SHA512 a54fb5461ede951704a1fdfd3ba0118a3e525412f1e9c41cceae17730d28ea2a6d22f1926c4eff50fd4a5e6caa4972fa085af1cc22ef47973a15763f4280ceb7
- TLSH T1F3F023C62F547AA0C50F6632DE1D8546C12364C73CF9B359DC04DB313380FC6A0461E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\IRZip.lmd
- Size 400KB
- SHA256 3a6794c90d69383bd76098992cb512ae343cb2e1a3680dd4794e49895472b429
- MD5 1698da32813956674734c753b55baa08
- SHA1 cf4e3a707e59cd6c6bc5b7cca659d5dd2c080638
- SHA512 eeb6ad23291f9bd37f20555ae8d557bf0e448e77433c3dbb859813cb70e80f9cd4d30219083aac23f99ed780ee510f31d78aedb44a548582e690eeed58245841
- SSDEEP 12288:Gwji6+ZoE2oaXKOAilmVx+igEpONKiKjZTeGV+:ViJTbaXlAUnKiKjJeGV+
- TLSH T1D2948D01B6C0C0B2D1AD253124AAA3369A7E7D205735D7C3F79CFA7A5F311D1AA2934E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\Wow64.lmd
- Size 252KB
- SHA256 27b48727237cd0f8a1205e01e5c93cbe6c7a2f3938faf8d8daa5191094c347a5
- MD5 bfa121019a2dd9f7749f6bb72570319e
- SHA1 fc48a96ad45e00815060bb366fe8f31c140ecb19
- SHA512 cda75a55119104b23489b1048c810e066099b13e12aade7cfc757ba91de7b6754edff2da561741a16c92aa00d7e4ea0b53f77ebea6aaca059a74847a0f5d4059
- SSDEEP 3072:52E6GukcxWtnwkwNBp0AUTjQzKgvyVx9QlllMS25RpaLSDk/wY:52EcxW2kwNBp5UTsKgaQllaMLl
- TLSH T15F444B0176C4C032D27B21354877D375AA7ABD618BB48287BBDCAA7B5F705C28A37316
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\irsetup.exe
- Size 1.8MB
- SHA256 96070b2d82b6bffd54719f9753909be5f5151edbd5b37b26f50dea2e995ea430
- MD5 21618eb1ebe1b4033d833eb057c3d065
- SHA1 40e80d4f0d0254bebf73ceabf28d3c471f894aea
- SHA512 4765b54fe15bb127f4f80777004276212ffb5fe2bad1b887eed9fca5c50d2b336805de32913c41ba7f726445a21b591e6494363b52b5333e273f3254fc927c19
- SSDEEP 49152:wo5xdLZj7eHEWcSkMqQjeDlSvKjoSCpWmp8728hLFhC:woDdGgbQyDlSih/FFhC
- TLSH T1D1853381E665C38BC57C483BA8FB5D556B29AFC27311C7D20BB9BD1FB8367922C48850
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_0\lua5.3.dll
- Size 395KB
- SHA256 eef58c3dae331da03872b973230aa56b40e34035035cca5b468eda0c40daa819
- MD5 8d18dbd14d7c233b0d1f5943226c35b7
- SHA1 57de3e8d8e1f0e39244b3528310e513c7f90c5fa
- SHA512 39777b070c6ea791ee5cdc1c8ad50015e9d6f6f96b2d8e02f4a80f97a7fa2c438770d5015eca5d19106cfce624b6a247de04cb4ce6baad353acbb298f0fc6aaa
- SSDEEP 12288:B3yJ6pmOZCR40mbwkOMMe6uDa6H5FrCp6pFVY:IaLbwKLDTH5+6pFVY
- TLSH T14084BE41F283C0B2E6A411B996B49F774D78745A5336D0FBABE018B59E203F1777A30A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\irsetup.exe
- Size 1.7MB
- SHA256 ea04ee2883ca5dcb461ea894a4e2def7d0c89f11d9f06f3bae020f6a25e7b75d
- MD5 fdc583888459954430cdb445138e8690
- SHA1 1557c2343eebe793dad9d71af697db9c98f7224c
- SHA512 4085953bdf51b93bbce4b2cdc1ae732de7a9a6e0b523fb794722fefef9d59be5624feb99f4f73cead9a4353d3f63c5434b21b65abcd0b3915c97d1d97747f7c4
- SSDEEP 24576:Xgojt8rfJLbXIpyxOjNONgc2gI0pRR9djPOZYVFR9MRsixD6Oo1e4XHbtSwye:wUqrdspyxXn5Iy9Rdb92s27OgZ
- TLSH T1B1853323E5340AFBD86C2E3251BD2482AD7EFCF2F3690C4286557B1311ABB815A9D375
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_ir_sf_temp_1\lua5.3.dll
- Size 395KB
- SHA256 0e43d22649d6b2ecbac9915dc6498fe1f41777dd33147d962b30dad0d5e76ab3
- MD5 4eed99fd77f4ff9c252f56e153f9c9ab
- SHA1 995cecfe73f719c5135461402fdfb17d79721831
- SHA512 df0b514491e48e0f6103c61833f24fd0822a5b7fbaf1df9f48263bb83b1d5e5157307d0f6b7fdf3281e32886d3d8201b4a378239d2cbd31584a7c200c2b69e03
- SSDEEP 12288:l3yJ6pmOZCR40mbwkOMMe6uDa6H5FrCp6pu76:MaLbwKLDTH5+6pu76
- TLSH T1F084BE41F283C0B2E6A411B996B49F774D78745A5336D0FBABE018B59E203F1777A30A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\opera-installer-bro.exe
- Size 3.9MB
- SHA256 651826b0daf0cc5f50c4dcf97735e44f1634480a420ee710663903b0e1107754
- MD5 cec43c0af1fe77f8e5ad0c6524d3e1b1
- SHA1 4fbbaa191014342e9d3724073531595852140a0a
- SHA512 b59f2d44ffaf78d7800e640dc61f24d4126af5af3f3363c6c248248b0ddde6ce9286fe6936449928481921685c3a96be149b9df971f7d396c8758624d0ea6a4c
- SSDEEP 98304:eA3UFgzOUswE46qZfLK12veLCoVBA3UVHaxSkwX212HMwDMt1gJ:fATnvAhvBoVBScomXckMte
- TLSH T1ED1633217780D032E5B322314F64F75E927EF5964F77568BABC84A6D8F300819A32F5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\setuparguments.ini
- Size 764B
- SHA256 1ffce52d9b3b21f177113bc62cd6841c9d9ef818c06a4d72033173a330c1675e
- MD5 ced7ad8589e3592eb8307e9035e6ed9d
- SHA1 a0d17dfcec336e16b68aec45791e0e8b8778d347
- SHA512 5386c46b418e776383ef98e5abd9276e561be67105313e755051ed1210f1fb05a862351d7a31802ec22b5923fdcf02ff22276f87c56c27af029ab36a430e48f8
- TLSH T1C80100438E4122ABCCA45751A56B2D928DC8E9EEB09308E09BD7043BDEA0C697D88476
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.minecraft\TLauncher.exe
- Size 9.2MB
- SHA256 8cdc16a8f34f99dc85273838350ae9a9a840de8c6dda3c045c5514520842dd78
- MD5 6afe8456101c71193942943f9f8db1c4
- SHA1 cc2dd5b0d2a531b27b3531d4ae7b77df2d385c52
- SHA512 dae1d037610e663b8a0f034e345043303bd2a15b67d0a30be3d5b3c3230f6d82d39d2622b326bb84c3c838d2b4c296d9c3b95ae3289ab266ad31048c496ed61b
- SSDEEP 196608:RshNVPPzMDzdatp5ahrePa+52Pk6ptJT:RshN6Dzov5C
- TLSH T189A6F15BFED8C069FA0794324162D067B82D4BC8D14BF19B15BC669A88B1C894F07BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
- Size 21KB
- SHA256 15cdca6a11c95f616290e91bbc1e381e1d6675fcd5e4ea8a2549d82da813028d
- MD5 c681f0cc957f5e5dd711747315e409f2
- SHA1 49a21f1a210d4f075d6c832a6d8f1b28773b3bf5
- SHA512 6cf1ad5b0601619839174345e959fe0fd423d9d7a54ed8e72ef9d50c5bae5da3cc9a6b3c6d41d6f475f30219d6c12948486179b434e7d3ae032622cad4fb1740
- SSDEEP 96:kTftHJEjjzVFHQjJVFHQjOVFHQjYVFHKKFgLN83WJojSFvUep0/Sdj496/XMBWrC:eGVFH2VFH1VFHBVFHjsuop3pUJWKCud
- TLSH T1A8A2EA3C80DCDF7EEC93B37B4666546E65B1890C3ED22C59D2E8944F548460CBAB39E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
- Size 2KB
- SHA256 1f4581b038ac80aca31c1bf1657f4065e91c3b3c750da108d19a6d7bc95da715
- MD5 ffe811bda4bce68802bde744fda3796e
- SHA1 78d1e4689ab0479e386f81f64a715ce057f2c374
- SHA512 0fe2245cf8cd04eae5cd7bffc41fd1064ce34fb13a1fdbf232d2aa93cdd13e5a0c52f86f6e75dbf442eb17fe044e868ab1603aa619d6148151f7522e8e84b40f
- TLSH T1B651383CC4DCDF1FED92B7771661643E9A6085482EC32C54C6D9948B508A45CBAB36E3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
- Size 3KB
- SHA256 a14aabf96798ec24f6e314d95e24906a4838ec2c6a7ca2aa57f3b52083a19529
- MD5 a8c39c0885a95d44bcdd9dec73b42e5f
- SHA1 34dbe0196c3efc96e6300399ed2c38c5273f4c41
- SHA512 493d4641e6afe574d1400dd503c68c3293c23f2add4f8e1664ed7b95f7b96f9cb4f5f10f7e6ba268e80ea39549b5f4a8cb9ee0cda8c65ef284e7609ccd34d109
- TLSH T16361253884DCCF1FED92B7771272603EAAA085482EC73C54C6D9948F518A45CBAB35E3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\Uninstall\uninstall.xml
- Size 6KB
- SHA256 31881fed73ed13b373abb3874df09c53cd4b69a456592e784e045a4c982109c5
- MD5 355f80ac2c8dfaa80a44c1d524fe6a89
- SHA1 62cf203f97555b22a4d274bf6499e308afd2ca56
- SHA512 49a10852e465fc4c5e25e2ee55d0221d12b61fba514b822c8943ad8567751200cc53c13d6929e4b09aa80106f254e2ccff7cbf06e6530e35c33cd2b0c3eb0037
- SSDEEP 96:kTf6JEjjzVFHQjJVFHQjOVFHQjYVFHKKFgLN83WJojSFvUep0/Sdj496/XMBWrAB:eZVFH2VFH1VFHBVFH/
- TLSH T1ECD1B03844DCCF5EED52BB7B0272503EAAA049483EC73C58C6D9A88F518945CBA735E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\logs\starter\log.2026-07-20_12.log
- Size 2KB
- SHA256 c4dfdda3c1510257ded4768620ebbcff0d56e9353b50769ece3432955cc41192
- MD5 8b9b4dca0adc1d92481920bc1ed777bc
- SHA1 ec582d53bf0ee46cb82ed9a0e0cc34cd6c3c7315
- SHA512 a596282176150e23ef7c859456089fbaff395ec6c849e1a5b07972081cc97c0b7b12ed1cb037a66914f1c717903611631beb0c2cc1afaa594754f14cec4eb715
- TLSH T17B51FCAFEAC65007D1C9E78F1133649CEF2109800FC0896029975A54B49E15FEE9FABD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9371\dependencies.json
- Size 25KB
- SHA256 234df7a7768bb58ddfc7d35eb0f44ab0b2c9400f4dc956fa51bfbf776bb3c86a
- MD5 e4a183b75e931f0fbc9e5453d4803f83
- SHA1 e705e70c7073db8d35903bd2b971c6f6b90bf01a
- SHA512 4604f4c1f203af0fafdf5a6250d38ebdb73261c004f3d9804c5a46538bf5b2fb445d5beb5b57ef1eeb5806f770ed8b9d68f37766ef5b51244eaa6e5034451410
- SSDEEP 192:KdQH98GaeUo6fO9ext0M8zSa9P3VEpuE+xy9aSXH3If2xjp8GMkhV8U75wzSrJ7X:HkUqW6InYnzgS7p
- TLSH T1C5C2CE61C5A06FB3442AA9F8CC6F81A35382694B4C5C3D597B4C004CDF2E58F15BAAFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\2.9371\resources.json
- Size 17KB
- SHA256 44c898c6684ab882a034f02cf8193c3777adea8bb009749c05697a00bf8ee2e4
- MD5 5baa6743a3af863900efdad825311d11
- SHA1 5739b79dcc38a5ea085f84b6327d2eac833e0671
- SHA512 75f02a888452ca386208e7ad5cad499813a67a79ab91f63432ef9854fb382d08b9502d17ee992d9c547611f18c26e5fe882fbefc1d2f85a1ebe47af04ef7b64b
- SSDEEP 192:ZBYMTImi7/cGRhVJpGNVoC8vLPhwGBhRaAldNGrv2BxoaEbFTnhPLElnzDxBNC8c:bjitAvgldKH
- TLSH T1F082CE26E0B06EB70045A9B54C5B4083A69A558B0D74BD15F32C02CCAFAE95F18F79FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\appConfig.json
