Resubmissions
05/08/2026, 12:29
260805-pn13gsssfy305/08/2026, 10:02
260805-l2ws5she32605/08/2026, 10:02
260805-l2whdayzhy01/08/2026, 07:31
260801-jcfdrafp4y829/07/2026, 10:25
260729-mf8q9a1gka329/07/2026, 10:23
260729-meszeatvex328/07/2026, 12:06
260728-n9rv9sgr9w827/07/2026, 10:07
260727-l5skwszepb7Analysis
- user interaction
yes - max time kernel
899s - max time network
902s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/08/2026, 07:31
Static task
static1
Behavioral task
behavioral1
Sample
sample
Resource
win10v2004-20260513-en
General
- Target sample
- Size 22B
- Sample260801-jcfdrafp4y
- SHA256 f5faa40e5206e9eb8f39d3ebbdfe2d9457ff780e4946f9add61356012433082d
- MD5 b487ade737155aaf1c3531da4fe0b5d6
- SHA1 cda115d8405fa8c10961c0f1f8c2a253725d7f75
- SHA512 a0f47e2db2e8729a11523c732cc8bae7fae9bc02398bc00dd3f028c286d4a56644ee4ca41c3ad86a14b104029afe0c9808076f8e1b589888e6c9ad8b1c9eda5a
- MD5 SHA1 SHA512
Malware Config
Signatures
- Downloads MZ/PE file 5 IoCs
flow pid Process 173 3272 chrome.exe 236 3564 installer.exe 236 3564 installer.exe 210 1800 Roblox Evon Exploit V4 UWP_56952442.exe 215 1800 Roblox Evon Exploit V4 UWP_56952442.exe - Checks computer location settings 2 TTPs 26 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation Roblox Evon Exploit V4 UWP_56952442.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation opera.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 64 IoCs
pid Process 1036 Roblox Evon Exploit V4 UWP_56952442.exe 1692 Roblox Evon Exploit V4 UWP_56952442.exe 1800 Roblox Evon Exploit V4 UWP_56952442.exe 3712 OperaGX_56952442.exe 3564 installer.exe 2068 installer.exe 444 installer.exe 4244 installer.exe 2080 installer.exe 4720 Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe 1236 assistant_installer.exe 1344 assistant_installer.exe 1724 installer.exe 1728 installer.exe 4976 assistant_installer.exe 988 assistant_installer.exe 3364 assistant_installer.exe 3620 assistant_installer.exe 3936 browser_assistant.exe 2900 opera.exe 1644 opera.exe 5040 opera_crashreporter.exe 444 opera_crashreporter.exe 1784 opera.exe 3376 opera_crashreporter.exe 2836 browser_assistant.exe 1940 opera.exe 4408 opera_crashreporter.exe 1116 opera.exe 3576 opera_crashreporter.exe 2100 opera.exe 4308 opera_crashreporter.exe 5288 opera.exe 5340 opera.exe 5376 opera.exe 5676 opera.exe 5684 opera.exe 5692 opera.exe 5712 opera.exe 5720 opera.exe 5728 opera.exe 5836 opera.exe 5928 opera.exe 5976 opera_crashreporter.exe 3264 opera_gx_splash.exe 960 opera.exe 4504 opera.exe 5744 opera.exe 5700 opera.exe 5804 opera.exe 6260 opera.exe 6268 opera.exe 6312 opera.exe 6692 opera.exe 6736 opera.exe 6228 opera.exe 6216 opera.exe 6708 opera.exe 6744 opera.exe 6848 opera.exe 6512 opera.exe 6524 opera.exe 6560 opera.exe 6572 opera.exe - Loads dropped DLL 64 IoCs
pid Process 1236 assistant_installer.exe 1236 assistant_installer.exe 1344 assistant_installer.exe 1344 assistant_installer.exe 4976 assistant_installer.exe 4976 assistant_installer.exe 988 assistant_installer.exe 988 assistant_installer.exe 3364 assistant_installer.exe 3364 assistant_installer.exe 3620 assistant_installer.exe 3620 assistant_installer.exe 3936 browser_assistant.exe 3936 browser_assistant.exe 2900 opera.exe 2900 opera.exe 1644 opera.exe 1644 opera.exe 1784 opera.exe 1784 opera.exe 2836 browser_assistant.exe 2836 browser_assistant.exe 1940 opera.exe 1940 opera.exe 1116 opera.exe 1116 opera.exe 2100 opera.exe 2100 opera.exe 5288 opera.exe 5288 opera.exe 5340 opera.exe 5376 opera.exe 5340 opera.exe 5376 opera.exe 5288 opera.exe 5288 opera.exe 5288 opera.exe 5676 opera.exe 5676 opera.exe 5692 opera.exe 5692 opera.exe 5712 opera.exe 5712 opera.exe 5720 opera.exe 5720 opera.exe 5728 opera.exe 5728 opera.exe 5684 opera.exe 5684 opera.exe 5836 opera.exe 5836 opera.exe 5288 opera.exe 5288 opera.exe 5928 opera.exe 5928 opera.exe 960 opera.exe 960 opera.exe 4504 opera.exe 4504 opera.exe 5744 opera.exe 5700 opera.exe 5700 opera.exe 5744 opera.exe 5804 opera.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera GX Stable = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" --autostart" opera.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Opera GX Browser Assistant = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\assistant\\browser_assistant.exe" assistant_installer.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Enumerates connected drives 3 TTPs 6 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe File opened (read-only) \??\D: installer.exe File opened (read-only) \??\F: installer.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-sk.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-it.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-da.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-bn.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_545816696\_platform_specific\win_x64\widevinecdm.dll.sig opera.exe File created C:\Program Files\Booster\GameBooster.exe Roblox Evon Exploit V4 UWP_56952442.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_846731524\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-uk.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_1499898782\preloaded_data.pb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_550114054\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-tk.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-ml.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-kn.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-hi.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-gu.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_115618428\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-de-ch-1901.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-cs.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-be.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-af.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_545816696\_platform_specific\win_x64\widevinecdm.dll opera.exe File created C:\Program Files\chromium_chrome_BITS_1644_991254238\decoded_xz opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-mul-ethi.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-lt.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-el.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-de-1901.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_1718889848\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_846731524\crs.pb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-te.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-pt.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-or.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-ka.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_846731524\kp_pinslist.pb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-mr.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-mn-cyrl.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-hy.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_550114054\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_846731524\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-sq.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-ru.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-nb.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-lv.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-eu.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-es.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-en-gb.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-la.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-hr.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_545816696\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_115618428\crl-set opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-bg.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_545816696\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-und-ethi.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-fr.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-de-1996.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-cy.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_115618428\_metadata\verified_contents.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_1718889848\manifest.json opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-sl.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-pa.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-ga.hyb opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_1875924885\Google.Widevine.CDM.dll opera.exe File created C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-nn.hyb opera.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4312 cmd.exe - System Location Discovery: System Language Discovery 1 TTPs 10 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language browser_assistant.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OperaGX_56952442.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language assistant_installer.exe - System Time Discovery 1 TTPs 3 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 3272 chrome.exe 1764 chrome.exe 5340 opera.exe - Checks processor information in registry 2 TTPs 7 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz opera.exe - Enumerates system info in registry 2 TTPs 64 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera_autoupdate.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName installer.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS browser_assistant.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName opera.exe -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\browser_assistant.exe = "9000" assistant_installer.exe - Modifies data under HKEY_USERS 3 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300430995304394" chrome.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe - Modifies registry class 62 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OperaStable Roblox Evon Exploit V4 UWP_56952442.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OperaGXStable Roblox Evon Exploit V4 UWP_56952442.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xhtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings chrome.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428 chrome.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OperaStable Roblox Evon Exploit V4 UWP_56952442.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xht\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings Roblox Evon Exploit V4 UWP_56952442.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F} installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.gxanimations\OpenWithProgIDs installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.gxanimations\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications\opera.exe installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications\opera.exe\shell\open\command installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\OperaGXStable Roblox Evon Exploit V4 UWP_56952442.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\URL Protocol installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\DefaultIcon installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe,0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.htm\OpenWithProgids\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications\opera.exe\shell installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\OperaStable Roblox Evon Exploit V4 UWP_56952442.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.shtml\OpenWithProgIDs installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\OperaGXStable Roblox Evon Exploit V4 UWP_56952442.