- Size 4KB
- SHA256 ae102a86f96ea31bcbe9e7110c7a8d6a067e02107aefa0dca3244c8ecc5cc86c
- MD5 1e2bad725da4adf172c04311d9d19df1
- SHA1 550361c7f05a5996f9cf4be89f73aab3073810b9
- SHA512 627f77e297f1eee8fab400d6a6091bbbbab884576c1bd3cc5a5b5b52190ad97ff11d01b4cd87d292b1f3f67274f9bb3ebb7a987d40489d157921e7d69ff119ee
- SSDEEP 96:IkcQphTOzcC3pjeER8+VS8TEZ/ZGcZJ2c7+5cJT12cx:I+phTOzcC3pjeER8+9gxEcmcC5cd12cx
- TLSH T15A91CB7BC1801EE5270317ADCCB989ABB592411B0D887838BB6D005C7F5F16F2DE459D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\tlauncher-sources\prod\release\tlauncher\javaConfig21.json
- Size 3KB
- SHA256 4e677c3608065a9a12f97bededc27fd440711f94288012207645df37f516d699
- MD5 1c4e5f5f435bae981cfad5a1124e1140
- SHA1 0eb17ad37343c07b31f5f75f829e10a161c25852
- SHA512 82c25097e25649f82d4fe735d324639e12397df147185d53947a3ff204aa8d1c7ce5bf1bb994442aa2c5bb904110a14a53b0640b797bc665ba4a635b79595d57
- TLSH T18B710B0AD8511FEA250227FDC82D51E7B692404B8DA47C3CB76C610C9F2F2AD79E5ADC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\cache\https_repo.tlauncher.org\update\lch\starter-core-1.268-v6.exe
- Size 9.2MB
- SHA256 f0cb809918c2bf85a8eef2bcbd35218e75426b4e5698ca1cca50acf3e5a714ce
- MD5 945b2a20000dcf96c356b15a1ca00abc
- SHA1 c770f518ac82dfa316c3293722db36db2e81ddb8
- SHA512 c20f5a7f841eb5055f970746cabcfcfd932f67563ec280f19a53a2b7cae0a310531df414f25bb1e8a5a640150d814771ee54e18a42b55586d523f9cb250bc23c
- SSDEEP 196608:FmdhNVEixzMDz7ntpRvb1tPa+52Pk6ptJTh:FmdhNii6DzTT5Cj
- TLSH T146A6F15BBED8D06AF607D4324162D067B82D4BC8D14BF19B15BC269A88B1C894F07BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\COPYRIGHT
- Size 35B
- SHA256 7afb3a2dc57cb16223dddc970e0b464311e5311484c793abf9327a19ef629018
- MD5 4586c3797f538d41b7b2e30e8afebbc9
- SHA1 3419ebac878fa53a9f0ff1617045ddaafb43dce0
- SHA512 f2c722ae80d2c0dcdb30a6993864eb90b85be5311261012d4585c6595579582d1b37323613f5417d189adcd096fa948e0378c1e6c59761bf94d65c0a5c2f2fd3
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\java.logging\LICENSE
- Size 33B
- SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
- MD5 16989bab922811e28b64ac30449a5d05
- SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
- SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ADDITIONAL_LICENSE_INFO
- Size 51B
- SHA256 0a256a7133bd2146482018ba6204a4ecc75836c139c8792da53536a9b67071d4
- MD5 494903d6add168a732e73d7b0ba059a0
- SHA1 f85c0fd9f8b04c4de25d85de56d4db11881e08ca
- SHA512 b6e0968c9fd9464623bfa595bf47faf8f6bc1c55b09a415724c709ef8a3bcf8a954079cce1e0e6c91d34c607da2cecc2a6454d08c370a618fb9a4d7d9a078b24
- TLSH T11F90021DE52145811A54853159204DA4542081F68716582AE17D2141514094B64AECA0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\ASSEMBLY_EXCEPTION
- Size 46B
- SHA256 a4b7ad48df36316ddd7d47fcecc1d7a2c59cbfe22728930220ef63517fd58cb0
- MD5 c62a00c3520dc7970a526025a5977c34
- SHA1 f81a2bcb42ccbf898d92f59a4dc4b63fef6c2848
- SHA512 60907d1910b6999b8210b450c6695b7cc35a0c50c25d6569cf8bb975a5967ca4e53f0985bee474b20379df88bb0891068347ecf3e9c42900ed19a1dcbc2d56ec
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.tlauncher\starter\jre_default\jre-21.0.11-windows-x64\legal\javafx.web\LICENSE
- Size 35B
- SHA256 01a4ebd2a3b2671d913582f1241a176a13e9be98f4e3d5f2f04813e122b88105
- MD5 f815ea85f3b4676874e42320d4b8cfd7
- SHA1 3a2ddf103552fefe391f67263b393509eee3e807
- SHA512 ddf09f482536966ac17313179552a5efc1b230fa5f270ebde5df6adebf07ee911b9ef433dfbfcb4e5236922da390f44e355709ecaf390c741648dd2a17084950
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\9b3f98d0-72c2-492d-8703-05f993089564.tmp
- Size 151B
- SHA256 bf5decd6bd9d4e6f6d3ea6b6f64ea979c83a60e0007ef8164af714b4aebd2aea
- MD5 276e4f878d3de142faa44786ca1a57a0
- SHA1 d17f359e6ce8903329cf72ca9293d2a0983c459a
- SHA512 673d9ab816f5d72dc62987c9cae60c2ee683515bd584a6be400678154c686ae96d2cc0b6e46b4d3da291da8a4804afee878b1155d45481d3b43180ee3523a821
- TLSH T1B8C08C3F8682080FD0F90A8CB010764C829AB18BC6EAAC22B2958F2449E02B21296410
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 47b2b1f66f5febde625e234192690a74c72e94777e847560d9252983a9bc9072
- MD5 096133997a626bcfee3a5e0d375f6b1b
- SHA1 d931802869fa98c543c7e5c3dfc94d778bdd74d8
- SHA512 3280a618de81ca26fe4bdef924800b50f3745f1d0f8c69b474dfe7e9fca5c8d3ab9f90a614e7a157312e70ea641d8b9df6fafa667500c3a4220bfb88d8d019b3
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\0323b567-eaea-41e0-a452-45f14fa54d53.tmp
- Size 414B
- SHA256 ee36c6abea4a3c331f51078206d71a95999b58bd51146f2d33922821db0daeb4
- MD5 33a6785bb4f6874c9c6e1f86b8e9a285
- SHA1 d15a4f2a82e2581232e04d46a17484d4c09fed7e
- SHA512 58276d5e3de98c18580b6b2801ea731a1acd215861dde51cf0da06d3ff80bdbd7493a443fd9effde4d5f4e29eaeaf40dce854f7fee6829bbce12f1ebffcd36ec
- TLSH T14AE0AB81BC101222EAE98BE032BA787AD36A8804EC8440A344ED140F125824C0A28351
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\3b6dc9e9-87af-4bb4-bf58-0a47ad4af6b4.tmp
- Size 173B
- SHA256 296aa1e1bb1b773bcb732b9b17548044bdb07706c13b4fb7f7d4e6660d8fa274
- MD5 373a7f022b2562e04c046f556d9abb8f
- SHA1 97b3c11856937540e141ff7f13b7b471d5c5906e
- SHA512 06f952be2070ffbdaa59111e55bd5a19821a0a3a5771153abc358cf56cd03e26aa96aa306b2e49e5c96bea38f375d5441b07f1564c59acbff5876ab4dd76d67d
- TLSH T131C08095F9C8511CCE841E757515767509D7614154547DB0405D124551314541359660
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\570bc411-0697-4487-9521-9b3b53f7d6f4.tmp
- Size 162KB
- SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
- MD5 6c07e783fb8030c2aae67919d45965f7
- SHA1 46d2d931e5049884b4e4af1c247fbb1a25b6edea
- SHA512 f93944f08885b666c7ad9ab5d7ea051280cd636286586fe1ed696ad67c3b43683fe87dac24bcb9410395acff59a5b0d12d4c12c2f44a0963af2cd93c939a9aa5
- SSDEEP 1536:EEJFyMduylKOn7MU+AO8iKqqFG0urH6PtOE:RHKcuGjFhurHjE
- TLSH T1F6F364823BC1ACB7CE92A6B52F7CD4E9B372F5084746572B7FE1A2718B9D3180950139
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\756c868d-c1ab-4de0-a1c6-cd4d963e13a4.tmp
- Size 171B
- SHA256 05de64944edfffb7b5e78c4cbc96a9281861f139fc345badd3dc48a1361a7f70
- MD5 7c72f404ddf1c1ff8b976f092bf0797a
- SHA1 cb3a0cc97994a0c518cc6c2647cde4eab3bfa789
- SHA512 5ee481b29b35434b4d2d96f10b86dd780e2a61aac1b4972ba88ed1250ac8e83502e6d54ada43deba718cdd87b5373fba86e273615a21a1e101eedc9f4cec4cbc
- TLSH T19FC08C52F7A2BD353D8927FBF02C7A315A5F09861204156A4AA65188028526AE6BA2E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\77c0314d-ae23-447b-8aba-91e44c4f6f59.tmp
- Size 20KB
- SHA256 3dd5b089f2646d8cc465cfcc9e32d0dbd07eee8725cba2f287aeef28bbdc20c4
- MD5 79ad4462f03237012deed6b9a6df5484
- SHA1 5b58223bad008325dbed83293122dadaa3a9dc33
- SHA512 bb2c1c45173fe7b14bbcd0cac8244c6d7a2717f11e2622f379bf320448fb8f5c5b3873bbf16a0c56bf514f08fd88bae75cc08915f46abadaf938924154dc90df
- SSDEEP 192:Ao9x1lrNLgOf/KvpY2gN2R2I9802MfDk02GasL2HiJZ96IdWFtRvu26lh0+y2yQI:vBxNUiti/JhJVp5QWf8+ym2Q9c
- TLSH T124922F77C5069CB7917002EA74FAB217F645332F56C88E87767CD88D8F31A236296709
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\924cfdca-19df-4f1c-bd0c-d8eaf14c597a.tmp
- Size 12KB
- SHA256 df7e94c4a3385931f4430acdb9c5919b0d6fae5836ae84235df2886b81ef034d
- MD5 dda56422cce21d52a3e4a4f8092b12c0
- SHA1 d7a57f5cc236e59b68a22b02158bfa57fc1d8794
- SHA512 89451b91c1c41f05b603e8614a70d24bc56447aa890fa744660adad932e03a151e5375828bddc9ce4eceda333cffb19a145735f17eb84dba290c8cd7f34fe1a1
- SSDEEP 192:ENnu5IC9U+OdOMOKOEOhOUOROJOBOjOrOAOAOmOOXMOIOnOZOROqOuOBOjO3OUO5:KuwXfSY+Ga2grHi
- TLSH T1FB42214BDC204DBA99D29A25F650F72BF2E40021D261BD94BBF9CD2C04CB3CD62229D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
- Size 24KB
- SHA256 439a20beb884b9555ba10527f9aa49ef89c317c119f879436263e44c610f82b4
- MD5 e8f4c353f7bc76947482850c54e90074
- SHA1 f1124d112988e500c62e456f73c125da03a6dfe5
- SHA512 475d3400fe549f763006c81c344eec29bdc71a049f915a022eac03dd345e70808021e5e15b4656ccdf3079e62763399570d3602c68f4c39bda7f2644382d0dc6
- SSDEEP 384:4hNjVvgwz7iVigbvVhRbzP6VvQzwHkQQBifg+yX2Q9c:E7oNlhBGEGN
- TLSH T120B28177C5069CBB817403EA74FAB21BF245232F5AC48E87767CD84D8F71A236296709
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\78692989-f8e2-473c-a1e5-fae4dba7f337.tmp
- Size 48B
- SHA256 5de919d0d6e61829859ec70fd4f8af062332089a3e3699738d75ab1ce8c93a25
- MD5 1bfc974121f39ccdf4e8cf2b0f9ac6d3
- SHA1 219aa1187d2441f7eca6def598bce7717f1a048f
- SHA512 5a7e6beb24769397575d49377ee6b40d734092d31095ac947ea896932dbd1f5a3d10ce25ce170c360d20a985f0870444ef1b9b9f6f332bd7ab99e1250410dbb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 600B
- SHA256 3ba553573271c6697aa3c704286ea995e85c605c42912b68aae64cbc69e37b77
- MD5 2cd4637a7bc07f63f31336209fbdff1f
- SHA1 0f45e5b01fcfc37d0b3b18ec8ccced7aca8ef431
- SHA512 7f982f5781f00d260bfca6d0131a4e7b30ad7b77a5ac9b12d22b7a757adb2f5edc04a5d9db97ad03badb838609deb63feef02cacf156e96b193b5739163485fe
- TLSH T1A6F0209E88980407FF101634BDB23C8C3FE5A42450971BD308CDB5683D472C732A0400
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\31cf140d-f616-417a-a554-c60c5199d0c1.tmp
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
- Size 4KB
- SHA256 f8edaccfef33001039d5bcce50b55a2bd6315e1613434fd728bc629ac0b30745
- MD5 9fa9ee5fd8c576a4d3f0b4c79f77323d
- SHA1 efe2aa08bcc67db40d4470a06e2d035f4bbdb722
- SHA512 1d4ec28d3373e49d299c0cf65d2afb8ed4e1c3f416318c5ac2d1106d82e19de7d5cd0d70d2be363068397cbd3c93f346b2c197891a9359b1f741cda61bca8649
- SSDEEP 96:Dmgmkp2pMJpOpfqZXUphUpjpubepXpmtpbQpK9p+OpWn8mJQmu:DmgmkUSJ4ZqZEXUZQexqm09AOIn8mGmu
- TLSH T198915BF7C3E8962DC92256F1AA147E1BCE5E0914836C3D2AC9D5AF5BA3D2471E20074F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
- Size 15KB
- SHA256 201674f537521f82248037201b8f76014499438999c0d036db1444dc5f9c3ea5
- MD5 fd06fcb4ccad77f1bf1a5ef09b91402f
- SHA1 06c01554baa352637bbfb19d1e96c4252ebfea47
- SHA512 f98e5ae63c24c979158f44486624b2c93a93f1386c5a09cbaeab0860de31f38a3aa3df64201978313573cdbff81940e13c9670c5fb74cbc5d205466c8924e92d
- SSDEEP 192:ENnu5IMtWtm+OdOMOKOEOhOUOROJOBOjOrOAOAOmOOXMOIOnOZOROqOuOBOjO3OG:KudXfMY+GR2grfPi
- TLSH T14B72555BDC219EBAA9C39D25F244B616E1FA0025E2957DA477FACC2C00DE3CD7322592
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\09e2e8f7-fabd-4dce-8ee1-d71859cb8130.tmp
- Size 72B
- SHA256 16350dc22eb0c532473c984d4f7a06f66a02b2392ca09f883ae29c475548ce74
- MD5 a5b824fa94042c1b4d39152edd6f2d0e
- SHA1 68319545df0349f506138451991fb16bc960570b
- SHA512 37c5f7bfdfadfe03caa888b9c880b9c4e59384a88c3935630d754042131d2d1c39df560563d79501f7ba77b76322859ca88ad2ffee9d428391a4b7dd954cf6a9
- TLSH T147A0021903C08A20C12102B0284283C96710BB3AD400022776D003468C74090891175C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 72B
- SHA256 f9391a9578cade70381f7384b2a8730832625d2c5602fce84a195617ffbff094
- MD5 da7fc1672b3578772417cb74789f4f55
- SHA1 4d1cd321f6176ca80d5f45300fdf5c808c985423
- SHA512 0b2a914211776895f1219b337717fb94b8a3c46f0658d76f99f0389b8f5de8f171f4eefc600cce3207b54bc3cad9aaeabcafa21fdccb425ae5faf245c24c4e73
- TLSH T15AA0021859C39440D1301178388185482722EE10D840934BB2F50777CDE21A2CE71101
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\050d900d-8cb8-4084-be52-edaed5cd693c.tmp
- Size 381B
- SHA256 5f55f4b6e6909c0e2f92bd32415cf8b6763d80332a080d3686f177a4045fcda8
- MD5 1ae4bbef58032130b6b809a18c59e191
- SHA1 0d3a194b9b38017d6eb55ff7ca9fbddc98fb1963
- SHA512 89daf5037ad90887f9b60eb54c13d2420a2940050cffae1d61919aeac6c2238171a114b73aa673eaf1a9e0697d3208d639e0bdaaea086eb9190979cc9fe95875
- TLSH T1C4E0C0A9F0491E1040760BA1E6FF7D67A0E8B1CACD1640BA70F13CA85CD2F891DC7676
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 11KB
- SHA256 87878df4facfcd7a8f5448f0c864940ee53da11e3b9ee390f8eb0ea459049931
- MD5 e0a21771d3c002361406abe0f62f3d47
- SHA1 2826e0188e3863131dd8cc4bb95a0a5090a725e4
- SHA512 79c190c791ec732b66eb596f3c67c816c1d10fd3f8281075161ffc4bb6692244769e42f1e52b7621e351efe7ec43eeaf403a1713eee6178c4b981ce8dd068525
- SSDEEP 192:TuPhGcDaYkzYWWnazA4MzCj89/YsUZpHAb8HwnYTzYjRNPk/HOmI5qOR8QQS1/Fp:TuPXazc2zP8mMP8WRNPk5I5qDJ+/Fp
- TLSH T1C232A0DC639AB76D6E71926C8788E4A234A3CE32E3D706B25555EC41F24EC10279F874
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 11KB
- SHA256 4c7a2927f798147a54bc8222ae44320e235e346eb2ac8662b312502cb49f5e5e
- MD5 b9394e051a88f88d4820dc3847046882
- SHA1 bffa24d0679df76e836cf3c9e04f9332043901ef
- SHA512 0210eccec34c5854322275d9ab9ee894def8f09ce2c88b0a6042750a7e2a14b97336bf314b0481ef5113cdd25d9108b2f59b6fe52ea627b396039c4bb12815fa
- SSDEEP 192:qKed7ry3EyFTfkbGG6gwOyzfWN0mifL/NHBbKu1OWGJs/2rlXxN:qKe80yFjkSGh8Sif77bKu1CJs/eN
- TLSH T19132C0C348439F6A114020CBD908976EDC0288FFDDE68D900ABFA918D86C7479BEE971
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 11KB
- SHA256 1ae5bfd485c9bd77a060fe0bbb20d7f842ed092314d4c6901076a2343873b11e
- MD5 4db412bd2713edc34d4d6320bf67bcdd
- SHA1 32ed1d2c57ec59b9e33987c9f0f0fe81ef2ea461
- SHA512 fb231e1833e1472b3c533173a61b6759d9749af614681d78921232a649aff4092724f0b94fc25c6976fadd5c654285fe99878dd71252f16b48328c04899d4a25
- SSDEEP 192:Lz7Q9TTGXbbXRc1ezNfYPVP2UI+Y9N6gKIeTL9dr2hH824hfTEHpEaSNa8k:QTTGrbXRcEz1YPVP2UIUMeTyZ82KCpyW
- TLSH T19732CF740AD13B3662DBE761ABFC6257EDA711C9E0B87C198A7D3092722D609360943C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 11KB
- SHA256 bb80b03c0641498917fe4a9d5a8590f0e5ac7c501a7fd286eb78207354a6ea93
- MD5 7622f4cf01fe0555601d7837e11f0431
- SHA1 34f1a90318a3db6e48ec4a5e2c6da1a0cff7567b
- SHA512 db986f12df27e366f6105b0805b8920b0c32684b50c8ab61ee7364bca4e437b89bb50675952b7dafb66fb489e45b462c1ee2bbf31f90f7b03e088d32de544b17
- SSDEEP 192:MCeaaNFeFzYmt3sZeoDF0zju5UozVnRfdsbZs5Ga+T/T73uS7n6cLBKn:M0eFGL1roKbozVnRVsFwGXHtntLBS
- TLSH T10432C0164C7E9359E980C65EE8CAC63CA6D3A79E11390B71263BB438113BDA64D0939F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 11KB
- SHA256 385c74f612afb144e572ee89d3dc6d2f4280fd5880e38059872a1d4018eb806d
- MD5 279868a72f3f273efa9cc08d6bbb61f0
- SHA1 c3b61a4a54aae1973efd6bb38e3dac6fdc09d161
- SHA512 ecb91d2657f5709512157054662d38d5166e8f4f18646c229acab7b23d2fb3899bc1239688b031dd2ca610c1c8cc4cfd029cc936ab088b340f8b21c91dc85cf4
- SSDEEP 192:BOxn1EehpGni74VHeN6z2s6ztwGHa63GqKWWI0wfna:BOxnqehp8i74VH72LztwKa6mW5na
- TLSH T12832BF7B4083CEBF3706C4BE6DD0894226A0AB69D2D0972C5C978F515CCB18AF51174D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 7KB
- SHA256 1145831dcb924f26a1d10258f32af4fddefb216b350a4aeed62d38fec91aacda
- MD5 4c41d2bcba4cb542c41c82bf1d6746d6
- SHA1 603749ffe8792aebd619b4141984fe1d0e0806d3
- SHA512 7490c1f77e6149c7b326efa031bbdb0906fcd5159e642524f0ceebdc85b725f2a595f175a3034803a0ca5ede562a60fef9292145b2ce3f1741248d3e5c2682ad
- SSDEEP 192:5UHXshMHhYFs+YcKg5KF+hA1OjCOqmRWi5rfkNKl//+9JCM1VSOkcLvPEXZ7C:5UHXoqhYFs++3FEC1YVONIXMTlZTExC
- TLSH T1EDF19E9CC90A342111814330B7AD0B10CEA72663D87BAC55F5D35E54EE0A4CA8CF2BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 aeeaa6e2de5fdc752af114f3b8f0fcae23060203cac53002c8c802524ca20e84
- MD5 e2b5de02ef03c86e3d0983ea06609f25
- SHA1 087ba9a6fcf062178a334796d3c1338a964b9146
- SHA512 b77c4cf7cd35d8cd4aab2936379becea84a12b365950c76d893da5689adcc1ba016ee1f3dcaafab615db077392467c0646dac0487f6195dc5f26f66e38a46838
- SSDEEP 192:bL/tcuwbcuAj1US9QoRR89suHrFkIFuCWS8dNIT1kRc5ZA+6F:1VwbcuK1USfqzgCWS87gVEF
- TLSH T13B02BE1D65076FD8277C41211C1B6ACC434E7CA4A1AF92B7C1D8FCADEE47217C5522A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 070fc927b65109b720eb0cd9049e2841122ed78794a5ac060256291420153e0e
- MD5 8b5e5aec34f9aabc73f36998df9cc8a9
- SHA1 2cd1fb684b8032077f1bde0d8ab7fc5ee590815f
- SHA512 6c85963622407678c91f666a45797dca4ad9f32d225131d31d35688f1d79fd89a0ac840a85efceb3ef5adc94f9a4b9411a301798b9894b209e28ca6025b87fa8
- SSDEEP 192:w2DWnpnitEr+9q+TVEDT5MZRik2lcfurVT:w2ypiTq+KSTDW2urd
- TLSH T1D812BFEDB22F912FAD7E82AF22E78435411DA0021F54DA1A7D709FFC87A36575D211C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 ca6687332a4252486365c189cf08fd4e9c0d20f191f94792b8ae39453c7a9fea
- MD5 7ba36adeafba81e125b5e5cc0d2573c3
- SHA1 969b888c32bdcb5ef53b62c5eece1d3bce474b8f
- SHA512 b05da77dd12c6423d39a775326edfd5064bd6c2b87ee3a1ebf3ae24f1fae9c44f30f2c0017bc513432a2629da87d57df3d9c2f84f394b76431f8477697389330
- SSDEEP 192:bdKIpTeCdTPjOTVvenLNpNcNcBqN+pn42Bjj5nT2PgX:xKI9ZOTVvGdcNjNs42Bj1nT24X
- TLSH T18812CF3B1A44BAB7DFB3C500741A3363AFB163C11D565BA82E53916A90A0C44B7FCDB2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 462eaadb131964a6b0d0ad7a6af1e2530dd1ebf95e36cbc9d0edd5cdeede8c01
- MD5 6662ced650a76857ed73d21caa3e117c
- SHA1 f1f9b9b34288e2bff5da6750099af1784153108f
- SHA512 c6ed987b18ffe9dd87df6493cb5f23af4397bb34675b313a45746b23f6c8ceca098d7a4228e0f001f550c530c2be13b0e994b4f3fd4f596cdc3089fbb821714e
- SSDEEP 192:Bt+1QkTxKIT5vkfxBdQhArv0Ttg3POz+5SW:Bt+1QkTxxeKhArc2KUF
- TLSH T14212BFDCE32E30A32A55187A4C270DCDC785D5164A40F827D2E6153D883EF22B2BD2D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 11KB
- SHA256 7e20a99981613de45120923ddfa670c2afd538d58f8734c4c5e240294a21b220
- MD5 5090022690b257cb1b8009ab093e9748
- SHA1 99284f1997ab15c8fe854a663ed6f013d7da66fb
- SHA512 62a249d143c2aad712522ebe1459760e2d007a64767d9e0057adcfaab15bd924975432e6b5c2fdc0657b9fdac342a9bd942ab5de688bcee56e53bc6701cc4fdd
- SSDEEP 192:SQ+Ek8cT7s8QnZNQ9Ra6PGmOFZpuRPKckdYJd2yr3CvNAdDhFt:N+EiXmfiaW10Zp01L2WCviJ7t
- TLSH T1D532B0F029648EAF1DA1B42EEC1CD5D9A105887B3FCE1FD97ACFC0728D5494286349B8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 11KB
- SHA256 39feebcbdbcfa331968471681d15d5a69b08f8fc0122c03aff1563a1ae659b1a
- MD5 2d0f9b61f0d250a9c796f9711e5ce972