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.opdownload\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec\Topic installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.opdownload\OpenWithProgIDs installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ServerExecutable = "C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\133.0.5932.81\\notification_helper.exe" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xht installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32 installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec\Application installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" -noautoupdate -- \"%1\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.shtml installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xhtml installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node\CLSID installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.opdownload installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications\opera.exe\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\opera.exe\" \"%1\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Applications\opera.exe\shell\open installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox" chrome.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\OperaGXStable Roblox Evon Exploit V4 UWP_56952442.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\OperaStable Roblox Evon Exploit V4 UWP_56952442.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\FriendlyTypeName = "Opera GX Web Document" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.gxanimations installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.html\OpenWithProgids\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xht\OpenWithProgIDs\Opera GXStable = "0" installer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.shtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.xhtml\OpenWithProgIDs\Opera GXStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec\ installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\.pdf\OpenWithProgids\Opera GXStable = "0" installer.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\WOW6432Node\CLSID\{8C63D4B8-CF89-4527-B10F-99914B6C207F}\LocalServer32\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Opera GX\\133.0.5932.81\\notification_helper.exe\"" installer.exe Key created \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Opera GXStable\shell\open\ddeexec\Application\ installer.exe - Modifies system certificate store 2 TTPs 3 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 installer.exe - Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2140 NOTEPAD.EXE - Suspicious behavior: EnumeratesProcesses 16 IoCs
pid Process 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 4688 chrome.exe 4688 chrome.exe 2684 chrome.exe 2684 chrome.exe 1644 opera.exe 1644 opera.exe 2684 chrome.exe 2684 chrome.exe 396 chrome.exe 396 chrome.exe 6628 opera.exe 6628 opera.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 42 IoCs
pid Process 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 1644 opera.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe 1644 opera.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe Token: SeShutdownPrivilege 472 chrome.exe Token: SeCreatePagefilePrivilege 472 chrome.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 472 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe 2684 chrome.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe 1724 installer.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 472 wrote to memory of 4636 472 chrome.exe 91 PID 472 wrote to memory of 2788 472 chrome.exe 92 PID 472 wrote to memory of 3272 472 chrome.exe 93 PID 472 wrote to memory of 2788 472 chrome.exe 92 PID 472 wrote to memory of 4320 472 chrome.exe 94 PID 472 wrote to memory of 4320 472 chrome.exe 94 PID 472 wrote to memory of 4332 472 chrome.exe 96 PID 472 wrote to memory of 3304 472 chrome.exe 97 PID 472 wrote to memory of 4332 472 chrome.exe 96 PID 472 wrote to memory of 3304 472 chrome.exe 97 PID 472 wrote to memory of 2180 472 chrome.exe 98 PID 472 wrote to memory of 2180 472 chrome.exe 98 PID 472 wrote to memory of 2896 472 chrome.exe 99 PID 472 wrote to memory of 2896 472 chrome.exe 99 PID 472 wrote to memory of 2408 472 chrome.exe 100 PID 472 wrote to memory of 4204 472 chrome.exe 103 PID 472 wrote to memory of 4204 472 chrome.exe 103 PID 472 wrote to memory of 4116 472 chrome.exe 107 PID 472 wrote to memory of 4116 472 chrome.exe 107 PID 472 wrote to memory of 2240 472 chrome.exe 112 PID 472 wrote to memory of 2240 472 chrome.exe 112 PID 472 wrote to memory of 4340 472 chrome.exe 113 PID 472 wrote to memory of 1468 472 chrome.exe 114 PID 472 wrote to memory of 4892 472 chrome.exe 115 PID 472 wrote to memory of 4688 472 chrome.exe 117 PID 472 wrote to memory of 4224 472 chrome.exe 118 PID 472 wrote to memory of 4224 472 chrome.exe 118 PID 472 wrote to memory of 2360 472 chrome.exe 119 PID 472 wrote to memory of 2360 472 chrome.exe 119 PID 472 wrote to memory of 4440 472 chrome.exe 120 PID 472 wrote to memory of 1036 472 chrome.exe 121 PID 472 wrote to memory of 1692 472 chrome.exe 122 PID 472 wrote to memory of 1800 472 chrome.exe 123 PID 1800 wrote to memory of 3712 1800 Roblox Evon Exploit V4 UWP_56952442.exe 124 PID 3712 wrote to memory of 3564 3712 OperaGX_56952442.exe 128 PID 3564 wrote to memory of 2068 3564 installer.exe 129 PID 3564 wrote to memory of 444 3564 installer.exe 130 PID 3564 wrote to memory of 4244 3564 installer.exe 131 PID 4244 wrote to memory of 2080 4244 installer.exe 132 PID 1692 wrote to memory of 2140 1692 Roblox Evon Exploit V4 UWP_56952442.exe 133 PID 2684 wrote to memory of 4424 2684 chrome.exe 135 PID 2684 wrote to memory of 4560 2684 chrome.exe 136 PID 2684 wrote to memory of 4560 2684 chrome.exe 136 PID 2684 wrote to memory of 1764 2684 chrome.exe 137 PID 2684 wrote to memory of 3032 2684 chrome.exe 138 PID 2684 wrote to memory of 3032 2684 chrome.exe 138 PID 2684 wrote to memory of 4344 2684 chrome.exe 140 PID 2684 wrote to memory of 1676 2684 chrome.exe 141 PID 2684 wrote to memory of 4344 2684 chrome.exe 140 PID 2684 wrote to memory of 1676 2684 chrome.exe 141 PID 2684 wrote to memory of 968 2684 chrome.exe 142 PID 2684 wrote to memory of 968 2684 chrome.exe 142 PID 2684 wrote to memory of 2324 2684 chrome.exe 143 PID 3564 wrote to memory of 4720 3564 installer.exe 147 PID 3564 wrote to memory of 1236 3564 installer.exe 148 PID 1236 wrote to memory of 1344 1236 assistant_installer.exe 149 PID 4244 wrote to memory of 1724 4244 installer.exe 150 PID 1724 wrote to memory of 1728 1724 installer.exe 151 PID 1724 wrote to memory of 4976 1724 installer.exe 153 PID 4976 wrote to memory of 988 4976 assistant_installer.exe 154 PID 4976 wrote to memory of 3364 4976 assistant_installer.exe 155 PID 3364 wrote to memory of 3620 3364 assistant_installer.exe 156 PID 3364 wrote to memory of 3936 3364 assistant_installer.exe 157 PID 3936 wrote to memory of 2900 3936 browser_assistant.exe 158 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\sample1⤵
- Executes a command shell one-liner
PID:4312
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Checks processor information in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:472 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7fffccd6c728,0x7fffccd6c734,0x7fffccd6c7402⤵PID:4636
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,7316357823381005188,11111100534032244742,262144 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1956 /prefetch:22⤵PID:2788
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,14158904728564686284,8989596897617690937,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2044 /prefetch:32⤵
- Downloads MZ/PE file
- System Time Discovery
PID:3272
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,14580247464301939261,7618051580017726664,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2580 /prefetch:82⤵PID:4320
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,3770990664188627978,15549690443130827464,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3272 /prefetch:12⤵PID:4332
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3340,i,14422923212786377392,8168245130944146773,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3360 /prefetch:12⤵PID:3304
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4472,i,17611916878918794334,12965311584487784701,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4488 /prefetch:22⤵PID:2180
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4748,i,3509019487749699072,4074293143618619367,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4760 /prefetch:12⤵PID:2896
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5532,i,2019777621127903170,7812501242652695787,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5512 /prefetch:82⤵PID:2408
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5820,i,15335096453515457345,15296334268615665547,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5788 /prefetch:12⤵PID:4204
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3340,i,1250827366567694573,14946386807528221404,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5952 /prefetch:12⤵PID:4116
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3472,i,12825759435207785011,1674771454957893971,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3464 /prefetch:12⤵PID:2240
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5996,i,963390946048694547,15396646000614621585,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6024 /prefetch:82⤵PID:4340
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6004,i,7451552788317396590,16551495439014583232,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5988 /prefetch:82⤵PID:1468
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6008,i,2962453163186047341,1414269472641315028,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6056 /prefetch:82⤵PID:4892
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6116,i,12037246414700293264,12014986928194150947,262144 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5748 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4688
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3152,i,17484520337928911477,8960294673117611619,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5748 /prefetch:82⤵PID:4224
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4536,i,297308652187602993,14519456478783061345,2097152 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4880 /prefetch:12⤵PID:2360
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6260,i,7553922846519748215,12059009380321889217,524288 --field-trial-handle=1960,i,200768854107969312,12924495465922390406,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6024 /prefetch:82⤵PID:4440
-
-
C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe"C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe"2⤵
- Executes dropped EXE
- Modifies registry class
PID:1036
-
-
C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe"C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:1692 -
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\file.txt3⤵
- Opens file in notepad (likely ransom note)
PID:2140
-
-
-
C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe"C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe"2⤵
- Downloads MZ/PE file
- Executes dropped EXE
- Drops file in Program Files directory
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:1800 -
C:\Users\Admin\AppData\Local\OperaGX_56952442.exeC:\Users\Admin\AppData\Local\OperaGX_56952442.exe --silent --allusers=03⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3712 -
C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe --silent --allusers=0 --server-tracking-blob=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4⤵
- Downloads MZ/PE file
- Executes dropped EXE
- Enumerates connected drives
- Enumerates system info in registry
- Modifies system certificate store
- Suspicious use of WriteProcessMemory
PID:3564 -
C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.109 --initial-client-data=0x280,0x284,0x288,0x25c,0x28c,0x7ff7ba10cd88,0x7ff7ba10cd94,0x7ff7ba10cda05⤵
- Executes dropped EXE
PID:2068
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\installer.exe" --version5⤵
- Executes dropped EXE
PID:444
-
-
C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe"C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --initial-pid=3564 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_20260801083629" --session-guid=42e14699-a278-420d-a60e-3616bb536688 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=68080000000000005⤵
- Executes dropped EXE
- Enumerates connected drives
- Suspicious use of WriteProcessMemory
PID:4244 -
C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exeC:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.109 --initial-client-data=0x28c,0x290,0x294,0x25c,0x298,0x7ff7ba10cd88,0x7ff7ba10cd94,0x7ff7ba10cda06⤵
- Executes dropped EXE
PID:2080
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe" --backend --initial-pid=3564 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291" --session-guid=42e14699-a278-420d-a60e-3616bb536688 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.816⤵
- Executes dropped EXE
- Enumerates connected drives
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1724 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff78490cd88,0x7ff78490cd94,0x7ff78490cda07⤵
- Executes dropped EXE
PID:1728
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --copyonly=0 --allusers=07⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of WriteProcessMemory
PID:4976 -
C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x674b80,0x674b8c,0x674b988⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:988
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant" --run-assistant --allusers=08⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3364 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7b4b80,0x7b4b8c,0x7b4b989⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3620
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"9⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
PID:3936 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2900 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x19c,0x1a0,0x198,0x168,0x194,0x7fff99301560,0x7fff99301570,0x7fff9930158011⤵
- Executes dropped EXE
PID:5040
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream10⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:1784 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x1a0,0x1a4,0x1a8,0x19c,0x1ac,0x7fff99301560,0x7fff99301570,0x7fff9930158011⤵
- Executes dropped EXE
PID:3376
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x27c,0x280,0x284,0x250,0x288,0xef8378,0xef8384,0xef839010⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2836 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream11⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:1940 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7fff99301560,0x7fff99301570,0x7fff9930158012⤵
- Executes dropped EXE
PID:4408
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream11⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:1116 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7fff99301560,0x7fff99301570,0x7fff9930158012⤵
- Executes dropped EXE
PID:3576
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --stream11⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2100 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x1a0,0x1a4,0x1a8,0x19c,0x1ac,0x7fff99301560,0x7fff99301570,0x7fff9930158012⤵
- Executes dropped EXE
PID:4308
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --start-maximized7⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Drops file in Program Files directory
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:1644 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x190,0x194,0x18c,0x15c,0x188,0x7fff99301560,0x7fff99301570,0x7fff993015808⤵
- Executes dropped EXE
PID:444
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1736,i,4157527421484660875,10919885383356383685,262144 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1900 /prefetch:28⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5288
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2140,i,16432745660728476409,2487785354720621966,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2160 /prefetch:38⤵
- Executes dropped EXE
- Loads dropped DLL
- System Time Discovery
- Enumerates system info in registry
PID:5340
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2424,i,11482756443952964886,15995923778911922035,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2436 /prefetch:88⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5376
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=2764,i,15420974648604193294,9130140899397732322,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3096 /prefetch:88⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5676
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3460,i,17712853838081074235,14703190253410385995,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3400 /prefetch:88⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5684
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3448,i,4490354529539855370,1062242163397356559,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3020 /prefetch:88⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5692
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3472,i,12086169446666767745,6145016312692498570,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3408 /prefetch:88⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5712
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3484,i,8588835510484847606,6140370587122789416,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3360 /prefetch:88⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5720
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3496,i,1897676684168093454,18026927596758443747,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3420 /prefetch:88⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5728
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4116,i,596629196962462098,222803617071616605,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4124 /prefetch:18⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:5836
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_gx_splash.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_gx_splash.exe" --instance-name=61C8973803226C4D4008DEBC18682105EDAB1556896BB924D0EEB1B6C96AB1478⤵
- Executes dropped EXE
PID:3264
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4644,i,8949025623255151812,94622201927771804,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4664 /prefetch:18⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:960
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4812,i,3209231170954714291,17913320084723364728,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4856 /prefetch:28⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:4504
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4984,i,18437665506136794678,9014782741562864974,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5000 /prefetch:18⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
PID:5744
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5028,i,12608337537706815413,12918923408580599517,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5136 /prefetch:18⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:5700
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --asus-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5260,i,794803974241218264,7447649912568672365,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5268 /prefetch:88⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5804
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --corsair-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5276,i,7161315617795601327,17623222689826541591,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5168 /prefetch:88⤵
- Executes dropped EXE
PID:6260
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --logitech-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5272,i,2685813743553918822,9684420641665358438,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5356 /prefetch:88⤵
- Executes dropped EXE
PID:6268
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.lights.mojom.LightsProvider --lang=en-US --service-sandbox-type=none --enable-quic --razer-lights-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5264,i,1089321375299178823,16745143589964910095,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5508 /prefetch:88⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6312
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5808,i,2752206299284729212,3147448612944955994,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5940 /prefetch:28⤵
- Checks computer location settings
- Executes dropped EXE
PID:6692
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6436,i,2544874322550233121,2377408817218704917,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6440 /prefetch:28⤵
- Checks computer location settings
- Executes dropped EXE
PID:6736
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6328,i,10865502437332078261,14857938380951499564,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=6720 /prefetch:18⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6920
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6464,i,5960574219558849147,1893758507248423557,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6460 /prefetch:88⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6228
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=7048,i,8410550545939841724,6803060056847443005,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7096 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6160
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7044,i,3238974028220081593,4258579568873664231,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7236 /prefetch:88⤵
- Executes dropped EXE
PID:6216
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7244,i,9508060684187426345,12149691031448016363,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7360 /prefetch:88⤵
- Executes dropped EXE
PID:6708
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7336,i,11305142509378405442,4620533174668280159,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7240 /prefetch:88⤵
- Executes dropped EXE
PID:6744
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7428,i,10510815510018085730,10442940704269733592,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7440 /prefetch:88⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6848
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7444,i,2798557522490294101,10550285590881364706,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7836 /prefetch:88⤵
- Executes dropped EXE
- Enumerates system info in registry
PID:6512
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7848,i,5719762745527725443,9700276257151073153,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7460 /prefetch:88⤵
- Executes dropped EXE
PID:6524
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8096,i,5770004330158851160,17306637594894605660,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8112 /prefetch:88⤵
- Executes dropped EXE
PID:6560
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8152,i,13080255519399507885,4040164856147716768,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8124 /prefetch:88⤵
- Executes dropped EXE
PID:6572
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8288,i,17503847731917268157,4861939474838068800,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8484 /prefetch:88⤵PID:6520
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8440,i,14408434194450243392,16735305012582472620,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8504 /prefetch:88⤵
- Enumerates system info in registry
PID:7008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8472,i,9939954496185298897,13920110543752749629,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8524 /prefetch:88⤵
- Enumerates system info in registry
PID:7036
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=8924,i,13017291051017220810,5458286199737595190,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8988 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6352
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8952,i,15703630115444216266,9516566182873375387,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9132 /prefetch:88⤵
- Enumerates system info in registry
PID:5916