- SHA1 30e8ec3e88bb7303936fcfde580176ed91b0a491
- SHA512 2cbe1f00ac635f2410e682cdb71a1578e7c3850b1a829d4be9008dbb97373ad4557460aea39272a20c09da158e47b20c35b178255faa29cb5d3a6a061d0910da
- SSDEEP 192:rAC7BLGH7opWoAglZKpKt66ca22mx0lKOLtAAuYxQtok1pARcTrbvjCDamy/HNYc:rAGLGH8woFlZDcRr2mTOaLb1pAcT3k52
- TLSH T1B932D1B430BE8B71C97AAD137CC1991748534F963DCD725901F7A93881A689A01FFA78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 493B
- SHA256 ecd0c178f7c32736501fb43026cdedd2ef46c904dab5dac5a677208219fb367f
- MD5 6fbd9b0a6b1fb8bcb6d631d12449e35d
- SHA1 6967c2fb1435015f7995c9c7816bd2d913290565
- SHA512 c649853c6fbf7ba46a58e35a18cd21b656fd3e23ede5195493f4ac64f1b62ff7fcdbb8dc8bed6a4779a77f0fc12d193a7d6479236622c9de31bcb83211f020bb
- TLSH T168F05471B6B01E890A5CB30E70FE7E4A580517BC01950A032DE2E21CA49B2377B7BCC5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 1KB
- SHA256 2e49ee99777a8639db774657cee5b1e3c5b31774754240392d5e0d3ef72218fe
- MD5 649c5e1cf5d7f1705f436bfef956436e
- SHA1 299fb59d961ac76dfaa8e0de3856a8c17aa1b858
- SHA512 15f274fd5bc31c7b8443700e325404ee25318faf1c9e0de3d4cd044bbebe4c4a73f17a7a56c08b26a794d928aa7035319e3ac6ead617f6f8782b64620ea91137
- TLSH T138312AD00CE79462ACD3FCF8B3C25C1537245DAB604C0A94008A6D08DEE21EE1EB5169
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 1KB
- SHA256 6772aea0c5213a05f8e4b4932c27b7ae95d5d551bf769a1e29043b43a15be89e
- MD5 c7962b6431712a447a7e5b57721501d6
- SHA1 a3422053cbab02661628a58bbd5664e5600db43a
- SHA512 a6093f1b9a1707c4b3244f81ce64f66695b773d9cb814c806e5b1099a1d4d32221f3b423e674dc21ddb9b9935bc5df0c8293324dc750ee53ab7a6cbdf13a15ef
- TLSH T170310B23EEC9C1E86D6E527B0467FCBAE2D0F811E71310465698953BB7662F460F44F2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 476de8bb17557598ccc0bb384d6324c8f80113d83fb5b05cae9c038ffd5182d3
- MD5 05e4fb221ea51815dcf76091213bff1a
- SHA1 f62d594d9e2fe3d9fa0ac90e8a901397c1bb2be9
- SHA512 ea0f11a3040316854df78b82f531af841a086b9baf159a40a4cb515adaacf1c256aad763c80231906ebd7eb2daed3aed582520e3606430edbb112d7c396950cc
- SSDEEP 192:JQtWUDLPLk1FDAZrFNEhjOxd2SNdacRlvxXmOTqfHf4+VQ73eCC:JQQ07L3JEhODNtRVAOTqfHfN
- TLSH T10902A02E7A72E0ADD19E6D8CA824F4135710DC2CCBC75D869871E9138F61680FDF16D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 3930115b89ad481d80be6348550404948c62aeeeb7c01a1d08ef39f9e1647a38
- MD5 3924e4008faf654ecf85d2e724d968a8
- SHA1 c7e103d2e94f4476f7ae9e6abe239952d962d40e
- SHA512 d0fe6d76c0103b9bfcb22cbe6343f561cbb13928a59e3a8bf8daa41345dd9cc47ec6e80f44b2253d88ae09dac7d54255d93a046914ef01f882f5d468b0e016be
- SSDEEP 192:f5whIdLbLjmFHV6Uw0/AQ6mlN2ALuKV09Ne9bz88ZQNSVe:SybmckemN7uRNgbzUSA
- TLSH T1FF02AFECEC05C5840B5081B0816DA6ADE271ECCBF6C34D7AD8558AAE80DB1D3925F65B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 3468c878d9c16842d12fa975c2474c176da796bd52c010434ccaab33a1502b42
- MD5 ba7c47b1f3e36cdbfd7f02afd21e2d96
- SHA1 f963ba23bd212fdc14b637794d4acc10a9a1b5ea
- SHA512 208011cbc5a88c0a0cb7231d63909764d35426266795f0e5740ee7ff8fec8da32ce47fed61057725b36046818fdcd10a8a80b98ae0352339ad7ec152f09564d1
- SSDEEP 192:/HNm6MBEZ4Pi/sCOwkdx26SZn3kCX9T4jelDrBErP6qs:PN0i/8wkP2zn3jXFsmkDs
- TLSH T14E02AF3F89BC49F40121485D58612FA6D291FE87E79E87BF051D132B9C060932B46C8E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 d3dfc9efee8ac4a7d4c632f075809503bbb053b3e18caadd322abd85633398d6
- MD5 7d15f56d27faa897f1b96fa29dea5583
- SHA1 dc4060fb4180abb90362f94b46178043779582f4
- SHA512 7b860342276abc915ba814a6b3468e095e34862c5311b0c930590e0a1eb60f3517cad8c95daa89a1d081b09cb5a88d2310c9ed72c65ce1bc47931e78c54da495
- SSDEEP 192:5P6/YbM4XYXjTDz/u1H6pfZyilad5lUTzoRagJ/g81oCJX6XlVXzJEc:5PsTDK56phfad5wzoEGf6CJXW
- TLSH T14812C06FC24B6DFFD44F24E53AE2D77D13494338BD9905A21400DC746EC1542721E6E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 a71b3734dd30ce1ad74fd2bb32d7d203f3bdd2c06e2528cdc85aa725f3288d7e
- MD5 a7c432c7d9863c654106f82d4b93f30c
- SHA1 22fca30e71eff5a4de4c73b923ef4df22adeb0ca
- SHA512 5c85029ef4a15541e7ccf44e2f3de37b7085a039c40d22f378f3c7df5263fdaf29e351fddb9f8e90ee11c30227d7ec58d876bf857dc57c00b25377177d729096
- SSDEEP 192:qIO/d3PF7IbGpXcvVd8nbkIIJQBUxqzxlX4bsDY9S:qIO13NcbGx+X8nYIIOBUxWp4bsDn
- TLSH T1DC129E8EB5227503B1E8136E176ADB156C896DD6CF7F2F6F83929CCCB203854855190A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 5ce81e46c22fdf7deac59712166acd304fb26b918e1fdec6e1f9fc247d0d3a48
- MD5 472591dbe6835a32c647dd04440640d8
- SHA1 cb2953aff508ecf5927b31e250608da97829a9e1
- SHA512 83862dba1ada3554e4b86a837e61bfe6b37e9cf10630b441f7e8b8f2347785aefb3d531d95cc3899f24ff4a926e2279acd1d92b4c61189eece0777ad13f6f0db
- SSDEEP 192:5AWhpufgAdxP2oTFzlVeNOSsBjLDx6npm9oGYpfojvuEsSg1EmNqh:5AIpG/2oRzPeNMBPtRvFXg1s
- TLSH T1F712C0C853DCE8048B99BB344209358687FD5372576DB790194CDFB2232AFA8D09ECE6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 74b0b17525476028ccbbaa34b0676164957d024682f82f99179fe11773b26029
- MD5 d66b67873dd97edff3491e2bbedb4312
- SHA1 ff1854bc36cf82f05cbe58d0cbd160bab9534719
- SHA512 9ce23be8382af6c15b7082e52168d350511509e89554d82f5a38891bfad0192d78334083a859b104b9bbd847e918a476ac3fda71358bf76ac74acde04a19c6bb
- SSDEEP 192:8ZRpD+ongdhptrWgchzYrWJ0RRetNbOT2ZjPxdiOJoCQ:qnyongStSQPN7ZjPHbJ7Q
- TLSH T19B12B02C3A6D4796E03DB4197F17E938416183D395B7D0AE84894F667038E8D162E32D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 158c57da9cc2bc52ac536fda9c83762fe059791e42824b63aaf7aca80fc3970f
- MD5 a3eb4afdfc52897ecae5322313ac87a9
- SHA1 6331e634d076052b7dc6e9e88a2690e7efad69ef
- SHA512 728c22f8febc5395f9f8058eca775cf5acf5b98b8594f245b1b975f389637e8ae88602ab7b42dae12289b0f4448df61f5284b1b68b90dc42bf46242d7eb12800
- SSDEEP 192:mjtM0l56cTTOiplny+ELWBQgmcwlTvb20zwpzsVbC3YIvrN7y1:mVx3Hny/LgpiSsS2Kxq
- TLSH T1EF12B0644AB8C9395CFFFF018A2B881AFD5CA1530911094A9B4717F8738F0021D17CDB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 d056bddf3f65bd41540ca8de00612f6635b24a8ea46583f860856212a9ffe2f5
- MD5 e88b065f9630ce37b39060806f668e34
- SHA1 6a3b1080659efb067821406d81def982eebcf861
- SHA512 b0ccc7bb46cbf4fd7d6a9f77a4058693ab5b7f73b47e6603f672953785f57ebda495f8eb3529ab40fa872e5e11b1b5092b3a8a705d6c8f580ff5812da82e11c7
- SSDEEP 192:AKZl+ZKviq8lZfq8dQh75cAP0DZb8tYOVuRBntYTBfojZO+/:RDPaq8lZfPE7LPyZbEY0uRBt81oj4+/
- TLSH T1D512BF40B21767FFF0DDB9443762A7A562A8CEB260F0804D00A35670ACD9D85B1F9A6D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 0f68e1ae72d15ab5e748b6c0452bb63308829ffbaabce120d1d4b6c3e324ad77
- MD5 e110f8c04dcae7a2e79e374ddf16efc1
- SHA1 bd729ea3fe6dd524d9135fe5999b807fb419caca
- SHA512 59b5d84490b7b2dbebc4f2017c4752cb4a60ee55bf5316566a582cee2f0fc6f98a6a6f38935afe81b14c0700bc055b142aa5af8dcfd916984cb7d2dcac069b16
- SSDEEP 192:6NcyucgN0kO//iAcMBBDm9+6XtkSJUyUU+iKEUNTdE:Ycyub01//fBi9zXtDUyZVM+
- TLSH T17512CFEFAB9A54E12174DC75C6FB2A1888E53E04C6214D0D94D392050E56A9DFAB73CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 7d527f1259c97c0ab0080a51b6027b0ddc71e8800adb2c11faa0180ea58f0ac7
- MD5 f7c8715094d451401d810ed4e0239408
- SHA1 d27887cf139ac8dc9111763f6f59d29d16c0d47a
- SHA512 ccd909e676d7cf28c4a919cc4611dc720f7492f63e819d0f39354aacf66d8fe8229fb4494b79de79693cf417f9a327f6a424f323eb80812a114f47618b3a74b6
- SSDEEP 192:v3Inf9SYn1fFfdD2UwIX7uJ9TpFOryGIGHBLk0CZLTsFFn2L:PI4YpFfF2MuJ9TpFOZH1oLToJe
- TLSH T13312BF10680867F7BD09A0ED1158379CE0997D9D2953A90E5542F8846AEE36DD4B3934
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 25b7fb8f480dea30d7e0d520d93413693f656b58cf6bed6e74326008bf94242b
- MD5 b9d9db0a332e28347e068b1c70b52000
- SHA1 74dc93ca2223e9596624102648a80942a4b2c60c
- SHA512 8a3a3ffffdcf3839655c81918e388c5af57358cc845cf256929879e751edffd2d09bc260fceadf047cba6f452d9617239aca72ca967abec47a1f3d5a93eaa65a
- SSDEEP 192:EwoPvQj16nmmeEngTJsohSACE/rRxYr5RbiYEroHBBj10sBa:EZvQj5Qng9bh1DRxM3HhRm
- TLSH T19112D028A2C1135490B55777AAA221C2373298B11F98B6D877169DC20E64DCC42DF55F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 797d704fb7d14dc8c6ada982edbe3b63104ecd9e13681f480f95247b6b61cd59
- MD5 4ba076036f87c7c8bdb9da4afbe688c2
- SHA1 c9f6679399930e761a9abc79db69cad6868d43bf
- SHA512 d007639a711aa290d0d1f5892f77b18960b3a9ed837a0f570c4ad0021159bcbf3a22061f1beee4a30112521950ba0af9bdb40734267583ac2d755860a95aed4c
- SSDEEP 192:H+iJ9BX8rZSDgWfcOtJ42aAwb5w44C9E9+IWu2PzfYWHnKaOtHW2XFJN5vDK:H59BXmOrf3JoAGv79EYn/HnKawWwnbvO
- TLSH T17E12B0FE5B717B96291A537F03CD621E9B2F688031BC501E16377D4982C7CE15394932
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 1863fe9fad0d43241bafbfb8a1fe534e1a3a1545037346530b06766c5ece96d0
- MD5 a705da9e904cee869ccd75d601aad1bd
- SHA1 778d02b1fdce9d6f64e594e3bd864d437867aa01
- SHA512 d668fb4ad7cc2e411f81a5703c2b599f24e9801d83ff7e29c5f41a39751c963e7d0c44b84c0eb4806a96fc80394486201edfbc1fe601491a0f448459b929bd9c