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9156,i,15121034834865129969,18155223901733477243,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9008 /prefetch:88⤵PID:6184
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=opera.side_profiles.mojom.SideProfilesHandler --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9332,i,13026355287022699264,218312174308976960,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9344 /prefetch:88⤵
- Enumerates system info in registry
PID:6704
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" --pipeid=oauc_pipeF347B60CA73F3F3DA84B31019F4EB851ECFC332513021FC062CC0CA8D8440B548⤵PID:4108
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff6d5a99860,0x7ff6d5a9986c,0x7ff6d5a998789⤵PID:6204
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5844,i,13541279125963496503,5668200326429331841,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9396 /prefetch:88⤵
- Enumerates system info in registry
PID:6564
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5516,i,14817018292189373573,9830105778551525946,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=3324 /prefetch:88⤵
- Enumerates system info in registry
PID:6360
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=9652,i,2807207885093642222,13730962034239539243,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9696 /prefetch:18⤵
- Checks computer location settings
PID:5936
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8248,i,9115691933942277549,17678751135226921571,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8220 /prefetch:88⤵
- Enumerates system info in registry
PID:6452
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8168,i,6391393380289212211,8745791391699808352,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=9196 /prefetch:88⤵PID:7056
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe" --fix-taskbar-pins8⤵
- Enumerates system info in registry
PID:5948 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff78490cd88,0x7ff78490cd94,0x7ff78490cda09⤵PID:6364
-
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9532,i,14497915488291186420,10725812643893420453,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=8200 /prefetch:88⤵PID:1748
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=4228,i,4996472591572993828,11405731474376271216,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=5556 /prefetch:88⤵
- Enumerates system info in registry
PID:2488
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=5672,i,5225273015141709293,8024520863012242159,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8244 /prefetch:88⤵
- Enumerates system info in registry
PID:6404
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8416,i,17548204348785380296,11378725733690057393,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=8656 /prefetch:88⤵
- Enumerates system info in registry
PID:6808
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8824,i,11962969924697063079,2285380293009361961,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=5860 /prefetch:88⤵PID:5504
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=4188,i,18436116782560601000,4978020763745249825,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9520 /prefetch:88⤵
- Enumerates system info in registry
PID:5692
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8092,i,16365244490544691159,3302990145976129327,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=5464 /prefetch:88⤵PID:3324
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8976,i,6160004665834927199,13333506027621799778,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9572 /prefetch:88⤵PID:6668
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9136,i,3027900791081656380,13138801821672227855,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8248 /prefetch:88⤵PID:2160
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=6380,i,1534492791712965468,477236163637939119,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=8596 /prefetch:88⤵PID:6560
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8784,i,10720406726684137111,13138110121722635951,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8560 /prefetch:88⤵
- Enumerates system info in registry
PID:5684
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8932,i,477869649247930129,7760021266165792364,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=4168 /prefetch:88⤵
- Enumerates system info in registry
PID:6564
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8360,i,13917482724321009081,7861650784341804301,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=5268 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6352
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7996,i,8818676331811127810,412331062942606939,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8060 /prefetch:88⤵
- Enumerates system info in registry
PID:3912
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=3444,i,9953400757634717808,11118435872079095706,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=9152 /prefetch:28⤵
- Checks computer location settings
PID:4220
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=8700,i,10560405535517053483,1050057991329685374,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=8300 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:5876
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=9472,i,7359388182252090140,2800929960181102585,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=9400 /prefetch:28⤵
- Checks computer location settings
PID:5320
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8864,i,11251999898108076715,17637388467118514766,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=7588 /prefetch:88⤵
- Enumerates system info in registry
PID:5356
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=8972,i,2282221198870119286,11758802000067094718,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=4168 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:7244
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=9180,i,2429444329586328540,11345335801317588228,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8972 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:5792
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8560,i,9418056549719318696,10992464141290013560,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8656 /prefetch:88⤵PID:5688
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8972,i,3654596191118696247,9785707122709124004,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=8784 /prefetch:88⤵PID:6484
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4176,i,4927784295169105643,7796395376015402595,262144 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=5556 /prefetch:88⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
PID:6628
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=9312,i,12489773343806644581,7989538652270962915,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=8064 /prefetch:28⤵
- Checks computer location settings
PID:6196
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=7396,i,8743137738906049254,15830379836486821743,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=8548 /prefetch:88⤵
- Enumerates system info in registry
PID:7636
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8064,i,10873551872379780128,8342728111520870675,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=7024 /prefetch:88⤵
- Enumerates system info in registry
PID:7784
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=8756,i,1434188156806123620,8513878842607797708,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=9540 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:1460
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=8352,i,10026797685643558213,5121758644785466008,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=4172 /prefetch:88⤵
- Enumerates system info in registry
PID:8008
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9524,i,6954655910468847430,688048458463529374,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=7024 /prefetch:88⤵
- Enumerates system info in registry
PID:3828
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=8308,i,17051852497194916657,9745816717380240675,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=9084 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6272
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=3448,i,17338031132562040431,3675160820566842836,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=8068 /prefetch:88⤵
- Enumerates system info in registry
PID:5320
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=8484,i,11104458918873721311,1063247146819105815,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=4204 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:8048
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9580,i,13891123918948036317,4103448021613759043,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=8360 /prefetch:88⤵
- Enumerates system info in registry
PID:4568
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --metrics-shmem-handle=9072,i,6651806812663353046,7102213454668056530,524288 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=1572 /prefetch:88⤵
- Enumerates system info in registry
PID:1184
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=8760,i,17465031113887850149,6267395383645603825,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=8628 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:2312
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=4172,i,13147608738088409560,14786429888300924128,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=8324 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:6004
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --type=renderer --extension-process --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 OPR/133.0.0.0 (Edition std-2)" --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:address-bar-dropdown-unfiltered-full=off --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-on-support=on --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:fun-voice-messages=on --with-feature:gx-post-mortem=on --with-feature:gx-streamlabs-promo-text=on --with-feature:hide-navigations-from-extensions=on --with-feature:image-search-support=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:session-restore-add-partners-attributions2=on --with-feature:sitecheck-age=on --with-feature:startup-campaigns=on --with-feature:tiktok-panel=on --with-feature:universal-skip-button=on --with-feature:vpn-pro-v4-support=on --ab-tests=GXCTest50-test:DNA-99214_GXCTest50 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=8308,i,2913689914111191714,7910193788598900667,2097152 --field-trial-handle=1904,i,4283719287227681973,4788014182802893858,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,3721322559265299191,7377546316131794203,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=1572 /prefetch:28⤵
- Checks computer location settings
- Enumerates system info in registry
PID:5844
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe"5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4720
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe" --version5⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1236 -
C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktopGX --annotation=ver=132.0.5905.28 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x674b80,0x674b8c,0x674b986⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1344
-
-
-
-
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:3680
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:3308
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2684 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xf8,0x108,0x7fffccd6c728,0x7fffccd6c734,0x7fffccd6c7402⤵PID:4424
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,10723047592315439029,10755476488787612355,262144 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=1888 /prefetch:22⤵PID:4560
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2236,i,2195881517344544887,10703703769552185035,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=2276 /prefetch:32⤵
- System Time Discovery
PID:1764
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,2571668355670065431,5269083577309146409,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=2556 /prefetch:82⤵PID:3032
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,2227798152996853841,9689458630676585378,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=3244 /prefetch:12⤵PID:4344
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,4847476790420525510,11435711410776658651,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=3288 /prefetch:12⤵PID:1676
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4460,i,17389425761220464202,8924258461408707706,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4564 /prefetch:12⤵PID:968
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5304,i,3428537261589144226,16392276751257882008,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5300 /prefetch:82⤵PID:2324
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5304,i,17209251003795724453,14203484736749763684,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5800 /prefetch:82⤵PID:6868
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5596,i,14813634768846095638,8883893345760006485,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5148 /prefetch:82⤵PID:6080
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5720,i,12101168437423231788,17023823245202815179,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5320 /prefetch:82⤵PID:5920
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5820,i,6636458264340105002,4021670560833718924,262144 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5528 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:396
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5872,i,3041612806828585085,11042276729981081512,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5888 /prefetch:12⤵PID:4600
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3952,i,11331230628418347328,1122800433512813084,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5868 /prefetch:12⤵PID:8036
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5568,i,6547317794256182411,2455081411016393236,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4568 /prefetch:12⤵PID:6688
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5792,i,14370044517303348430,9852051775923181631,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5868 /prefetch:12⤵PID:7104
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4564,i,9953595848611222961,6622868268960968629,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=3328 /prefetch:12⤵PID:5096
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4236,i,13378531876468394137,8859640403753029766,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5964 /prefetch:12⤵PID:8140
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=840,i,401781636576072677,17754520618241037460,2097152 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=4556 /prefetch:12⤵PID:3732
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5916,i,1754299279199448958,8074024991215766643,524288 --field-trial-handle=1892,i,16518187896183799696,15934465881003007898,262144 --variations-seed-version=20260731-170056.641000-production --mojo-platform-channel-handle=5928 /prefetch:82⤵PID:7180
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:4988
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:176
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:5472
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe" --autostart1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5928 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\opera_crashreporter.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x174,0x178,0x170,0x140,0x16c,0x7fff99301560,0x7fff99301570,0x7fff993015802⤵
- Executes dropped EXE
PID:5976
-
-
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe7FAE56220944838BCDB933E86AD23A432FE91C0ADA84DF94778C72EE141B2B1F1⤵
- Enumerates system info in registry
PID:7124 -
C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe"C:\Users\Admin\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktopGX --annotation=ver=133.0.5932.81 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff6d5a99860,0x7ff6d5a9986c,0x7ff6d5a998782⤵PID:6132
-
-
C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe"C:\Users\Admin\AppData\Local\Temp\.opera\9B44A87EC5AC\installer.exe" --version2⤵PID:7752
-
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:7976
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Evon\READ ME.txt1⤵PID:1680
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_115618428\manifest.json
- Size 95B
- SHA256 d8ae70809509129324716f92f9916dfe66ef25f2bfb5297e29d94e431b52c950
- MD5 6b84f57e80a16b20ba1de2ace0da4ec3
- SHA1 f8dd164d8e7d32c80e9e350b793b8333bb69a635
- SHA512 e5e193886d826df6c6a31af971bf1ce3fba456c94029371feeab9a8c6a93806544dbdcba43513c8c2bceb3226dbe61d66672f6db19202b9fd8c0edcb539b13b9
- TLSH T1B1B012217C10816312940B79013452C35BE62D0A61113504013219816368A7B137011E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_1499898782\manifest.json
- Size 202B
- SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
- MD5 837451b9bf5675593e66a3b58787a0a5
- SHA1 0d8c4631e5308fcc2abe2f1b9ce29921717d2bb1
- SHA512 3a746580453761bd2fd27ff6087193189e51845c8c4282247b0946ab5da91e60c134c1a75e66d271a0455704aa2f861e35f2b54356191704c343f748f47b741d
- TLSH T1ABD012E33D41D4F701985BA86922E10A67B92F0F5C47B41A07925049D4D9EB7347872E
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_1718889848\manifest.json
- Size 72B
- SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
- MD5 d482d7180f77c5c4a21a7f9a04cb797b
- SHA1 d06ba12c44afa7bfe7d3dc660a5b38ba3e200531
- SHA512 9393f8752a6e1e1f80e30a83c00ba41b8978bbc52e38aea4a03aa8ee4db2dd001b19b79da0ed96822ad5adfcb67bb5d91f9600b7a2f787a98153d9e8c1a3697b
- TLSH T1F8A02230BC008033388C0BB000328383A3B02C022020FE0A0E0B2080228823E20F228C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_1875924885\manifest.json
- Size 145B
- SHA256 6cce5ad8d496bc5179fa84af8afc568eeba980d8a75058c6380b64fb42298c28
- MD5 bbc03e9c7c5944e62efc9c660b7bd2b6
- SHA1 83f161e3f49b64553709994b048d9f597cde3dc6
- SHA512 fb80f091468a299b5209acc30edaf2001d081c22c3b30aad422cbe6fea7e5fe36a67a8e000d5dd03a30c60c30391c85fa31f3931e804c351ab0a71e9a978cc0f
- TLSH T156C08C42E9010C6203811AA0011B438A83901C13A8003C04362309242B8DABF21705ED
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-as.hyb
- Size 703B
- SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
- MD5 8961fdd3db036dd43002659a4e4a7365
- SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
- SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
- TLSH T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-hi.hyb
- Size 687B
- SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
- MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
- SHA1 d0914fb069469d47a36d339ca70164253fccf022
- SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
- TLSH T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\hyph-nb.hyb
- Size 141KB
- SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
- MD5 677edd1a17d50f0bd11783f58725d0e7
- SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
- SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
- SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
- TLSH T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_345194608\manifest.json
- Size 82B
- SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
- MD5 2617c38bed67a4190fc499142b6f2867
- SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
- SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
- TLSH T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_545816696\manifest.json
- Size 1002B
- SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
- MD5 dcffff15fa618a53834ee4ae8673bd23
- SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
- SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
- TLSH T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_550114054\manifest.json
- Size 94B
- SHA256 95a2b0748baee70740ff2d5da78f98b5a29950562f989591f0b0b5bf13354b85
- MD5 7130a770ae4db8eebc02a87bdee55e4d
- SHA1 c27b743f556ce9e389cc8c33d89e590719d1f506
- SHA512 2efd8fa39992cb928b432c12117a868da26dcb393073a1cae51ea6c93acb28a7be7eb5c37007db0b8eb7e40a2770cf50fbc2728b059adb61694d4c49339bde42
- TLSH T147B01210BC49917318C107541131829347761D01601529038F9F10D036E823D0262608
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping1644_846731524\manifest.json
- Size 73B
- SHA256 aa1e29e7d64a11b734627921662f9ea9ddc745f1a97270e2e54e12c26267fa53
- MD5 fcefe2d8250f055e510dc119b9369f3d
- SHA1 5cf5b9021ae76ff11d44b135c7ea4b6733992032
- SHA512 5768897450b25bdd0bd7655c4b20a7a409ad1921e5d28552a82073f3002c238a30e385a5dafb22c0c302847ed87d9c45c97d603db36096baaec7ee18a3fbe704
- TLSH T115A022A0BC00A0332080032C0030C3C3C3E23E0A280028020A233C8233AC33B203033C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
- Size 1KB
- SHA256 51c2555ad45433b5a8aeb58f7ba9971e9aee0fc7e1c464c74203f0cd904ecacb
- MD5 af467cf4ce749307a674b95310da853f
- SHA1 79e6c134574cb8af6de353a31bfd52dfb46a2d4f
- SHA512 d94f3de60f76009bef2477c5bb18d24c523031a72876400f82f7135259f5b0b1ee111a09d37be93b7f4d3d649040965bc894cf580319d8b4dc216333d56ed19e
- TLSH T13531E6AA4E712990FF41AD1731D9D93BBEA26380ACBC102A1339D4EA15003D53E96C1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 1KB
- SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
- MD5 adac67e1d2da2d706db151c2db316b2d
- SHA1 5f6e301d23e33132209707945d0e740d5bcb8996
- SHA512 9371b62ac25c6ea8fb6fca19ac47b873ced9b3d0cb45ce4de5ea974b93c12684c65aa23c7d83331c77502853258a08dff73ce5e3fb6170bd3ab1c5b3283a86a9
- TLSH T1DE31AD4EA2153027D5427F72D8CEBE83CEB1364667CAD46B18046E4229AAFC25FC80C9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\AC4E2962244A136DBC0532A10184FEF3
- Size 362KB
- SHA256 7cf37cbb849463f36c5ade34720d0c67b2f90ecfbd29a6b135770dee59fdd4d5
- MD5 babbdbb702f0e2feecceaeb97aa835cf
- SHA1 14d31968cd038deca51515359c47f2f541021030
- SHA512 584a926ff59e00be714fa0f07453678a1595d5f496003e831c6cfb90830622aa6bbe2be791fa72caaa075df04fd88affec554a89888b3e37eb2b22a25f4d9ff2
- SSDEEP 3072:12jU6pmRrD8x0M3eep5TxvLl0f/fTEkL5F68yIpIaD6G3y:12jU6pArDkp51zlls5F73maLC
- TLSH T1E274B36C4454B67798066B34CADB9DD3EDF693811B99C01E86712F064420FEB8FE72A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
- Size 528B
- SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
- MD5 047f3e9d21d6b325d592b1959e4362e6
- SHA1 5aeef5f985171cd69da397fd039854e44ebecdd2
- SHA512 4523896ed4a03afafd2075d8c8947236d34fe1da2c246a3f90c2be2a5c151c18bc58a6cde5a209abb8e06e80f662e24d0149640b3e98e8a872bfa8a04ef592a4
- TLSH T147F0500990082252C855FF55DFD6AC97DC76336136E595036D458E410C12F96AF950F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C1FCA6D61D8F4CEC04EBECE6E4B83B12_5864C5D103AA2977DAA3610A2E65E58A
- Size 472B
- SHA256 2f3b6ceb4b2ec1dcf984ba7ff1d8db19aff25059c4514919d722932cc148a83a
- MD5 1a25b378bd97d770906b6a7fa8969511
- SHA1 73dbb0c69b59c246ebf7508a68ec5ddabdd57aed
- SHA512 dd4f9f8c3cc69db793a4380012ef28983d1c561ee899b8530872e588c1848ee84e39fcd3cc489b31db68052f49099466ed782789a1b01b8007e878b837f7d33b
- TLSH T1B6F0DC2E217A82D0FD06D42579FC9E2514BC915E3DB8182214BE78ED6325EC13C0688C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 471B
- SHA256 0d2833c0297374f4dab44798d2a22189c5c84550445adc9d85aa0d65f2f6f7bb
- MD5 b57220b3f63e21323d5c5346d8b252f6
- SHA1 0a86f46559760e5de9deea469c9b55e56b745c32
- SHA512 437d9be4654a58e1c7d3e9fbde7e04af57d693323ab42b830b26183769245ccfefd799c17b19251829bc65f33493c54c64bfe04f01853ff8881f8a14b61321ff
- TLSH T1AAF0DC8329D8FC2237854CCC18EE4A7E3A2290A501914007D83E14F947956AD6FA24B6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E5FF48EF4A295D151D3BF7A25DB4555B
- Size 456B
- SHA256 6123ec3d6c46626f68c01fe531a58fab79045bcddf4912a1487101162e13c5dd
- MD5 0acb5c0ead66d205d3c5c91887a6d313
- SHA1 4c3f237cc1e88f5a041562c2d394af6260558364
- SHA512 4c2045cd681af5544c3599d9148216b12ce1326c9dc4d10e92819f3022bdf6026f4449ad07e739603a79da638e7db45d8463cd5addcc189f2f6667bfc1733c97
- TLSH T17FF0DCE6EA7E6B8158E0E920ACD6C4972DFC80801D8BA008021085161087A4BE45228A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