- SSDEEP 192:aImj0/v1TYcbNqA01rwh6Tg7iPJvRT4MmWaQIYIBx+5vGLIFzfXufOjgi:BmjIvBYcbNqL1rwhl704F/jx+osFzdgi
- TLSH T1B812C028F5EB2536A940ABC1F15BF3E52556F0AAD42C4384FCE83C9D0B553C84BA54DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 3d82d16a037ab9881fb55cb865938b31f178e384bbc665a315418dd3c725fb48
- MD5 f8fa61ccafdab5c08eb318c98429fed5
- SHA1 ee806e0efd4f0a64a36d630b9f99f2f91c3d92ec
- SHA512 e960050f0c38324faca77dec73e38513037cb493da46982949026e2e8ed9aec109c4432efa8e23c0f34ca69a274979ae1c4e394ca1194b797fe310d45315dbe2
- SSDEEP 192:8xW/EkP3Ekh/g1cIQdXXZ47GsS/+APHedl2DpsQ/+:8g/EkP3EkFpH676/9WYGQ/+
- TLSH T1CC22BF0475D48EC0E71689AF56ED7C3B5ABB3E9423E8A0924CFB0D02FD1893984D4265
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 605B
- SHA256 2e368af4f864ee44a50ab07c9483da7c0485f3743b53be09fac3ebeeb5fc9fc6
- MD5 74bf2e634eca4cb9a0c0db0ac25d835b
- SHA1 b2535ff60281b9615b3cecd045765d81b21815f4
- SHA512 4b1ada5eb78006d65ccd4877716bc2269c0b97f7a2f7f6b8e5fa0422e309382baab759794e882c259f00c6cb26e7a307e53aefe66242e0981fc260a68645e0a5
- TLSH T1CBF0021B31536DD3453F6D35FBABD60146512C0ADAAD0140DE5A50C7452162798FEA0D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 733B
- SHA256 a715831da4a57dbd6e43cce63171461b4f1fece07d11bf6dd976d8d62ad6946e
- MD5 8de40f1511e25e296888739148554ef5
- SHA1 c2f6016dc8431a17ce484c693d6880be0e38893d
- SHA512 d3264fb48d5c4a25a869c1c7e34e5e450c5d69e47258e80fd69b6ee6ad1aa9e366cf801b11499b1eff05bec8918867879c07fc7a52336d11e188b3bea80da05e
- TLSH T1EB01942D88907F3E3996A3A672D2DCEDF14EC760426C586E08E58805A8ACC2033362D7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 909B
- SHA256 afd646b2aa80bbc525239a19e4c7bb0001e1dc7664a38a7e86001d33a11f9093
- MD5 f0ac47da02da5062d2a892f56486aa87
- SHA1 c8f8d774b6407949349e9415f3db2b301ea6dd09
- SHA512 ec6f2955659f003f44b79f6e5c157b3e13aee6678b9a8432bcf303cbfa7a502cc38f3675e22318aa806b15fb333b769aaa55b4a3f28947f3f4bbd151b9222650
- TLSH T1AF11F7C9A28F153B790142948C3593822C173CFA8E8BCEB831FE23010E995F0E464E05
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 1KB
- SHA256 7adcb1497e1d3f13c9d05683169ce9a36258ba7083cd6f1e0bc1cde15f56c7b4
- MD5 c91c7972a5811e72dc53f7229152377e
- SHA1 30b71437695e9eccde2910fee4ec6a856dd67d2b
- SHA512 5a305a8acb6cc7130f4c67b224b9a803b673925a17c2acac14d7a8b177a996edcf86d24268fb8e82aca99ce2b1943cd3ccb0cc236994f518445f47b45107d84d
- TLSH T132116350C2688044D2443B4FD0A9163EFDE99B47B3C1836AA65B096D1681E62DDDADE1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 1KB
- SHA256 4c6a9a58268ab59f153c499cb2487691b2e829f01aee5fe023999229ac496e7f
- MD5 2f7d77252057fde9bbc3a944cddf5c6f
- SHA1 42fc219373e1e5105a28d1ad24a86d46b35d6e5c
- SHA512 8d37c5a1aa2f43c01ad7e86b477552a0fa63bdfee3766e240dce3209d14e9ae153705c7ecfec647a9195109214b8f169748afc1c4c39811a0224500fd4379e8a
- TLSH T11321B72F940F6D8B110578F6CE2D386ADA4D3EC19AD403E2F48E9449D4B927A1618C54
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 1KB
- SHA256 35c51bfdb982c2271a5bcaf4ba720b69a36d6c5a2422fc11eb5672baec5ef1c3
- MD5 1619d8fc6b464d44f92d0c3b841b053e
- SHA1 cf6b116905f0d1e893fb4372653ff940e6a4cf6b
- SHA512 ccb87e2c80908d8f2bc90f4a45de7fefb4b9217da2ab54bcc20c8f544c083f57bb81bd48cd23094d14d5e48ea6f9bd47cd87868d27b1a63f9d4d9cf7a0a53dc9
- TLSH T10C21E94234CD590052E75250FC580FCA947DAFCA39AA2E61CF2AE4D5CF56E8A3280541
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 1KB
- SHA256 1a98de324bfd10661d74ccfb0f942d80cee3308b13a5beb4a18e1143bf840594
- MD5 33499d0ccc2a54aad06fa381bf8f08dd
- SHA1 1d242b4189407ee68b05a7d5dc4c1376aa4cf834
- SHA512 bab8dc0b6754852619767bc17d297ee75c00a19b706d677e9a33567dfc418f0eb3b451b70987846f4d3280b4b3433077420f39de9b72d69b27b41f87eb394120
- TLSH T1AA310827B780F0812C48B559B160BC2A9C63C7956852EC48A23AA18E3DEC0F7B192269
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 1KB
- SHA256 5e08558aa134e40415c1e4d19901b96f4dc332480a09359158eb9faae3d0ac98
- MD5 3006664ab4c796abd9313f93fc8d1cf0
- SHA1 490a7c7f3fb55af0601135b1ee014e746060ff21
- SHA512 4f1f9fe1525eaf89f56e7c253e90859b0e6a80dd7561e8f0586bdd3e510dd0b5774342495084784ae246853c67fff0d488ef634b7f1d6cec843c5333461869c6
- TLSH T10331EB0C6B95943A46033E6B22889FE4900AD8C5EF5F98512CD968205A7A1FA573E54D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 1KB
- SHA256 7ea546603567dd1eb3aafe055537e243f3c52dbc9453492f52c0a144c58a2cda
- MD5 4f6cad6adf87e8471f56ddf243f0db86
- SHA1 55ab88146c445054e75864cd02cffa66816d8ab0
- SHA512 513cfc1d2429cd899a630edb03cfaacb35deedbf827ae2e46dbf3c92d9d9f2089cc016a961ff528329e70566280fa28da1db03e9ebf1c418e6a6c5ff87ae2ab7
- TLSH T12E31190CC6A10B463DB7EADA81B9029A8CD03906ADED4DF105F3CF691E04C227894430
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 1KB
- SHA256 f3248a43ede963a91196a268099377d3612b12e11fbae8472baa08f8209b7f34
- MD5 19877883efecf3f7d5c72601f4c06a3e
- SHA1 3abe7a5b2afd36c2c8c0a37c580aae4ab4d1ba28
- SHA512 448628cda1875416d32463cc639c5002a704cd976b5ac48cb9b009ea4f89d12d4c4d65e82309d448956f08022148cd24c4405d5c0be6b646edc3f36fbfe004ca
- TLSH T1BD41086225141AAB9A62A32D4E00778BEEC47D69E7F5B6C90328A11D931DD8342EB0A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 2KB
- SHA256 7a6444ad2847a73ab897b464e2f969abdc074941887e3ce14acbc7e6081f9f55
- MD5 b0a0b0e2b708d5097a6840304c032cc4
- SHA1 9fe5900c91bc64caac4a51c03746a470a0ff3580
- SHA512 aeb0585d3795d453105fe76d57b79276eaadf4ebe79375940af343bf315e8587907244db7593c4aa81a66bd54e2a280cbb2c362b14c0310e4cef11642ff5b4a1
- TLSH T15F411C2DD2067B3049EDE134C094C9B6C9E9A67CB418ED72A380A5E25C7326DD4BA126
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 2KB
- SHA256 60cb144f6f3de69c0a7020057a4cba704482d1edc6a1c7bca9493b8d2da69ddb
- MD5 248406fabad557c19f0f559590aecc1b
- SHA1 a3e6bbdb67f6d46f4f660fbd5ed53e528347260d
- SHA512 d5916790f72b40c8869508252a2e3bf77a6942a3890d10bf4420e616953b9b8b46ba1fbf3b68b78406de85b533b271fa613f6810d4a4a3f2cbf6242ab2a8ca34
- TLSH T19F414CB2D717EAF458DFE4549872B1A14ED2D4032E1832617CA668796E373700374357
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 2KB
- SHA256 dc50c9d42ef07525e04c0a7bd95aaac7c718b5e79d6a8bd1ff9a3b1487cc32f1
- MD5 30696a21e06d0a754b415089095c7a64
- SHA1 161adb5954a104e165bddc821198b6e2ba05d826
- SHA512 21a3cbc6e2bc062c330af3cf5c36848f7b04206550a5205c0050199b22f13ab72239639cdb48d0d2d4dd9147617112f64298a32bd0af0424021ec116c3677c63
- TLSH T1AC410801ABF1C449B244D8342EAA56F71C126C6F62AB526EEEC422DDC0C1B1EA6C1C39
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 2KB
- SHA256 e354e4b8c2f2511863677e6fb13decb17e8c931060088b495439a0e995b3c5c2
- MD5 df8c68063fb9c26748369d53139c24a5
- SHA1 ccfa4b68c929b352b68486f092a356c32357369d
- SHA512 38b4d6f01985d621c49f020b001c6b554b43fd8e2650431291639ed6b312f4521e65dee758612dbc74abac0cc32fc92d7e4ced1d460a9394ec988acbe7c6ab0d
- TLSH T159412B9812031F49E93058B93E6A8859061F6470CBDBC45E5C795D7C631285787E0FD8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 2KB
- SHA256 31535b311d38b7eff1a7e22791ed451218e5ecc78161d0782708a4426bfcfe54
- MD5 b08c7386eaf006a050e401599f2bc4a3
- SHA1 300a0b782da92490ac59987c878bfb81f9e7438e
- SHA512 9e510732640f7b0fb7240579458839752c0879f86bb809e2a1437ccb37904b2ee39aea30c6f7ce945d1e86e21123c6913a02ff7f679a76bddaad007f4a25ec0a
- TLSH T1A8411D52F15B4C1F1A1001A0E46E84BDE5DC5F8BBE93F47D904F7ADA4A8B966C69B000
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 3f49563317e64dc5ca69fb08f59c5ef6202da3cc387f7151cf9b49c89aa3f4f7
- MD5 158497d818acf70904d4f42cb96189a6
- SHA1 e20cc17b06ee7963ca8de27c43d5685d20f7e984
- SHA512 3fcb93bbb6e3d27ddc3129dd9c60d304a9256830c3a024980e571f695486e39fd6eadf2cc6a6f3bfe7f3413d28794ef5106c2d1ff3282987fcf0e788e6e91d9a
- SSDEEP 192:PANkAk5IQ27WCVvNO0K5BAYj7PCV8v3OByKnhdPlbz86f:PAnwQWCRNOJj7PCOfOByKndzd
- TLSH T1CC02AE0769C41918AF584AD8FFE91CC24315049FEFDE7FDBE41802189162AE52FCB1A7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 cf5cdfd8804f12ce7c6c5e4e7e25e58e8d849fd75db7d75bd93302914fd0a10a
- MD5 d59062ddd663ba6d00ed91a6e82af469
- SHA1 9fbb1814911d1849abc38dd69a27579a20a313bc
- SHA512 e31f4c3cea51af6abec904ca3345c0938d00f67a14d1c6de9d9ce70d0f6725107d964565febe21717562f38422aecfff6541f6e832e322c7722fc9d55311c362
- SSDEEP 192:YMLZVs1ZHb8AS0uaEXJwI0DnDUdrq3A+PEiLE08LzAxkqAVsJKyDti:YMLZVs1ZkVwKdrsA+7LG4/wsJKV
- TLSH T1A302A00C0A4EF7C500144A85725D637F6237A9BE75137B148E1EC891B29736F29BFA8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 e6498d318e0ee44176f55dcab2dadd55a4a5f84e35ae686f3e832911fd8496ac
- MD5 209e74e12edcf63fdd59fa5eeb82cb3a
- SHA1 7ad50e86798921afee8e04839425e77e383df6e2
- SHA512 6705be26679b0b1d3728e58105008cce948b9419634aed723dba7cff6433c3652ff839269b66f860a79146e64cade8fd2eff93bac7f06fbb046d10352d4154da
- SSDEEP 192:UhxcdgaqdAbWXnlPqbjWhdkmsBpGXsCqt32J+gwv9ID:vdoAYnAjWhFACa24vI