- Size 410B
- SHA256 a004c7c2167f48da03e992c8b76a2a6a34dc9588800a0e98e455b8d0b7e14380
- MD5 4f2eebbee9b7e88341dec068015ccf5a
- SHA1 27dce5b30e230bf631fcf6f899d0200905e2deda
- SHA512 6a14e235ab56b0e102adcd71a6bf2e162930ef42d9f0b0b050fe61e43682767d3d7ec1bfc6d4702ab235a5d2ac41c3ea986e4336d8b004fb56a9b791c9c41616
- TLSH T1DDE020045975423CF470C53996CE79A7176ED215342902F01BD44709B746E452DD29B5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
- Size 174B
- SHA256 a58a5bec95ccfc8037d8b7b0b0f10436abeb0971bc2fa2f3612c0c57922ab3e6
- MD5 1a8b584384b65d31b2d6ee9ba5ea89ba
- SHA1 fdd1f865d21e613934d04e09f44a5ab57941b925
- SHA512 f62614cb90a848d0362fdcf25b8d48e64b9bc8f49d53d8a8e034e49f6201af91d8f426ce1848f4444150238404f64e6cdb31b9c41b39c18fa9f15ab4038edad4
- TLSH T1E9C09B4C37B54155F2304E7F1653571257FAE715CD4183540F705259C52DB425CF5D07
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\AC4E2962244A136DBC0532A10184FEF3
- Size 192B
- SHA256 446941132cc3dc2ebad3f2004d29ecc2f854c6114e1243f1275082b2c80f0d61
- MD5 0e1cff39b9349acd33efb291517f1511
- SHA1 e6d1a4a20aca37184a338f06ba8ffcc251c518c9
- SHA512 34d9ca883faedcf22ee08286d870d0c6655e2d2b43c872ff290a6b99eb78889dd091cbf58d7caf3d51ad2ab947d3792338f141c683d2367eda592cd166d58576
- TLSH T18AC08C2422111246F0348E3E0EB01211AFBCC726DD5286480B700074072CF079C30E06
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
- Size 170B
- SHA256 daa20e38fa8aa8f438d7a0979a0bf0f0bc1d08c806b2efeafb2fd2f594221204
- MD5 bbf5bcca906d9cfd641c9cc4869f5162
- SHA1 1ff43739198a44916c707e9f98f2954f3fae7eef
- SHA512 7aeff0a2b05b4bcb024eab6d7793d646a740a349f9b8093ad2a79014c8bae29d4e592ac0b02d2375f276a9b97eec9f051cec832fd8ae03008f797539cfd46742
- TLSH T147C09B1477654716F14D113E79E6160527B58605F5C6C3054F7415349518E440871D06
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C1FCA6D61D8F4CEC04EBECE6E4B83B12_5864C5D103AA2977DAA3610A2E65E58A
- Size 418B
- SHA256 0f89e9ad591411911237ae5c020f580b8b0cd04e3a0d12be9fbfa610fcf1a666
- MD5 4843efb084966b153fe65144ee8b20da
- SHA1 16320de52d5226dd5efcfb3567658b7736fee379
- SHA512 0021a05bb531613c84d955ab7435524237ae07926371771b02c721772c26461e2d459b084c5b797faac4e57046ff03632c66fb57c8958edcea1c733b1d6eab66
- TLSH T1A0E0201C32FF400DFAE1C9FF57C5675A5996E165511503F506F08B04B716D017CA3A66
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
- Size 416B
- SHA256 0c6a905c57e92819b03bd1deed7d00e713ac3e5f51e8c78733771519ccaedabb
- MD5 4a18dbc9c4032d6db488b8466c842335
- SHA1 d306646cedd8aa5ecd51b63b2b314512f3144443
- SHA512 ee973581532b6856d31d8daa2cb6b270c781045c7a78df2f5a999f7b0edc19a647e3273d39970168736bd2c1cde278541674aa9b2310b4091ceea839dfc2d908
- TLSH T1E7E0683826FB016DE1F4D4748AD5F5251986F022042893B00AE017087A02940AE12A3A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E5FF48EF4A295D151D3BF7A25DB4555B
- Size 192B
- SHA256 4cf0e4afadfc50f0b410b18ecbce82f09f0803985218ed7ebaf9f6f99639197b
- MD5 bafbb13a7fd2cfef88c60cc003799883
- SHA1 9a34b34c2eb5f65b87f2b1ef8dcddf390d428ff2
- SHA512 1599c9c9d6cf4279d8d2f3931771b0c68f197e390b92b392c9542633c0c7d7093b78a0206e674bea91476725e68bd953c313ece29974eaf8e04de0e8aa178c19
- TLSH T1ECC08C113A67422AF002923E87505B012BFCF210D606E30A1FB0133E262CE421CB0D07
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
- Size 1024KB
- SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
- MD5 b0366599d64b0fc1adb2a712dcd02ee1
- SHA1 b7a1c09ccd2846664cab5f76bd80b8e9f107acb0
- SHA512 d7de6d48285018f8b709c81ca01688126db7893ce9f48829524ee3122aa6f2200c7f78186b5a558d0b1ecf8157ee78a20064b63b45ab89f7aa0835b8409435d0
- SSDEEP 12:bHCsEXhVMMBKEKSCemJKlkQyYVhYJ0I+pPK6BsyW1inP6:biPROMMBS+MkIYWIE1BtXP
- TLSH T117252786A30815EFC54288B589AE03602374F9E55F52079B2E2DAA1F2E271D80F45164
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
- Size 40B
- SHA256 77bcdb2c3160a7fd4141144587938963255d18e2280ca048bae35e2b889daae1
- MD5 f444c4b91d48467daad7fc304bf0b2b7
- SHA1 0a54e0644c006f7b684b802915a76b0b9e907f2e
- SHA512 954788cc6221a65dba3cd53452e7ffe912bdce7b20bd8cf2525ecbc1a2e6c0ba3448dfbcc8997d4347508beecb9ddb77704805450cb4090f76ac02aea569ca9f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 05b79df49756700fe065dcf2116cb8844e3448fda004d72b942b84b202ef4a03
- MD5 b9ec90eea224efaef2a51d0ca2bc24a2
- SHA1 9f087d2b3cc3bf4c67e9b8ba3def0327b1b583e2
- SHA512 42c0888a43dd586dc986c3b5290420c5de3bd56451fb2b4dc107feea7eeff410e73411a01feaa0f001d46b85aeed994cea6f66352d93fd03eac507b3f262b52d
- TLSH T1BCE022EACD21AC7B29FD076811A54B45EB6513562A81997F3A3CD20C8FB162B4186C9C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 768B
- SHA256 8eaf313d97e5abdb4f56cacfd583c90e809866a5516ec542d65c07e9f188e6f6
- MD5 b166fbe272b49488ce66a1cb4f8ea772
- SHA1 3ae72d3a09d5b5e2ede8e203d13c79adc30019a7
- SHA512 093ae52d42b6d9a0dd9db6d23d1ea1b33b8286db1561d8c020b3227dcc2197719723ce8629a2afa8c1137eb814d62f6829a5f0b84cd94075ef48ac87303e4a91
- TLSH T18001A6280610C50EDFB07C3010F23A21F274540B828F3EFFC29040B01263A7671B9188
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 624B
- SHA256 14e762d3dcd8194d4c077a593cf06ac2732682d4baae5c1c48742c9595788344
- MD5 1f22f8e15c9dee41294898f522f4ccb9
- SHA1 e64258b4ff041b22f5da742fb7a9f7f11bce4545
- SHA512 75a68d02ae4f0b9d78ad43a7876082d45bcead84d1e6469283ca7b7e3b8699b92fac24778e454e84b886773e54e16855fc360ba23741a48f915e9d9ab256a1aa
- TLSH T1E2F020280224C81ADFB57E3090F23421F671985B921F3EFBC28180B40293BB4B1BA691
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
- Size 264KB
- SHA256 fb6b5073001b19010236c36d89043a41f784c7a4a27d9c4595afceab1819dbb7
- MD5 e87194eb6ebebbe89698304129bb1848
- SHA1 dfd0d5a6ed56d9a2674177e85f7393aa18398544
- SHA512 d619d0ada42c1da706f2fdfa5b658038075d9a6c657840ae97843c8f7deda2298d2f0043d5d2264ce4bec87e07392fa31ada15afffc76184c09afd532460a827
- SSDEEP 3:MsEllllkEthXllkl2zEh2l:/M/xT02zE2
- TLSH T1164404C47FC0043DC5001531C011C3504370F51305357FD334D70413DCC55443C00100
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\9fad27b5-8c9d-42ce-9cbd-8e7a6804082c.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 6KB
- SHA256 259387a5baa76a28b43e2511a8ec65cfc1078a1a25da9a3a4f3b182f58910820
- MD5 82b7eaf355661755d44d27a9a7e5833d
- SHA1 c09ba76907e6fe65f33a87c998f4763e23d8cf47
- SHA512 d31da5d5fc4e45a23fe676ad7642aeeec3b621e85285b047a3cf2e4f6e85dde9f36fd5f6fa9e45d79caf50a380b0643a7254cc715eb3e53de14a142782a138e0
- SSDEEP 192:D/Qln7KUraIWy44kmWINP/NnlqscBrqURUCi:D/Qln7KUraIWy44kmWINXNnlqsqrqUSl
- TLSH T1E2D19DF7C7D4C62DC90156F4EB256F1FCE290A14432C3C66C8D8AE1BA3E2872D21165E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 8KB
- SHA256 dd64348d1f660a23e8469ada3c7cc91416939ba989435c8b5acd97f0cbcfe744
- MD5 c394bb95208bf6e7495acf33ff0d439a
- SHA1 677a27c719dc9747c3a1d3387733cb5473bba22d
- SHA512 9b88caa6344d0593fc81420a5524c2a619ff0524c8a5786c877b8d5c5097a640b93c096118403603e3e76f72b91d96a8d4dac53831b1b02c22f66fd141e2810b
- SSDEEP 192:DFtMwlxLtGUHJ0aIWxmZINPiwltcBhqUR7qViQZMf/F3UMK:DFtMwlxLtGUHJ0aIWxmZINqwltqhqUds
- TLSH T102027CB7C7E8862DC90156F4DB256F1FCE2D0A14432C3D66C9D8AE1BA3E2871E21175E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 8KB
- SHA256 66fe757fb7a2943eb2f8200c30142cf13d2a7d8c9e308af37cd23a1703d36638
- MD5 36a6121f65541e6b2d7bdbc662d01d1e
- SHA1 511c23edbae55d19ebc6dc5ad69ea71e72b5d22b
- SHA512 41ce93ff83889c8b408fad93905b394dd15944f020fce75a6b2755d2ded0d0a6b1db15ffd40c27564566ae5c38129120cd032b2e219db62e32a561ca357d02a1
- SSDEEP 192:DFtMlxRKz/gMoUaIWxmZINPiwltcBhqUR7qViQZMf/F3U9K:DFtMlxRKz/gMoUaIWxmZINqwltqhqUdr
- TLSH T1CC027DB7C7E8862DC90156F4DB256F1FCE2D0A14432C3D66C9D8AE1BA3E2871E21175E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 8KB
- SHA256 4a72c9b21a316371892c86ccec7d90986d43c5022c871e18af293718b5291745
- MD5 706073a6c8f62f1b2dc0927e7fed3efb
- SHA1 5defd1eb684f8084d70721444100ac31694bfbbe
- SHA512 9ad37abba499027d499d9d2fca1beb5f449ddf3e88bbc8d068b0736048f9125669ee478e688f594aedda603871f3e3a68a30165d16dbb973e982fee04699f779
- SSDEEP 192:D/Qln7KU3LtGU7aIWy44kmWINP/NnltcBrqURUnKViQZMfA:D/Qln7KU3LtGU7aIWy44kmWINXNnltqP
- TLSH T183128BB7C7D9862DC90256F4DB256F1FCE2D0A14432C3D66C8D8AE1BA3E2871E21175E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 7KB
- SHA256 b2c6f1608cde27301c80e2d9b18c1963c6ff611efea9b512a04ab72cf19e38a1
- MD5 68a1bf431b581c6615365ddc05ce9964
- SHA1 eb96e7e477c97dc76798dc3bd685802e17e22a62
- SHA512 762168fa782508a53348f979ec9e460473258b436c53cefb51cb7275f733b0f1b370c340bcc4a3ce868695b9d63621fc7228985591648a5ec42d1e0a0b24ec0b
- SSDEEP 192:D/Qln7KU3vaIWy44kmWINP/NnltcBrqURUC7QKVh:D/Qln7KU3vaIWy44kmWINXNnltqrqUSC
- TLSH T11FF19EF7C7D5C62DC90256F4DB256F1FCE290A14432C3C66C8D8AE1BA3E2872E21165E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 7KB
- SHA256 37e4df5a370fef1163e4c87bc1de97140659427b09e965698495b9f8ee362670
- MD5 38f84f5d8daffec75f459738c7eba677
- SHA1 b6d68907062514ab15c6f2f95401c8bba0b7a74c
- SHA512 67df6bd815197bd0af6205f9ed43a7b0a1d8ce8d592e93813bfedc94e703f55b7a088bd0c96bfdcc6f9bd36ade59e34ff68f5fcd71b93f7e0b364e5e1064b5f4
- SSDEEP 192:DFtMlxEGjOVMoUaIWxmZINPiwltcBhqUR7nV24Zim/F3UtZjhq:DFtMlxEGjOVMoUaIWxmZINqwltqhqUdT
- TLSH T18EF1AEF7C7E4862DCA0156F4DB15AF2FCE290A14432C3C66C9D8AE1BA3E2472E15175E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
- Size 858B
- SHA256 a20521726a4f2e3f25687f58d5e0189fa958ba1e7e1d9362c18d91c77c0346d9
- MD5 c429dd004365b892dc959e2f341b8741
- SHA1 85f6562d2e245b399d364fdbb8b0f9abc0a8a43a
- SHA512 16313bde34c1a26f61a4b744db85319043a29b9f76b3b3b08b6b747f3b999fd2183172d43dab4a493ca0055775a3d20e4cf08c0c6d90702a417331765d141b7c
- TLSH T14F112F67D26EF05B50BD49672E05FC0A3ABBE830029258F0CF66816DB0D14F31712877
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 2b046ed9b9edeca347524530b1b9a70961ac0837730a19ffcf5bed1d56c926d4
- MD5 98f5a8d74540980fa672704c8b95dde5
- SHA1 83ebb5191a3feb3f81d8a997402d9f53ae90c911
- SHA512 7e8823e0085ce401f12e3af6104298724065b950e5bf99f496fd18e68750c457d17b773b74c77b7d7737f2c41c049a3b65837d65fae55e968dd4cdf14b80188a
- SSDEEP 192:qRscBzQLxycglOEv7hpAPRp2HW3jvI95Hsb+WN3hrD4bz2R82EEWtIkwAaqn+Vyr:qRsmzu8cFg9UXwrwVg2y2lWigaqn2e
- TLSH T1DC52FA6EF920647B5DCAD229FA263B17D3F6142121D42E84E6FC892C16DB6CD321741F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 9bee321221173ca802a41254159ae4db400c92aceaaaa1db37dde92322d71c41
- MD5 210429029b052fcd9c4749ea3a2100e0
- SHA1 75516eddf0e1fd5897d8af0a681e517f3824f6bc
- SHA512 5260a130cf7ad0dbb6481c9ad76ec05bf8b6aa82bb9f0362e4f610a07df6a44ed0ecb81b19df3e417032a454074a90b450793587fcc2010165771faa2a60fb09
- SSDEEP 192:qRMQLxycglOvv7hpAPRp2HWI95Hsb+WNnrD4bz2Y82EEWtIkwAaVn+VyIsnAUgtK:qRMu8cFn9UXerwPg2B2lWigaVn28
- TLSH T13952FA6EF910643B5DCAD229FA263B17D7F6142125E42E84EAFC892C16DB5CC321741F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 ade0996818a2ed887c4f437f836b2de3ccd80194e8e2b423eef376782acfe3f3
- MD5 ca70f59021a6cd8984750af265a64644
- SHA1 d45809d2a7cc960f1314bdd1707c5263f42e5314
- SHA512 3dc6aa2cccf1053bff0c9f0e2c91ea1757dd4e363b179e4af8ed8419189bcc3554d271153ce1e3f9e6f373cc1e452fe01fb40917af5137e099f1a84cdcde2f14
- SSDEEP 192:qRscBzQLxycglO7v7hpAPRp2HW3jvI95Hsb+WN3hrD4bz2R82EEWtIkwAaqn+Vyr:qRsmzu8cFD9UXwrwVg2y2lWigaqn2e
- TLSH T16352FA6EF920683B5DCAD229FA263B17D3F6142121D42E84E6FC892C16DB6CD321741F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 14KB
- SHA256 e5d98f6ca5ae40cf12e43c78ea30c894204ff28a3cd8b7397b4ed65457773a15
- MD5 58d9a23739b8d27147a62fa8139c41f9
- SHA1 839d5948aeba6b0352c9c4f49b2ff3769fb778d3
- SHA512 0dc415aafacb3b8aa8fc642f76e20405b5596319cd97827b9ffd8f61c56fa7bcba683650c854b2950cbda0ca253b7d30c3e17dad1bd1c7829efef9d6a54de5a5
- SSDEEP 384:qRsmz+8cFf9MXGrwM0n8a2KQ2lWigamn2e:zmz+dFVZrwZnsKQ2Pmnj
- TLSH T1BD62F96EF820297B5DDAD229F9217B17D3F6102121E41E44E6FC892C16DB6CD321741F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 a58e0508e3a371405d2b2e4922f435252450c11357167e88c98acda549580105
- MD5 6040deb794c27878ee304c59315e7d2b
- SHA1 d588832f21097adf5303f295deab39822328cc8c
- SHA512 3ca13107b59466783731c171617edfbda452176860091b919291d9cebd184a7c86400a3758affc0edc6bc7dc2b15727cd5bab3f1fc71b6c195cb1c5622e53c0f
- SSDEEP 384:qRsmz+8cFf9MXGrw+of0n8a2HQ2lWigamnqe:zmz+dFVZrwqnsHQ2PmnP