- TLSH T14202AE09A795D37E9979E3114F60D142ABCFE98BA339A2353227F3D35708C28A554982
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 93bf4ef878b4e77126d1a9fd11936f97fa8c327e9123f8c66808b69a3d53ac13
- MD5 a85698a28df536b83f09cf08fc46d2e7
- SHA1 5d9a0bfd15084f56f7079d4979aac3c35b68e32a
- SHA512 3b772321601996fecf187d4e9c35afed528e188810143ff901a8562c3ea698057d72e866bc5c7bf9f6e09dd51abe98d479c0ed52629b2cc86228df125d26f497
- SSDEEP 192:riXC7CAeX7rH16TOTAi0SHLB9L2tRE7CHsjSUX4XhnGIlcA:ry607rV6TRiHTKfaCHsRIIIR
- TLSH T17202BFEB458690F282861157FCF24479231F424ACA9A9E50E66C73C17291787890F1E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 10KB
- SHA256 48ecf112d54aeb4743dbeb34a732806c7c5995e3dc6e57d37947f7484b730b37
- MD5 4f1aa800c7e33f41169b1c73afe62d5b
- SHA1 28da9906ffb4dc23a110b3662271ece63292a8ee
- SHA512 36e361b80dcb3a8e7684368efef91bce922c7b39dde13c661b042487fdf154ca6aef79fc3a59c33f9642d96d165d2fb21bcc1285f7fb32a0ea2282df0fa36f6e
- SSDEEP 192:3JDFH9EpIG3xUOIKzLzjHM5NNx+t1tnxZk/05LepeEArAFN:3BFSbjI87HyH+tvxZr5LegSN
- TLSH T11632CFFD88687C61E52FD5B75576E2F81C2CA8A9FFDC257C1E4D01309A41CD826E424D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 db785781bdd4f673cf6e5b2974f365e0b376473a35acb11140269f1fa59b60c4
- MD5 8c8a507f7fdc2c9923a5cd32e2769ec3
- SHA1 d19826a60db6e937e91eb5ee85bb60eedbe05d10
- SHA512 cc95b452908859dbe19e26280a6b80a10d01e87dce1330d04a7f01528df53920c48788739db20d1ce17daf14be26a15372f02fffd6ba92b23862aaf74eb1af43
- SSDEEP 192:Fn85hah3yNnJhw9oFwVGpyR2BqHfTDnI82pFhlWGLqSwKExmVD:Vip74oUGpJqHqrcGKxm
- TLSH T1BF02AE458E85B6ADF3828A3B1A250FC330076222CC7F34BD6598BDC6E7890A453B5053
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 10KB
- SHA256 26a35673a30bc166b2b053db729dedf8875ee1fbfb583500b57501ee88d647cb
- MD5 cea940bceb4ae8566d7988cc5ad41d3e
- SHA1 f5fb49c9060f2d8191261cd082376202e3c8c155
- SHA512 b00811d21b60bdbeec6a9b98e6a6d7432bce3c98e42c790a8f87fe7fcc81e3c41a724de8a70b7479fa7df3e526880372ddaf48ce419bb3119336cb79ec3f4974
- SSDEEP 192:Hc0bi9S6NUyaXPjftuZ/QkDNsWF4GBDMDZsS/Mu8x7eGPQ1I/OwzKuvz/m3GisuA:HDrrluZ/Qkh5XQsIXOd/LvUGisxUMODk
- TLSH T15F32CFF4B4EB64C586D74803E1B9A36B95342E09190862A8BEFD7270B7021A5F35CEF4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 10KB
- SHA256 19d408547d9fe4c093ec449c71d426b0282b5fd205223c1a36f8cab39f228af3
- MD5 fc63cad38b211ced317e00d0e31b3ad7
- SHA1 0995e2b3c6c63b192c8b779f816a3e297424ca73
- SHA512 d69271764e3ab06c27014947d63cbf64c3f8746f5418b01102e597365def46d67f9cdae71a0ca5d1501809f00f409213ad094c8fb5d95ae354f89fda5b73d253
- SSDEEP 192:bMscrzqkLi6y0bMFeLQiipxmjJq9GSugLlvlqZqh8S4aWQxsNdF:bH2qWq04gL3JJqsSJLR4XSMQkdF
- TLSH T12332D117058D3CD20071F8C9DD8443344A77023E9A27D881B678BDA9BC11E7A939CF9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 fd5c8ca8c047f64304661d3be28a68ee962851009d6fbca1fc63cbcefaf43a8a
- MD5 b2ad08753952249d6de8fedfd574eb68
- SHA1 6c7d2735aeb87b5f46fad5016c638180953ba055
- SHA512 22ab72b7f713754012efae05cfab97597bf52af36221f0851053797e2311e93bf62fe3777e00d1ceeecb97d636e5ad0ef5f85612e5b93f85383289f0395836d7
- SSDEEP 192:P7n0uJj9kd0IZelPyxTNoyS3TO8cTkKVRIYZ5cDJOv5a49KnlmdS7ZT:T0oj9kqIZeqTNqKxkMR1Y4An3ZT
- TLSH T1F7129E5C24B2941F94FAB7F0B6E32855C14DEC13E680DF9DACE8243B66733191B02027
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 8KB
- SHA256 ea8045cfad050b9d9291bf6064762ca59a245f972f572861befb3bbbc90bcc63
- MD5 2dbaad50de972e6220df1f74d7673a00
- SHA1 3fbbf2f65db9c400580e458a016251ff66556b2f
- SHA512 aea59dbec63d62ab3527384b419f2132ddc425475bb89f71d6ed322fd063ec8cf3322901fd8c427fd4e4eeb9d56819b58b557ffb7a007b6bbe7c7e30198c4866
- SSDEEP 192:VNHS5FK3FNhwt0QvDEPhn0n6x5TONP1a06YntlaX9SHJ8FS:VU5FCFuVvIJ0n6x5CdfEXQ6S
- TLSH T12A12AE729465E42626FD87EEA9BF55E16E8B87FC63CD43062D5E138004B75CAF3024A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 11KB
- SHA256 7fa4a9c003cf157485215c4464152cff34df738a8d3cfc9dad3545891189326b
- MD5 4920a53c65f6f08549c12175ffbb96bf
- SHA1 cf5f80f5c07be71231da6bac32c23aa1edcb7e19
- SHA512 54d1efeefb7cf571796a04a2256f8f1486892a22e7620d703b76ccc8a9bbe074f2a3b20167970e6b221b3b716acbf384897b4cacf1f9a224fc0650112e5805de
- SSDEEP 192:ocBC+LjYi5rw6c3VKUI60TJMGNWnc90rSjCmshFdiB8RhoZ9:ocWwQ/I6hGIw0e/AcGRq9
- TLSH T1A832C067AE14E6D3376A7E3C90CBB68DFD654A051CA521730C7D37CE6074C57A4A8112
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 7KB
- SHA256 9fb247c00bdda7de0aa56d868ac195ae84f57eb7cd9d4cd94497c596c7a6e1bb
- MD5 7fa818c2ce48b8682603c8a63c62b00d
- SHA1 af3c85319ad6a335271533d9ec632766e37c0115
- SHA512 06448a326938d32440d4ef8769812b4ce7934bd9080157bed2670dd3a5c61b3e0ca1a6f1153c0749de460d6495e76ce5f480f92201a40df69a38d940e7dbe13e
- SSDEEP 192:TjpA+cj+wYIOMqRtkQaRe5h6Y0OMSYrJsuvQlbs4ydEomx:Tj++cFYkO90lTSY9dU
- TLSH T1CDF1AF4D7050DA150C662CF22AA82BB9FFA8015B05A05EF13DE44DC7FBE858E6AD6056
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 b58d5ad3e9d729de7e1ba5dd39fe1647008c4fd2138afc386b6d02ef7b408218
- MD5 44e9aa4cb70e2527a88a9027b8970cd9
- SHA1 cbbe6052aa40b977c4293be6dd5a474a9c6369fa
- SHA512 affe10f6d803299d8342a5bb5b3224cbb6c29d9b75a20340a3af49d60a3ec082ba5923e7aa1c43f3b2c60d2dd734d99c4ec1ac2a7c695e863f5466e0f358a54e
- SSDEEP 192:2GlCWOf9VUKoM1+wSEJ0uWsBdJuDbOeli4anhpJnGMeKp+1eDjkj0Nd0isl76GvH:hD7LM1+FTYJuDbOWi5zGMJ+eDoIn09lt
- TLSH T17012BF2355294F3272824297A1C0B56A33B1CD09482AC7C6163377CDB9D568DE6ACDEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 7KB
- SHA256 0f23a9fd23800f2bdf5c627115a47ac59caf4c6be906b5eed3f5989f7e0397ba
- MD5 c86e1575babfb173a5e9fbab4c9d13c7
- SHA1 a1dfcb28aecaaa3e4d919d05e07c169367175a43
- SHA512 ae226e427bd223b4d36ff3d1774187c607b076ccd6ae77586e69b83c80aeaf96ffbb60c1734ac950426d5ab2a723aef74201fed70101023b67b03fcff3c5cf58
- SSDEEP 192:v2BeqSXPw7HNQslImtPz6WJ8cF8V88Kvm8cTgX20RUBj2:v2VS4Dzf76WyW8KO8cO2b2
- TLSH T1F5F1BFE56F24CF82F121D253703D27A68E705ED239A1415731E2AC0F03B9AA06B8ED4F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 11KB
- SHA256 8ef7db0c3ad2d9277d939dbb2efc0e8207e8bf013eef234a1ea1f9acaff49da2
- MD5 a188e32db03b54880c75575aa9b64e30
- SHA1 2450a3b0cdc6bcc7ce16e6facd9c0deff443f36c
- SHA512 06960f901fbe44076c5475f8425492832fbbad9fe422fd47ef4149979e0049c2599af533e7cffa61058428472f055420cd7a929f42ad715022f03e33b1943d76
- SSDEEP 192:0ybxog/SxlTlvEVl32swNQboLMgMmGyBCrXJ1LaxvCCZSiKplXyC1nfJuELJecTm:peg/SPTlw3v4VVA2gWxvCCUDplLBZL1C
- TLSH T1C432CF466EF56BE47539EBEE31C16B31FB4239EB4DC8C4279B1581AB80834C147B259C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 9KB
- SHA256 719b679423b37620c6db6455b3f22f96ef8eb57901ed37bdde6b7238c63b8649
- MD5 7829fb62a15a40b29c17dcd89e40b0cd
- SHA1 9b205e6952aa104e27717ee804d41d4af108bb10
- SHA512 925528eebcb24d2b372d8f1e0df9f4ec9ab4e261b9ad17b87f0445e4e10852c4a229d50332e4a6ffb8cfa844a6ab48285e64ba061bd0d8a6ef07436cc40d96a6
- SSDEEP 192:NBfb7kH5cyBquT+hkCKHioroEgbu2GWvb8Ce6Rq6JbxQYj/loL5KYy:DfnkZcyBZCMiNPK2xzG67T6lLy
- TLSH T18F22D0F2172D0AC8DF7372DB0AD84DE836A73F62CD1892417F25E9358C16904CC52AAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_312fcb86-4c66-4dda-bb13-5640f2df46e4.raw
- Size 10KB
- SHA256 62faf7418f82df5ceb534201d21760c43e16a3b26a0361471c4bc9b0777c185c
- MD5 57e7f8794071fb69c30ce403117bad82
- SHA1 950abd41c7b16f6802cef1231e73f7e745179d21
- SHA512 7068ca7a8aef452a6e001947540cd833a92a86463346faf48cf33f201449e7a5cd57508d37538ae155dc0ab3548b757d9cb4ed90c8771979f142a88ec75758a8
- SSDEEP 192:avVh9rLyezBOM+BUWHNTOxfT8GWIoNEx31rBiIvlEDHVvVlxMCHMhiCXqrj/JqO1:avlrLyez+hTK78GWIv3ho6lSHVvLxMQN
- TLSH T15532AF3A6E02A1025B45F1AFA1946E0C0D115EE98ABBB0ED24443D7D362F5357B57533
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 507B
- SHA256 792f8d9ba79579c7948fcbf6be9e775675f353d94be91da37f38e1e746f77c8f
- MD5 09465eb20a3b63c06cd7b16a2f182622
- SHA1 5b6038e53664a353391f60bc9c4abbd6b675973a
- SHA512 be65e3860603acc2c5076c8846e48799322678ac90fa6c5fa0c0bcd5754ca42d6f4bd8fd46dd702688004321102d16e91f78f8a72fb3bcbaad312aafe1ec96e9
- TLSH T179F09EE5AC155232BE9DCBD173BD74A6D7A78898E84444E3C8ED606E124C21D4A04362
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 599B
- SHA256 e26d9ce88954ba0289cdf6be073c62a0f554e3d3d6ca0d3cf126f3252c49224c
- MD5 45dca3a1e446540aab18cca1e581152b
- SHA1 c99132270aeb432bd14d3f18d07cf2243e4afe4e
- SHA512 c9362830bed482769a3c92eb4b2c62690275de49322c504fd3c0a0ef5fb626410eb288e212bde41b95a5ffcd15ba5eae449161b584f54af6ec61093aeebae658
- TLSH T177F00CE5A81143316F4ED3E13BBCB86AD3638498E85800D3C4ED204D128832E49053A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 780B
- SHA256 2113682736f3581637a3fae8a51e6caf339fb7742df69a9533bd76230e4d5143
- MD5 95af24c31d5e4c49ea9af9790dd9b090
- SHA1 5738f4c2883b363d36848354b1798c97e1878f29
- SHA512 0e3e92a31293b5b5528f79132179d1d31f2af3a477ba56f897fb70b25ec7121b63a3137be5503b744a8455739c3b1114ae041fa4e85543e28b7bedcb275f9266
- TLSH T1A001D0D764224331AF4EC7A17BBCB458C36788CAF8D844DBD49D545D02AD76F8A01292
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 871B
- SHA256 b8748831a38eb36f900b7052f6e428221de95d85a7efe823dcbbed222a313840
- MD5 e18664b520cfcff9611a4dbae1c80e95
- SHA1 5e1ee98a151e2bb338ea213c7c2f7672949228f4
- SHA512 51d1add4b69a74a6aec9d5812f646661af15ae368e39bcc97c2d6d2416a7c3cfc0555ca45367b0b79f62fa0cb6f6d6229b45ca87f1f483ddec0603e9abf8e41b
- TLSH T1B71112E7542183206F4AC7E5B7BCB498C3F389C9B88884DBD86D686D129D36E4D40382
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 1KB
- SHA256 8cfecebd04a7ddc1ef2f4d01e2dabf0cf8c3b6b734305f1de0abe00b3a2e722c
- MD5 3268addba683356b7ec18615029d3631
- SHA1 9f33cf73738d3849fd09821ad1ed9f5d550c4ae4
- SHA512 4372651ba0ba2528165068af434c2e7b233edae9d9e865562688a00e7a0ead32c3052942176dc0e12d3028e2940c95d47272283f79f2ff7e4a4da01a13e0e24b
- TLSH T14621EEE7102583316E4AC3627B7CB4A8C3B388CABC8455DBD95DA89C02CD3BE48503D1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 3KB
- SHA256 7b25892fd7680b504fc12e22e1c934d35bd3c2447ed6764f451581fc2da7be39
- MD5 05c083bde01f59038a043ba9fc0a81f6
- SHA1 60154d4af4a809909074266a80c4a7d7983af643
- SHA512 a8e064783cb04d2d2ded8286e4a24a5a33379a00913151730aa0c70f0379c2f5299f2a376a9bcdd51b45f42d5068c1925bfc63a7a7d357faa73b1abebce2e99f
- TLSH T18E71875184619B325F5AC7AEBBB57F0A8FBBC193704061DBB5DE404E07E96BE4413243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 3KB
- SHA256 b3a699ceeab8cb8cde2e70036915c467f0f0344fec75ce253f1c90802b667852
- MD5 3790bab98bd5ddb4c2d11b098a785429
- SHA1 bf195ae5f71f927319da752b5e78d57a56713227
- SHA512 b61efcf5ecc7550efe8854763fe66c42213fd86ff9b443840750fced556334e6b5704c196a02383cc52dc9014b5236e92e7d504ae014162b8adea6ce53ec0b3b
- TLSH T1E171778184619B325F6ACBAEBB757F1A8FBBC193704061DBB5DE404E07E96BE4413243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 3KB
- SHA256 737a6d795d796b616dcf4288d0cb4400f8b006953d8cc5e29c1d505a863c50cc
- MD5 e20b52f3c8ba2e0fe7bc8193511c2449
- SHA1 07fe3e2779ed8819f5ab91161ae4dc62fc09e5ae
- SHA512 587f21468845520dd8da0619f6535b8e9122cd55191cccf7b63195c3567d0c86275f5558d6cd7d64218a24e7ae5242cac8a0b8ab10653e2065e7ae3af422b353
- TLSH T13881878184619B325F6AC7AEBBB57F0A8FBBC193704461DAB5DE404E07F96BE4413243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 3KB
- SHA256 e5699027d60177d7523e2952121ada4a2d57bd4f68ee2ad18e19ba4b3a1a5b74
- MD5 808563b2bad5132f8282a1ea117fad88
- SHA1 2e21cf1786f7a9f08e56053394b7c6d3dbde14ed
- SHA512 2ee074c71f9a212494d189febeff2dda2bec14dd0b8bf1bdbaa319a73f95bbcac89ea6a28a0b8f4a271bff2848aa220456562a0a4c095ec164ee35fcd4616109
- TLSH T1EF81778184515B325FAAC7AEBBB57E1A8FBFC193704461DAB5DE404D07E96BE0413243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 3KB
- SHA256 f19059983480b3305c696263bf3d41b400cf7bc65a6cd9cf45d78b67e0664fa3
- MD5 0577e9c85de50d04cdb09600a71796cb
- SHA1 60291edf589cffc1bf4b31efaf370caaccb94dff
- SHA512 000c4fff155c7a317bcf050fd78902a3be00f65a5ab1ba1c848e8b29383fa3d792eb6aa572ed8ae1fabce13d161e5532139d2635da01a12712b8499ee2f9000c
- TLSH T15281664184615B325F6AC7AEBBB57E1A8FBBC193700062DAB5DE404E07E96BE4413243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 3KB
- SHA256 1ecbf31dda603aa9d4e9b0e5f45a84d76c0f7a5f1534692add386639eebfc2fd
- MD5 82a559cbcd1df21178a70a22e059e6e3
- SHA1 8f1b3f3bea92d52735d8ebc6f08060db7a7a9a7d
- SHA512 0658510c94dd513a1347e12b648bf99159991aaf34ffe58ba47e7402bbc733dacfa3a70aa8cc029ebaedcf60d434787201065ef56ff9163d8d3d4baf92ac6230
- TLSH T17981748184615B325EAAC7AEBBB57E0ACFBBC083701061DAB5DE404E07F96BF0513243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 3KB
- SHA256 669d47357893fb08cb9a1cb449c3e485b785f87a31572cdb6250302a7680a23e
- MD5 5163abe170d240131b937e8584508d2f
- SHA1 82210d92030c55dc88a4d53b5a9a53e4a4c9a4d7
- SHA512 58d7720f7f129a76a561bc916c79d6ac22bdd57cc1f676ea21e5bf4c82b9257f7617b3dc050de47c2608a8df75baeb0ddb41db1425a9d2d843ae473f7b8e0295
- TLSH T19F81655184615B365FAAC7AEBBB57F1ACBBBC093701061D6B5DE404E07F96BE4103243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 1KB
- SHA256 5b8503eab1c75e7f25c5a8a835691d480d3dc10a771c9956338a15bf08e122ca
- MD5 3532cdaf83f7e678ed740fa054bef9ba
- SHA1 36092caa45b74f029d1ddb41adfc7dca74d02c8b
- SHA512 e3e4734b3fef1ac2f558f777e385eca56eeea71ece7b6b298d79d780bcedfc7af4db9cf6b2af2f3beef21368386af65f31aafde3a1edf680e5a397ace7c3814d
- TLSH T13C21DFE7502587315E49C7967B7CB468C3B3C8CAB88455EBD95DA49C02DD37E48103D1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 691B
- SHA256 2be02fce886bf8f13f2c13fa569813e5770840c2154aae75d904de9fdc4bff27
- MD5 e7d10167180cd417ae0e2790a46ce109
- SHA1 a6f038caca2ba8bf6588a0273049344ea96be4af
- SHA512 b6cd632320b0e596f60759c7fa46d6ea7fb5162f5dc1d9ad5515fcefb8bd1a36a6507acc9ad1ed91d11377bf25a2367acbc891968533c71952502c2c817132ed
- TLSH T1650123D664114330AF8EC7F037FCB4A8D3A3C598F88844D3D49E201D02AD36F8A002D2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 971B
- SHA256 ea0dcb176da7b582408ae2e6ddc404899703c22c5326363520a46ebb4a61d2b9
- MD5 cb6bffaf2c41a153d5656a2f1d7df472
- SHA1 0bc180b33d68116f3e5de4e17c2ff9dd956c4067
- SHA512 43aaf1b26bfd44d3821db000c960f9e26fd43101f2599a7cb9c46f00d8d96835afdae6f15b37cd820ad89e760fe25d6882ff7b5d7d2a7e5a996bb5af8fc6ae24
- TLSH T17E1110E714268330AE49C7A43B7CB469C3B388C9FC8844DFD99CA89D02DD36E49403C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 2KB
- SHA256 313424721b2001ea9ead180b542fc752f0bb274cfdf72c1918fa26d39139635f
- MD5 0c601bcac014d315ed0a216eb0c86eb1
- SHA1 75bdc870525754514ba6208439dbb3c23814771f
- SHA512 24bcaa6191aed1cabb717a7d3bdc49e1eb85259b0a4f56664f611a285b793c6acfcf7ad6ba4b8edfda73d454bc21353a6a5fbc28f6a4390b6e5aa3613af3f988
- TLSH T1735183D240618B321FA9C7AA7BB4B91AC7B3C4C7B04451EBD6DE944D03ED77D4402392
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 3KB
- SHA256 8937659c4f025df0a205ca430e0eca5651c64b06a9f8ccd2eb3f2a44b15abbcc
- MD5 c6f928c7fe9da833c525e9ee9254fe7f
- SHA1 adffb618b01e5b0918ef7ce5c3fedff9605ebcd3
- SHA512 d4af13a30156b5ddb35ed5c674bbb061e0e3847deee70ad2131cec2715ee80547a033b1ab9b7fab464a49635f6e940193298f798be8014a7ab1c8011fdaa91b6
- TLSH T1F261548184614B365F9AC7AE7B757F0A8FBBC4D3704461DAB6DE404E07EA6BE4013243
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 1KB
- SHA256 29bd23e91cd965d7c4830601055baa4455edc2d85eb0b4eaf4099266521248dc
- MD5 17a54fa5a7a2b20ba6e8556bb5154dbc
- SHA1 f293a5b00921164c9cee0b0910ad60db81b64ebb
- SHA512 678a596da78e44c389241e40d4144366db45c32bc79d8b25f7adae80a12221e3a97224c78687c8fe74f111dc007fde195bd6940ed451f538b5a16ee233313da3
- TLSH T1F711EFE714268330AE49C7A17B7CB469C3B388CABC9444DBDA5DA49D02DD3AD89102C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 1KB
- SHA256 dad31476d9bed16cb560a72783ff5cd0156728d22acb4440bd1d8debeef6d1c1
- MD5 ad0e0997fd03c867aced440606371fa6
- SHA1 ce3f9fbe5feaf0dc4c2d64a728b4936270cc186e
- SHA512 bce87aab551e4ed2eb7c1381d5fbed052953a7644323c8562118cb8cde285baec87a6b25e9f7fb0990c391f8767b7b186037503557da213390184adafd686440
- TLSH T1C621BEE7102587316E49C7A27B78B568C7B388CABC9455DFD95DA49D02DD27E49003C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 1KB
- SHA256 7ec8442b3540a0c38da811b37cdac880038ca07f75b7a8aa1e6ae513bf642a50
- MD5 f7322479b18a91069cabd8b8ebf386b4
- SHA1 91d5a1e5e43ce9e5b0d6066799e575cee84f3029
- SHA512 b5f8949849ef4262d755e128af0c6664a3b7262b79fb4f6098342ba5b4d1b918384d9356a010945e86e60e5a921715f145d56067af130125e95d94b098acf09a
- TLSH T1DC21AFEB102583306E09C7657B7CB569C7B388CABC9495DFD99DA45D02DD3BE48002D1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 1KB
- SHA256 611c746c19992ba96ff7b9481c732d2a405dbdfd00d647587ff479c68c668690
- MD5 3b7dff76c12cac920df1485c241360c5
- SHA1 5131a88d24332af945bff59a1a6c5987492af040
- SHA512 e70a06445b6827b98d1a0bf1380ee7d4b733365a059c9724b556876f1024e5a04963d3934857cfbef9be4d22fbd64a321cdf82cc5e1413648bccf73677071ff0
- TLSH T14231E0E7502587316E59C7A67B3CB868C3B388DAB8C455EBC99DA48D02EE77E58402C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 1KB
- SHA256 215d8ed9045f442622daf2076efe133e11e1d9d1828da1651f93e2d145105984
- MD5 9bbcb01665c4a731087091a4740070b4
- SHA1 592092274e748a22b15df1295d8e3cc38a3a9980
- SHA512 c5afc0aa8844631d8c8506010ef2ecfa65ac95a118d40aa64f41bc18638dc45763e13d31d8413808d912c417db08c552d2fb1fbb9111d39e5e7054e38f4f7bcd
- TLSH T1443123E7102583316E5DD3A57B3CB869C3B388DAF8C415EBD99DA49D02ED7BE5800392
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.0.1137936813
- Size 1KB
- SHA256 30f0cb3866b37d74052d36589d3e86e5503bd069ecb628f1a802e9d8daa39af1
- MD5 ae97a9f82bb91902eacdd610a2acdcd1