- TLSH T1AE62F96EF820297B5DDAD22AF9117B17D3F6142121D41E44EAFC892C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 70b5a23f08716ea23cbab14fe635f9f76ac34449ead0d100243691796a3bf027
- MD5 4724e8a32db8df046a68b18653c25ede
- SHA1 4f0a8274e2baff1e541970068b9c32e00ed7d1f0
- SHA512 aaeec201feadc90809e9495c5644100ff934cfcd1bcb4c092abdcf7a47c4f68b8a0f13279f85007994f3150fd0fd3cb2070dbf618d16d1a5abe0ed4972f8da37
- SSDEEP 192:qRscBzQLxycglOvv7hpAPRp2HWxI95Hsb+WN3hrD4bz2Y82EEWtIkwAaVn+VyIsH:qRsmzu8cFn9UX6rwVg2B2lWigaVn28
- TLSH T14D52FB6EF920643B5DCAC229FA253B17D7F6142125E42E84EAFC892C15DB6CD321741F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 9e151191ba0c8ad8e58d2b76b2d1fbbe19db46630e9fc3405077216579569473
- MD5 e599a04864d5255595cbd9c09124b49e
- SHA1 33b4ac035bff9ee2954de026f4229238261c92fe
- SHA512 a22ffaf44332c61d83dc77f6d0df6c94bc2a0c537ce8889d8225f537638f421a8df8eb2887d7bf2a129c752096ef25ad3c9dd1e85bacaf95da18d14ac0f793b9
- SSDEEP 384:2Rsmz+8cf+90XGrw+ofLn8a2q2lWigamnWe:Xmz+dfKBrwNnsq2PmnD
- TLSH T13262E86EA820297B9DDAD22AF9127B17E3F6142121D41E44EBFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 8e40a355943da315eb94ef19bbe911a254a3bdb057257c4916af9dc2c6b558a3
- MD5 071d1ee38af0fa132bee65c328a29ba8
- SHA1 785ecdcce3bc2105a2df2c3ca2cc68ef62b092fa
- SHA512 dccc560a9af2e2067006b1b49d54b79c51aef9e2a77d7ed780571eaca838da0ba7bf5ca3494711d520a01ee394333945c162ac2dcc89dbdb9525d1c56837b604
- SSDEEP 384:2Rsmz+8c3i90XGrw+ofLn8a2q2lWigamnWe:Xmz+d3eBrwNnsq2PmnD
- TLSH T15262E86EA820297B9DDAD22AF9127B17E3F6142121D41E44EAFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 25e98ae10033fb82f27af272f302e737036df66f5bdffcd15ccfbfe3a36fde8b
- MD5 9958cf39a324f9d1406d22807059ec31
- SHA1 b97b1f3084d81dece9319ba44e6a24fe2ffa6ed2
- SHA512 93f3932bfc88b4b11c85a5f58a35fb17ae944bbc930fc1f5e76ee6cfd11458669315e420a63ba400fff1d25d63d4229815bb976f5776296d9be3d142950201d3
- SSDEEP 384:2Rsmz+8cHb90XGrw+ofLn8a2q2lWigamnWe:Xmz+dHRBrwNnsq2PmnD
- TLSH T1C062E86EA820297B9DDAD22AF9117B17E3F6142121D41E44EBFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 bef3db6308c7ccad5948bda280721e87dc98d8823481337cbab47f49bbc2901b
- MD5 1c25f18b0bcc8c17f2038312d1e7e17d
- SHA1 79df981a806367eb9c83970c9912fa7aaddd4749
- SHA512 ec3ffa3c4efbd3ff7aa941af88fb39742f5ad10a7af79871afc5c3115e16480622471f988ae9c95fe5ad1cd302febe39c3e5bdf349ad368f379d7123f165c90f
- SSDEEP 384:2Rsmz+8cGM90XoIr2+ofPEGn8a2u2lWigamnWe:Xmz+dGcar2xnsu2PmnD
- TLSH T1A772D75EA820297B5DDAD226F9117B2BE3F6142261942F44EAFC8D2C16D76CD321381F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 cd6782895c8a98f1400b32b0a073575255b4520e86b7cf38bd59bb8f0f0219eb
- MD5 8bd7606e75d8b74a4b52c4ae3f103e99
- SHA1 b97a06476d86eb8ba9ada0b67bd54f7b82cf1f2d
- SHA512 5b9b414c3384cf3cebdc38b0b85aeed3b73ebae16cebf0c662878ff37ca7fbd323c31cf61d3ccf9fc6d8188cfb6313c1b6c8a8214c2541d7426be6c3d45a5cf4
- SSDEEP 384:2Rsmz+8cyf90XGrw+ofLn8a2q2lWigamnWe:Xmz+dyVBrwNnsq2PmnD
- TLSH T14562F86EA820297B9DDAD22AF9127B17E3F6142121D41E44EBFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 dab2bf176a05409b31e84dac26d9ac27bb1e53d3f51a60569a011f36b221ed80
- MD5 ea3ac141f72cf99e6d7fd538f681ab76
- SHA1 e1e5ddc51734c843173b56a4af8172e4a6e514ee
- SHA512 af08eadd57acd542d611e403ec19d82913d41b99c41042878003dbc7a056308f1d972900ecb4d79a519eb7d9a583fdbbf1b6fa1d764cbdc0d20f8db5b9c116ca
- SSDEEP 384:2Rsmz+8c2J90XGrw+ofLn8a2q2lWigamnWe:Xmz+d2jBrwNnsq2PmnD
- TLSH T12562E86EE820297B9DDAD22AF9127B17E3F6142121D41E44EAFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 ddbcc0697686bdc34f48a37bf6094cd12f8acb8c09b8ba8187a458ce9de4c3be
- MD5 e2c0f3ff1c3e71c0c64f82e1d627f5be
- SHA1 131fdee3ea38e19867100abec817ad5846c9bdf5
- SHA512 51a510d696e8bd923abee0db437f6898d387316de72ae9b1a5a62a95e636a67e8f9ddf2be7532d1d650a9f2b0c0375879a63695663e9f939e2bc282dda98a52f
- SSDEEP 384:2Rsmz+8cVb90XGrw+ofLn8a2q2lWigamnWe:Xmz+dVRBrwNnsq2PmnD
- TLSH T16062E86EA820297B9DDAD22AF9117B17E3F6242121D41E44EBFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 fe5d919834bb93e63a7c5915e7ae700df52f8677a20204c3a38e822d253ebcfe
- MD5 91567bea1d64e1801e2eaaf441d7f933
- SHA1 19238773b7abe1b9395ab5489162f340bc0a75d4
- SHA512 387ab196f6941140ae84c77a378be66d095c3e55ad8aea824c8a270b7fd06e35c5de4b241e0464041abaec741f252b1f3d8c4e9125adb61d42906a661a89ccc2
- SSDEEP 384:2Rsmz+8cf+9MXGrw+ofLn8a2q2lWigamnWe:Xmz+dfKZrwNnsq2PmnD
- TLSH T19B62E86EA820297B9DDAD22AF9127B17E3F6142121D41E44EAFC892C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 bb7b7f06fc466d7c9166040786a4faf04e77dc533843cfea0c9a8f7812cadd13
- MD5 2017ebf8f74ff187a98f49f6425458c8
- SHA1 44f066d22ded75c19237a650a82c222c225d5d02
- SHA512 7eb07674e03cb9e58cc06493d63f622b7752413a2a3c6f005658405789113f992a2b9b3391d1b9ebd593822a1154c4e71bd41baa35d664dccf1314c98be115ab
- SSDEEP 384:2RsmzXucGM90XoIrW+ofPEGn8a2u2lWigamnWe:XmzXLGcarWxnsu2PmnD
- TLSH T14772D75AA820297B5DDAD22AF9217B2BE3F6142251941F44EAFC8D2C16D76CD321381F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 022126171c7be7e53b75f50977ad3428f246350fe262c6db489f9febc8f6a7c2
- MD5 10d808743ae9068679fef238ee19f84e
- SHA1 7f1f9a8c6a6be4483b19ae8394e0ad10c37c8e94
- SHA512 3e30f643dfccbb674c667a21f83ae0a120bab447fa07e58d930c8389c5e105359fed6b6370da3d703f3f666d88505f520f3b9dd411f81aaf4b95026d8b481da0
- SSDEEP 384:2Rsmz+8cOb90XGrw+ofLn8a2q2lWigamnWe:Xmz+dORBrwNnsq2PmnD
- TLSH T1B862E86EA820297B9DDAD22AF9117B17E3F6142121D41E44EBFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 a70ea4e7d47b215b1542634095bf1ca661d8478908775df4075233bf859389c2
- MD5 62f5030fdf4b63b797f36aff8bfaa10f
- SHA1 e6962724f72b278145df2ce056f547196cc90509
- SHA512 db1fdb9b6f435b93aa4ee35bdfe20426533b81bc6be78dc38b7cf3f57d0602a559fd93b4f848cd7c95ee6529c79c0e5966ba9aa544ac118826388e8fe56dd358
- SSDEEP 384:2Rsmz+8cff90XGrw+ofLn8a2q2lWigamnWe:Xmz+dfVBrwNnsq2PmnD
- TLSH T1E262F86EA820297B9DDAD22AF9127B17E3F6142121D41E44EBFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 b99ec3f8bbbe6ed65260da170f3923ebcf0c1b84b5c8575888bfb6d28d5aeab2
- MD5 fdb32c4ba02822d2bfd151de0e13b3c8
- SHA1 dddbb9ee97b8d7602b45200c773822b3693d418d
- SHA512 e47a2037de7cd3a0ca68a1ae73dadd43fbfa862001186d5ba633f11ec5b362758ad5f6f8026f7fc7e8244cf7f00d9cd9a05a6e0435fbe83fbc28768e529c06a1
- SSDEEP 384:2RsmzX8cGM90XoIrW+ofPEGn8a2u2lWigamnWe:XmzXdGcarWxnsu2PmnD
- TLSH T1DA72D75EA820297B5DDAD226F9217B2BE3F6142251D41F44EAFC8D2C16D76CD321381F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 b265132240250a4d4923c2331689af0f25d8d434b2e94dc10e41d1eb82e719b7
- MD5 6439e0e56d17df98d4979960445ca1cf
- SHA1 21d840939c96203b995f26769c85823edbeaca15
- SHA512 0ff28b5df61f8f447d1e819ad523e447487ff5fd5163cd96c7820cfccc4ffdf12b496a384210a2b6d3ffbfa791075b9dd78afc189298c88642f8669f8b446a1c
- SSDEEP 384:2Rsmz+8coN90XGrw+ofLn8a2q2lWigamnWe:Xmz+do3BrwNnsq2PmnD
- TLSH T12162E86EA820297B5DDAD22AF9117B17E3F6142121D41E44EBFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 06b197249056e6c41d9230e8607c8b00e8140fb9829c2f28f832f5b32c63db9d
- MD5 35a3670c2c4dcde031b0c25825cbb6a4
- SHA1 f0f021a9d2ceba74c4d1728afa2b2dc91b1d1341
- SHA512 0de344db6536f9b9dbf6eb332426920a1fd0c5b81c2111a94d5e75103884e85f08ac3270572179a700e139e95da761aff0ae2ec6ad3902c177b60140c79bee59
- SSDEEP 384:2Rsmz+8cKb90XGrw+ofLn8a2q2lWigamnWe:Xmz+dKRBrwNnsq2PmnD
- TLSH T15B62E86EA820297B9DDAD22AF9117B17E3F6242121D41E44EBFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 0fe59642f54f2186b2cf746c9f908efef3bca3ebe3af781abe6d6292f607a406
- MD5 3931f66f6154d6902234c0e8d6d8b5e6
- SHA1 65a67776ad4b56e4e2b52a443409b3a51ef8df7b
- SHA512 07668e708870071f60cbf70da9b7cc76d86588a312f6d689acc81e7b36f2b320fa36f167771e0d9ec6c9af4f1a9267f71fde5cff65d7a8760e692bebf3e49477
- SSDEEP 384:2Rsmz+8cpb90XGrw+ofLn8a2q2lWigamnWe:Xmz+dpRBrwNnsq2PmnD
- TLSH T10562F86EA820297B9DDAD22AF9117B17E3F6142121D41E44EBFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 15KB
- SHA256 097921dfba4b2df39f854f3be4e7bd8d519b4b9e5b3a2e4a18fe27efb53c39d8
- MD5 e1a7c2c619f1807c53ceb3581e2e43a7
- SHA1 60f1647a144d0dbf6b09b31b5840ea9b9a6da964
- SHA512 4d902fe4f5c1e1df682d56eb524e0e17824c5dc8b6c0050461dc0c66bfa1930609faf385862fc8dd520a03994db2e43cfc3cb46c8c0a009e0d052b5d477219fe
- SSDEEP 384:2Rsmz+8c3b90XGrw+ofLn8a2q2lWigamnWe:Xmz+d3RBrwNnsq2PmnD
- TLSH T11162E86EA820297B9DDAD22AF9117B17E3F6242121D41E44EBFC8D2C16D76CD321781F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
- MD5 238ecb1a3e1c98f2912f099b0b7b8a1c
- SHA1 8ef41ba79237b6d6468df95cd855e11fa292bdcc
- SHA512 ce27ea08a3f6036dcdccaf5606f131bfeaa96a34cb88aad7fdbbef444d0eb669f860c23142443bbec8334482763511fadcc152f5ae3ac7f75fcb910a49c20877
- SSDEEP 384:Kkj+F7KxkXqKf/pUZNCgVLH2HfgsloD7pLuLcSjsNXOD+F+ErU3qsHGZ45hUeHD:Ko+F7KxkXqKf/pUZNCgVLH2HfgsuD7pY
- TLSH T16D72F9677C4C9A3B0F94C6CCEC277B4FADB6024B65E9886542FA581503D5ACF110A2FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 13dcde459b9fd90eadd2bf8d4dfce82985c2bd6e7acb402eed5b695cc6155617
- MD5 2c1096754bd016917b39cdcfb7d33362
- SHA1 78d09a1c3c7360aa1a6481eb89e2f09d9922c736
- SHA512 eff19441877540a97e5da560e6e24d0441767d3847fee48e41256dc6a98f5cd91b9d30a544c2218149a03f543d2d770bb7b828c3df0dacdf11820aba554fa40f
- TLSH T18CB0121080415511C08306F01143A48C71249F10960A3B0543F47A2AE839361C465050
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ce38.TMP
- Size 96B
- SHA256 c24b57405d8e293a72628595f56b25d5436b328cbe61934ec53ae2727b1ab2ed
- MD5 e69ef04280da7691dd137af5dd313002
- SHA1 32ad516cba6e0eb5a74251a8ade3956f1ad076f5
- SHA512 f4bd1946fdc295604a0d3bc6a24c6eef3fcbfcc25fea0e47ba3a9b98a7113e0d4ac69efe9a9c3df22f23403044fb7f959f904c9233fe0b5da91941005b688f0a
- TLSH T141B00276D342623AC05213B0259695E87264DF35C613221292E12B7AEC2567555361A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
- Size 96B
- SHA256 f62df69d20dbdc417ec5366b1b77a6dc09567dc265186a8aa15b43ff3047cd3f
- MD5 6ff130c8153ae9ab48c50456cb30380f
- SHA1 ad11f5e623e36cb5ac2bd0ae2db4b6d812533839
- SHA512 a4c12f1e50b4e9f0b45a63c4379680346e52a941e07b7e1145171736b3bd1c55b6b058588e60c7cc006f4548f16d0e5bb8fde6be6e855f28d9bd0f944e88e8ab
- TLSH T193B00254046D5DE3CD6D43B837C715913BBD4C2917A2E526C1F0066BF43F3636359644
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log
- Size 247B
- SHA256 136f94cce007c7076221aee56e3717abe2a071f32472a787d137682a54e02e7b
- MD5 1f893e66a94a09d7377dae5cb4305e9b
- SHA1 b16b2fd9b8e51e16a154c12d5b723f06c865b014
- SHA512 742d043988928717c9e27db88df25a56015bcc1f2c123c3eb866291644ecf41a487d3fd6d44121be8aeea27f06a254091aeaaae9e296f65f91a3044c857bb874
- TLSH T15AD0A7067B420005D59B77B1714157826788AC0318B25447455ACF706917BD53F10581
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG
- Size 348B
- SHA256 2d05151048aa628415f3bc374b2a7e554036bb979d9ff72c466ca9d94233a8b1
- MD5 fb4246052c3e7ba41b962674b5d3bde9
- SHA1 150c074ec46a4c771a8afc44c47c98ea11e50c15
- SHA512 e16500dbd9aa0c83f1420becabd04f77a5666990766c9587b5ec3d69a6a93b889edf7d8819238e48d435451d0ed2a717097981296478878c9bf10f8676829700
- TLSH T1FCE0D82065CA87AE208780BBE210F74EC5E1B40BEAEDA5959B24A48852C7404B1D1A51
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
- Size 321B
- SHA256 c022abc7c5750832d0b0f32e69fca9177dad259d3b406735a16175556fb5fb35
- MD5 e9376df532622466df601c1ce5bb0321
- SHA1 0e16e08aa5c317d0d23f9e68f6ec8ca4b55e713b
- SHA512 bb132a60ba99e2f751b16e7b021cd00c66698bef1926fd989ef71f8a73f0ad03cca5d57466d5337340b4f0d7a426b0cbde244a87d565a865d04e32d907b57632
- TLSH T192E0267065C9C2BD0490C0ABD270F30FC6F0BC0BEFC9B58AC70450886183804B1E0BA0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
- Size 13B
- SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
- MD5 43ef949d3c6e9956545979ace65d0085
- SHA1 63f2b2de8727854597e49a1216e8e74c68117c07
- SHA512 313a5ab7ac9b5efd955beba4615784bdc2a9058ddaa804d85fb2d0c651dd3de07e382d61a1bb482499520a80e0b64c004ff2af03459cbc1daef47f540f0a6905
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 236KB
- SHA256 60d071f7d9b80b1823652193f233740e2bc6e1cc4dd364049f65a821b2a24fc0
- MD5 bbf948e4f0ec57d6982a8a2853aa72c9
- SHA1 bba62a62b413902bb2c0f003fca0c60c4ee46b84
- SHA512 1d301e2e0dea77b7fdfd13be05616e5927d03e0a2c16c39ee524510be3e2c87bfa46691f0cd0d6b5ff90c710a28c5bd747c2512d05167bcd714105e4993e88f6
- SSDEEP 3072:DkcQcRwuGRMWGRZ7vby6eyybtB2SU/+Z5iqfd7NtZL8cHQRZEQ6Spse:gmRwTDGRZ7W6exKGQqZ/ZLW3Exe