- SHA1 df40bd21b147125cebe6cfd2f57ed0c440c8e25b
- SHA512 966e427f7d68fb0a54685a53d1cfde546bdba2ed3bd78a77d09b354926cc2de20b97af41c74017e14d8fae6bf03ece5f6601386d921bd219e102c9cf90b80a04
- TLSH T1F13133E3102683316E5DD7A97B7CB96DC3B388DAB88415EBC99DA45D02FD37D4900391
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 378B
- SHA256 3b2778a41bc482682c6da8fba11468d056fc691c4d73d83f24c8314dc8ff0753
- MD5 a103caa6b5b551bfc2bd4700504aea5b
- SHA1 143229fad57905e732a240eb694693508ca42b71
- SHA512 37af12dbb6e2dfc4ab3078bb204005f7507ee8474077e42e0dde191ab5e31f736ff88e8603ba1765e6a5a339fa481ded4163ea92d4acbcdb320ff1e66d4932f3
- TLSH T104E0C005B2D15F077DBC84FCF7243B2390AB0D16C81015E881EDE10C1131E0FA701491
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 538B
- SHA256 25e020d16af0746c22c4be61f0460fafe46567a63e64a4d17a0ce98f5ee4a505
- MD5 4d815a9adf2a73f993cefa57709acd98
- SHA1 96ab3438ca43235f79534545143bb13205a4c553
- SHA512 53aada23c344b330d1d42df4bef8770dafeeb8ea55160f886e263210ea9e45b16f03bf676037b8c6057328b7464a3e5124dba2df91b0706a0492e6597c01659e
- TLSH T16DF0C940A1C1AB227AF9E9FDE2203B3740BA0D26842119B542FD901C01F6B1D1301525
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 476B
- SHA256 b24248e33df8c03557cf45ed76aeba1f62c54473b620695a3306362033cc1042
- MD5 3eaf06d36fb864ac5d99619199b2521a
- SHA1 e66783460956d38556a92143cb138952917e6f34
- SHA512 130eb230ea5b44f8a2c54e4c4499bf5af13e22cac956ab2259323e31b9a2e50b8f5c77a5fc01fdfd0b8148e08714e0ab8f0413d26872a6f58d6a6d0defef34cb
- TLSH T115F05C41B191BB1BB9FDD5FCF6713F6350BB0D3289615AF481EDA1080175A4E6701625
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 1KB
- SHA256 9938e6d91ca079df5a733abb3127ca2d04459880c6fb1ac99ce24546b0e95a62
- MD5 42c4a756c9e5bcecc18e46ab7e6e98b0
- SHA1 a82b7c1c21e05c3aacb4f1fb3919da6dcafb6246
- SHA512 5a4c7d55609065d8e64d8c1298fa1747e32736f4c6a3565b1251413cb9e9335c96dee5ba529eb783694df88c5cf2e6a4f4d97c19ba71c89bbe52071a43cc0f25
- TLSH T1EB21FE00D591AE772FB9C9BEB6A13A170EFEC553B11551E612EE400D07ADA7C4107616
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 2KB
- SHA256 cfefbceaddd5262939c2566c499d855018faba3c587859a6311665556e88a6f5
- MD5 b7afd6d88a9dd5b34b9e2ec31be0f1f2
- SHA1 8afb17bfcbbae4e62abee66c522e20729e20c4ba
- SHA512 29113cb8997f6291adb1b47695630f359ea26e29f52d184523b3cdf041973c9b55883585d5eaf939613775254b74c0b2ba798fd6a3d77b9e35d3dcc9964d698f
- TLSH T11D411500C8916D375FB68ABDB6A17F070FBEC193711461D972DF414E17B967A4017607
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 2KB
- SHA256 6767bcb4f9491724b303007dd4db3a240a993e597e6c6282364c70d67a48952b
- MD5 704be7961c69f3d212fc8eb03f4ad868
- SHA1 c974720e0bfc99b24e256a9f6e105bcef7335da0
- SHA512 002d89979a79b998322273ac03d3791bf01280bbdf50d8bb09fbddc762d1cb199990e974685af4d36f89d1ce34ff4deb1f6c8eb4417bea4f2023c8b896580ea3
- TLSH T1A9512300D8516E776FAA8ABEF6A23F070FBEC153701162D672DF414E17B99AA0117207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 2KB
- SHA256 5185aa87e73191ee7d0f5b58e3a8d5d91311eea02be84e7d8f9d162dadbefea3
- MD5 03fc80a0b1508b38045ec554a7b49f02
- SHA1 11139f6b8557873a9dc85c5673deb43340dd6af8
- SHA512 f48b0fd3efb1b746d946d57dfc4c0deaa9149fe874c002664243797cab6c9cea1ea153cdefd237b02e3e764b8492b026432e26607b9db54be7d0d711b220fd7f
- TLSH T1BF513300D8516E37AFAA8AAEF6A23F070FBEC553711162E631EF410E07B957A0117217
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 2KB
- SHA256 370e478dce66d0dea173f3d0abbb7b388b9f3af4a3ef2ba5636f7aa87dcb471b
- MD5 6ec109caf8204dae1e1e91a586ef5538
- SHA1 57079924ada68bd99d7bc299a662cecd2474de19
- SHA512 6248bcdd4568046d532ea9893a3bebe81eccd446701f803d6e2b7be357c08cb5a3903ee7f26ee45991de58fa1553e13e000f6a1ac370dd076121bf35b514eb4e
- TLSH T10F511100D8516E375FAA8AAEF6A23F070FBEC153711562D632EF410E17BA5AA4117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 2KB
- SHA256 99b128ce65c5418cce300842c6b3aa9473d5de76b9631b213854eb885916b3ef
- MD5 a364d124c793a19cb47276388acd3f02
- SHA1 037aa8dfef7db80bd02b1f660fca62bb887c4293
- SHA512 d4d1b4000addb66c23510d602788fdce5023447197a3ff2e3eb0e43b0f57bd6961ab90d81eeffc1e57b6b674026a8e98956e0016205f5ed29a764fba7872132a
- TLSH T119512200D8516E375EAACAAEFAA23F070FBEC153711562E672EF414E17F96BA0117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 2KB
- SHA256 7112c6be40cc3449feacb64d76ccb7f5a8f15240b58746d9de70b51992f7264c
- MD5 8d9ddfd624a094aa5c61c8ce6d9736e6
- SHA1 1569a849f842c31689c1d8ae060647a1adfb6cae
- SHA512 662d0e147506efefbd91e6f7f1bdecc2375d2fb63a2cd6ad03ea4cf098c6cd85ddf23232bd984c2a8f864cbd6941f225228b8a1fe067c50aaaf114c17f1c44fd
- TLSH T133513100D8516E775EAACABEFAA27F074FBEC153701162E632EF410E17B96AA0117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 2KB
- SHA256 1bef70c9ed4ad6ec0b07f8d9a289c36dbe11d165e46e00a17fe9b0537ad1b24d
- MD5 4a815a317554d0bfbbafa52cc705f3a3
- SHA1 022d1a7846a8a98ae2dcc1252232f7529cbd277d
- SHA512 e3403a117d4dbf7a9fb77170feb89eeec5931573903c22634806692ff4ffb74099f70533d8c35dc0e738ac5b7cd6f0d899d1a103cba8d4ee4f6f2462f5ce9b6c
- TLSH T14F511200D8556E775EAACABEFAA23F074FBEC153711162E631EF410E17B96AB0117207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 2KB
- SHA256 71c6507feccb7f562fe06f9e2d8b75ec606ad45894bc40dce206a3b26c523cd5
- MD5 741c4cac6e8ccd121e776c7a26d7a24e
- SHA1 4030b728860bade8fe7dae9a15d22954efaaf661
- SHA512 0eb315fce544eb3ecc5efa77191501000477e3ec1167b6466766771b4d0f7f386eeed4833465655b8c4d881c7078e63a91c422207618618755763a0df2300abe
- TLSH T174512300D8516E379FAACAAEFAA23F074FBEC153701161E671EF410E17F96AA0117107
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 224B
- SHA256 8f3eebd54282eabde15da6628fc0f17c4bfab9a306738e30122cf94974781088
- MD5 fd0b4dfa31c936f7f84abca1091697ed
- SHA1 f4ffcbee04dd1d3646b0008d86ec22258e75896a
- SHA512 805c35edb11236e9c30a44fd886075962dd4061f2f6ee8d3314096c0d8607f8b61413f079186cf15665c704b7bc333a6760d3ee81a4b1a1c30cf002ba3680040
- TLSH T1B0D0A755B1902C15BD8906B5F5A5377259FA18061901696002ED218805169EAD669A90
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.1.1723350346
- Size 200B
- SHA256 dd47a04aa6956220768c4ab08b4afde091d11c087292fb2d9747ddd1002be8c5
- MD5 23e0479ce5c1f98fcf73654e4319559e
- SHA1 4b432b50ae7ccfca52c6fd95b1e02638c6398b16
- SHA512 9f9b4ef57456c342bf8a2fed115eb50fc405bf36d535166f051b7089f8be031cb2ad5e40df48a4ca8b35882655194a4aa7e2396e04d10bb0bf66e62f8214e30b
- TLSH T10DD02272F3A0BC346E8C0BF9F41063320A6E04040A043AA202EE124C02962E9B22AA90
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp3328.2.603461039
- Size 217B
- SHA256 9e5f37c5e921e618f54a45edd14ea5d0d2f7245a684a290253707cbbbabb465c
- MD5 1823f9c1debdf67f958507e0697aae9a
- SHA1 d84d8cfbc17479d83419dd4d3ae3ff513d3bdc09
- SHA512 48b085ef5bb60c9d127a57d3f854d2fd48772ab2d613e19fae75dab2cbf0e8ba8861c1e6295ee64f8226ac097eda16a5859e0a0fb6686d220ed2a8e5f018f923
- TLSH T1FCD02320F1F0A9C5DC0D2CF3F454363458E201404500BD70004961500339F5C212A110
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
- Size 3KB
- SHA256 512d14272f05a27a622cf687df00e739af2fcb563b32058091c461d6a2a667de
- MD5 19d1d4183303ee462fcff58fe49aaadb
- SHA1 573fb40cf324a8d5941f25cab9f338f7dbaeede5
- SHA512 b53653ca50e811924701abccd3b4c351e6f2252a5339c5bf1393add975db32e025160ca04632d0727c71c858d450fdfb453ed3cec82faaf6b980a8464b90c7cd
- TLSH T15461E8327474CE3369B68A4EBA06BF43E7624003E2545FDCE0DE4E0C12F7A6C0766926
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
- Size 3KB
- SHA256 cd36952fc70d3103ac8c9e330f26c58677d35f789c1337590abf049a5315f52e
- MD5 0962823c6edef5bd887720244a7621ad
- SHA1 f1d782480d5f644ea75f6af7c3d1bbd987df6f10
- SHA512 afdb6f4c5c731f962cfea9a1540cdf3682d06f374a850b2b574db34f5ebd6a6a2383f6478bd910cc719a79c48d4d841b083e8ac886696f4aa3c715ed4ab27643
- TLSH T16461F7327474CE336AB24A4DBA077F43EB665003E2545FDCE0EE0E0C11E7A6C0766926
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
- Size 151B
- SHA256 fed94ef0ae640756050b407b903767909a2091e196235b0b8ef15a9d5b56b272
- MD5 200767ecf059524c99ad44ae75414546
- SHA1 a5721f42a8401ae75e55e44370cc54165e37f0ae
- SHA512 d70848c16e1a4daaa74b156d3a373fa2fb5771bad83e66332be137f81e4ebd9f9582578790870e71b8888f8360157951f3fce3f0ea214e04ef4cce5f891bc198
- TLSH T120C02B2F86834C0FD0E90ACCB050B65D839A714BC6EBBC32F2D58F2449D426213A6420
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Videos\Captures\desktop.ini
- Size 190B
- SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
- MD5 b0d27eaec71f1cd73b015f5ceeb15f9d
- SHA1 62264f8b5c2f5034a1e4143df6e8c787165fbc2f
- SHA512 7b5c9783a0a14b600b156825639d24cbbc000f5066c48ce9fecc195255603fc55129aaaca336d7ce6ad4e941d5492b756562f2c7a1d151fcfc2dabac76f3946c
- TLSH T11EC0121892F93224A1728D12BD7460119AB1F4217C16CA9D1380508F08A1601E631B53
- MD5 SHA1 SHA512 TLSH