- TLSH T1FE3413135BE66F338AC0CE74F8570FCE6AF6C492C178821446AD6AFF18825617D474AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 237KB
- SHA256 d5d79ddda2ecbece60d9027697d5c65d5c0c01d58d2f4458b338c442d6e6f1ef
- MD5 d68f1e8bd5705104c1966e08fd08a360
- SHA1 9a8570f578aa634447cd7c176b4a0233e352f887
- SHA512 f02f3403e5b46c2f28f6e6aac91b581eb204186eecdc29b9e68682a1173da2e04ff2ddecac26f35e83d313f1e63fb9f6a25b9ce9f128cd212fb5419a44a5e382
- SSDEEP 3072:PXvcQcRwuGRMWGRZ7vby6eyybtB2SU/+Z5iqfd7NtZL8cHQRZEQ6Spse:vvmRwTDGRZ7W6exKGQqZ/ZLW3Exe
- TLSH T1303413335FD66F338AC0DEB4F8571F8A2EFAC493C138921849686AAF18415717C478AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 115KB
- SHA256 737be0c3fa018738f42adf6c301ed4c03f2981c5fa8a613a26d322e61ed51e3d
- MD5 80b6ebfa2bfc0520bdd295e0845b20ae
- SHA1 9cd1f4e604e1f2451ad3612603764aa7050ed256
- SHA512 9f53100ce6e2d12443afebd68a8256e9c6e0327aa3f9b79659dc45e05b9fb1edb78acb3590452eb32c9cfc7d192c14232da9f9029111e2478fb79337915fce89
- SSDEEP 1536:65yD4aukHU65fd7Ntk8XOP851ZqODZHQ3gwGSUq0BTQQwsNwSVwxfQEz3bICbji:+qfd7NtZL8cHQRZEQ6Sps9
- TLSH T132C30237EBC21F335D82CB64BA534FDA97B644A99030D301AABD3BFB6C53451644249D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 237KB
- SHA256 aed70f2a95dd43dcec8f87ea87c560a3c5bdc7e6523c43820e8d31b2cb983b01
- MD5 35dc8c158115ba6d45488ae20cbe8b0e
- SHA1 eb48e138339060e4cf70be84da762547cebd8d01
- SHA512 b10a6b76b882c621be35b7fb8499ba50694576d089ff2d3b119e4b331688384dd328a079ff0cf5f53db2dbebf1ed3f4babd0ef399052e6a0cbe5a59ca50d1bba
- SSDEEP 3072:XXvcQcRwuGRMWGRZ7vby6eyybtB2SU/+Z5iqfd7NtZL8cHQRZEQ6Spse:nvmRwTDGRZ7W6exKGQqZ/ZLW3Exe
- TLSH T1093413335FD66F338AC0DEB4F8571F8A2EFAC493C178921449686AAF18415717C478AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 237KB
- SHA256 c1afb6ee7a8127b70393fe82f2a946407bfc912887034b11883de964e9e7b7bd
- MD5 5b82995e4c39c3ffa03853f5f6bbc8d6
- SHA1 2c94a1b961151d9ce14febcb1c792af88bf0c870
- SHA512 dc8f5a28e49e96ee747ab1cae8f3a3e98c43c9b94c4aef1d9a1dd331a7792fcf0f69a5713fe5dfecd6c456965c1f8211d044b1b6e04d3934fd7f80ae92da5d24
- SSDEEP 3072:ooccQcRwuGRMWGRZ7vby6eyybtB2SU/+Z5iqfd7NtZL8cHQRZEQ6Spse:rcmRwTDGRZ7W6exKGQqZ/ZLW3Exe
- TLSH T1D03413335FD66F334AC0DEB4F8571F8A2DFAC493C134921489A86AAF18425717D478AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 149KB
- SHA256 39a09ce8d981404bf35c1330e8f7264732a929a076e92e18d31b3b6582200b37
- MD5 44ab04d7b756a2389aa441fffbb725f0
- SHA1 09d9295c740bcac841a527ae1862e0219872831c
- SHA512 b9642ce7ecdf8ee885a3cb2e8ea820534b1055077e7f65a063bd8d4b03a76f087ed028d4697d4be31aaac6cb80363f534d65377597cc7d2d92bdc72d474ba167
- SSDEEP 3072:7yyHpf53cQcRwuGRMWGRZ7vby6eyybtB2SU/+Z5P:u8p9mRwTDGRZ7W6exKG9
- TLSH T1D7E3120217F8DE5242E4956DF47F1F4E6CBDE8A383AD293408E4ADAD05C0370BA5B56E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 236KB
- SHA256 127472ef662d88b483eae473b0e92ba58368ffde8b8a1c746b66b7056405c5cb
- MD5 440b022249b34bca8979d2f5ca8b90dc
- SHA1 ebf59c662dc3dd0dd73f53208b549a1eaabe148c
- SHA512 6e8e3c49d081ec595de1e6ad3e54c1491fd08510519bdaac6e70d7909042ebf69fc5a3069670e1cac7211f9907c5d18cc862bc8c8688a5022d67694529099c75
- SSDEEP 3072:RkcQcRwuGRMWGRZ7vby6eyybtB2SU/+Z5iqfd7NtZL8cHQRZEQ6Spse:emRwTDGRZ7W6exKGQqZ/ZLW3Exe
- TLSH T1E83413135BE66F338AC0CE74F8570FCE6AF6C492C178821446AD6AFF18825617D474AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 262KB
- SHA256 59c6672c4fe67c16275bf935c107f2dd4600d9f202b41e041de4791dc703e628
- MD5 3b5b5532680ddfa1fa6d470f32c0ca6c
- SHA1 797c46a1a8fcc9898b9c4cd459c6279db69f0ac1
- SHA512 0c65ec4a3869cfbc26b928472e0c26c0f17bd18aa146a3c8115b6cc684603c4272b501982098ea75def0c00c414e24208ea70ea4b2a5db2f0a9b898efbdb2e1e
- SSDEEP 3072:o3yHpf5HicQcRwuGRMWGRZ7vby6eyybtB2SU/+Z5iqfd7NtZL8cHQRZEQ6Spse:s8phimRwTDGRZ7W6exKGQqZ/ZLW3Exe
- TLSH T1194413331BE15F234AD1DB78F4670F8E6DF9D8D3C278921549687AEF1881260B8478AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
- Size 264KB
- SHA256 518cb034d8b355dc1b0d905a8526b850e37eed61c0004abf03b8c27c89b9813e
- MD5 0f1af93166240e0093b4bbd375a017d4
- SHA1 489c8edbc2e5a287e210d48c34b3a630f13a3ca7
- SHA512 5ee457d81cdda4a50a2f01781976c8325f2ebb6b0065e30f2eeb2a420074c87b385cf0f76fb727de70a527e06b70af50bab3eaa6022cd1135afdc2ef5bb9e1b6
- SSDEEP 3:MsEllllkEthXllkl2zEJHwoC:/M/xT02ze
- TLSH T1F54404547FC00415C50014314453C3504370F41105177FD334570413DDCD7453C01544
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
- Size 86B
- SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
- MD5 961e3604f228b0d10541ebf921500c86
- SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
- SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
- TLSH T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
- Size 48KB
- SHA256 8ebe4404bb0a9c35d2467823829d8811f57098a0a4fd0275a27b16410e573910
- MD5 7e447eca369b856319d464739516fbe7
- SHA1 671c56e24fddb518f22ed4844f373c6f17d745b8
- SHA512 0cac4ad1c606d9399145e1008d7bdbeb9f1b8313556bb2941563cd4a442813c855705114c863e103ffc25c7edca43d82541d2c2a7d9e875daae141c1f2f23c20
- SSDEEP 48:TkkhCU2QB2zbBxxUsUn2B8kKr1Jjr13Tzz3oRhdmhycZM:QUcfusHBLM1J1Dzz4Rhdhb
- TLSH T10623331F26292189F8E11C3EFED28D513D7E0F18CA1BA9D514D00CB98CF14BAA02E27D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\7FRQ0ITZ\geo[1].htm
- Size 18B
- SHA256 41fbf024b0285e7d81075c1bbb9bc4b8cde83c8e495aecca335d45fba74c9cd8
- MD5 7242788aa0f42e038b1db97e06e93471
- SHA1 0370e5db36213a47ae0170e27a7f476a552ed357
- SHA512 dd86476e88ec502c78a58ec5b0ed66cf2f2f6c25acde7a9b5ab1932723695baf8eafdd80c20a0119f0eee30c0fa5df5e1cb65fc0f7446bd3597ac54607cfb0d7
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\M8GAU4O3\logo[2].png
- Size 1KB
- SHA256 c97e703578120c1f7a570acac3b461178a5e051ce16be9e266c1789c1d610ac0
- MD5 2d4e9e8198f0c3eade53c619cd1fe4ea
- SHA1 80b29f8dd0c4951ce7cad0db1fad1d9fdb275fc9
- SHA512 afef06bfc6bf857a1b7966a04a8779aabf3e8a6d79b4c51867335190959acc469a4e1929b4c66430a3eece1aa5d1decddad005b326ec830c2b3a57179f3c626e
- TLSH T16A210B4723B4BEC7A2A30085230E0056A13687501168B7E58B87ED57719518542A2B86
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\OperaGX_56952442.exe
- Size 3.9MB
- SHA256 20e8b5abe10b4315e603a6e01a60972cf0794d6a39ee0d01a839cb0c637a5d09
- MD5 36d140fda197cfe4520dd52a1ef139af
- SHA1 4a621ad5c77e552b26bceea59a644a407611d464
- SHA512 b47ed3a650886c6de172bea3e6e1eb3802ee09461ef80938c8ae349274a5c309307d0d1693ca54e39bff473a107536273e51d16871e267546f38b9577b5349ce
- SSDEEP 98304:6A+O4QUh9mlN1MTulTh34TQUe8DQP+F+6gQ:KO+wlNDThoTQUeYM+F+G
- TLSH T14B163312BBC58075C9B331310FA5F7A816FFF5260F2656AB638C06AA9E706819731F17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\133.0.5932.81\resources\custom_partner_content.json
- Size 245KB
- SHA256 84bc1efb211c6b45f2906278a36f1414922f994a9611bbee7713ffd4ae21e967
- MD5 f68d0557a8931cf979a21c59c1bae019
- SHA1 e0bfe0f9a947916ebc1fffa52d7dff524e76c2ff
- SHA512 2f0ef8e3e11daf0ad266c4fdc35d1e6e2215556115054f635ef9199b03a6924b1aa989f052461d59b9cdf57ec5eafa918e806fbf2d242f63699a8a65b0328ecc
- SSDEEP 3072:iwK+GwaiHEaacjK+eMuhKS1d/ttUYD6W6Z2NrwYrVZCs0iUCabiKfAu/wX2OCy:XGuE/c9L+1btUYOnkrPVZCCUCabNU
- TLSH T1BA349D7BD4090CE327A561E68879611EEC21D26B0CE97C257B4C254C0F9ED6F25BC2BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\assistant\assistant_installer.exe
- Size 2.5MB
- SHA256 e86907d20a18c6b99e270a4422e0c279079e8a118b6bd7fbb4001161ddc881f4
- MD5 31f5e82954b11ee1cbaf09294f7d5d6d
- SHA1 580d39bfee5fad23b31ea4869561b4f9d15f322e
- SHA512 e3ec7a6c238faaa1561b12b67217edac16e5c63ff68483daf4e7d7bf6b1bdcc16e2dda5b11a7b69434dcfd864cab6e427854d8d70a2cd7cbf744ca8b15a6fe9f
- SSDEEP 49152:6P/Ojp1psS7+BMvcOZ+XMxNBfAlVH5p6h7yMo:6nOjp1psS7+BMvpiMnBfAPH5p6hGp
- TLSH T1CBC59D02B89194B5DC963032361CF77E9A345E114B364DC79B90BCD16FB9AE2223739B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\installer_prefs.json
- Size 1KB
- SHA256 e3ed5ad7cbfc11a1f2e8eef84201d3762861d14ddbfd323d295b57a9c8cbc369
- MD5 a6e4555504643931e545985c6db96c73
- SHA1 3427b96b705940e690579aee43fa9bcda68141fb
- SHA512 0b3ad2bf3f6881674886b0b2902d81372918f80b9f2cb7317a034ca0446f2b7a60fec359af4ea8467eac14e89f5218df7bd7bf05511d20372e87c77df8c4988a
- TLSH T1C531A66485175036BF17935FE74339282A430951A46DA0D4DAEB0E2624E7C9A1BFBF0B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Programs\Opera GX\opera.exe
- Size 2.9MB
- SHA256 ce68c0abdb0313bcece595866bb567ef6b8cfaab5b13c207cc3447af0a3343ec
- MD5 93a3b94b8c76fd1d2c4ada4bb708baa6
- SHA1 7991670518368831c185f2ea1e94852cea776521
- SHA512 9df89519449ccfd1f75af47da2729723f3969b32b0e0edc4d0eacfbcad650b942fbe73d68f9f8ebf127e9a208ae7751a296f975ab3affce62de13c5e0fd525d7
- SSDEEP 49152:YcIuoJfebXVGCT094hg+hdpoo+7+k6vrPIyaaSqZ8aZOgJ481eps:YcI4E9aLRYS
- TLSH T1A1D58C13F2D901D8D01DC1798B9A9633FA62BC454B3576DF0A90B6562F7AEE06B3D320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\Opera GX Browser.lnk
- Size 1KB
- SHA256 1cf41db858434c2d5acc9b70955d8b8ad9433b20d7685cef009d2d06bd79debd
- MD5 8953af002e3bc619a78a1f067758e26b
- SHA1 7756226cb0d399c812ab185c64488928ad459d70
- SHA512 d402fd66b5658386f7796558050839f51440c87d4167a7b78d86ee829a59bcf8ac436e56b72d12d74069545f09975ddffa5fd1c84edca1eda1e69ffed45283f9
- TLSH T1DA213255BBEC3B23F3BE8A3949772725F235B851BA064F4E101093885C781419649F6F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\assistant\Opera_GX_assistant_132.0.5905.28_Setup.exe_sfx.exe
- Size 2.8MB
- SHA256 0f50bda78a34e09ccfd5e33a7958de9eebe9863cc3d875e8b9c52dec3f3a9992
- MD5 1bed04ab23ee645cad438456a6d465fa
- SHA1 68b7d9eb6ff0bd159281a2fd55a7a24860ba765c
- SHA512 9ca295d1c574e88eb8506ba3bb4096ff3860e605b7870fe11a2eff27c85a551894345b7524485fb4fd5ed5e9cfbefb917f735ed51085cfd3adbabd9a28909f23
- SSDEEP 49152:MkinoAcJ53ld/JCHyHuw+yIfBfnDWUKT5qDztnvkbPsGaW6EYFZoMzu3ug:MkioJJ57RCH2uryIfi0mz+W6Eory3ug
- TLSH T1E0D533317D918476D22392330DD5FBEC66BFF5B22F229A9B3388072EAF201A24715557
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\installer_prefs_include.json
- Size 357B
- SHA256 b9af28cf2f5cba80e1700205e77623a99e677e4aaef9c7083d0b0fac122c3647
- MD5 0a638d28dfc9dd9f48fb17b572c147f6
- SHA1 31f341df81e832c8532e3b51a35363b1b0a457aa
- SHA512 379e2faf0a49ce4d99e10dd75a7e2e90f074b1734acba169bdccdbc430e5dfaa24dd14aa79fc808165e08986f3005aa8bc96cab047f434e10b02bc8280607f66
- TLSH T157E0D894806781654763A24EB97231C845D3191148F6BCDC67872D3201BA57634E9F8D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\installer_prefs_include.json
- Size 1KB
- SHA256 8c442787b5a4b819b0d5b1d25f64ec96515cf623e42c6118c6ff152842bf6ac7
- MD5 d6dad2c71ec1ab0f1c6c495bd8c5c587
- SHA1 11b5f51f764a76175b6cb67bad57ff0d448fc75c
- SHA512 88ce6009c83f5415c42f600fee08e41e787390f71b470c5c39b7d6558541a818e611af3121c5f656094fb4d2c78c3e1abb8dac032756931837722abc94fff1b7
- TLSH T1D91182B8C44760227B2B824FEB6334085A834A0248E8B4D9D6CB0D3205FFC151BF9F1E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.opera\65a08c67-8951-4aeb-8e53-cd876ed58d8c Opera GX Installer Temp\opera_package_202608010836291\installer_prefs_include.json.backup
- Size 342B
- SHA256 493614578a2f3e39745257d6e6563c033fe2b25450faab1f61b71a4e34074b3e
- MD5 f98eeb60735176e71c2de0e5af5630e2
- SHA1 98ffeb797a81ef70a41c2c0bfe12c96f7bf61a3f
- SHA512 73294b27aba85430f2ba7fd27c251b38e5b280b2f84b59e13f239a1c139f29dd0a4e3ae0a27532e85d9fa2742cbb8c4e96a36d30fdc8ef03f48b5590cd3dfdf5
- TLSH T1DFE0D890806780510763A249A97231C84593191148F6B89C67872D3101BA53634E9F8D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\7zS08E1CCAC\installer.exe
- Size 9.1MB
- SHA256 94e544bce1fb4f965564026d1f61eb1bf8e0f750305b1a2c82ea8a445ebb9f1a
- MD5 061711589ae8a06d2bc54489c7ee1a13
- SHA1 c8b0da3e2352758308d6a98293a6c3bbd70a2a29
- SHA512 fcf4c99618359eb8cd0372931b2a3ad5e9b50e0404dea0c716633d1c7ba262d6973adabd859033aa650cde30e04091e88296dfe2a73a903dea5132a7a8bde16d
- SSDEEP 98304:ea+ZNcMT++pJDFh113LvdDCDfImZU7QgaHG9fHFBI3++wteEmw:6NcMTbBh1Nl+BG63+Bqw
- TLSH T1D3A68D53F3EA11E8D0AFCA748B7A523299757C464B34A3DF0A9436250E75ED49B3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_1119230085\e3907b83-ae62-4359-b1f3-78bef474eac5.tmp
- Size 472KB
- SHA256 4b9b79291aca9c45d54ae238655f41b7a0eecb0b80fb3d172cd0b1d75e712540
- MD5 a5c805a3fd291996bf5394cfe97c872d
- SHA1 c2a9ffe8edbb59024902d235e267096846acd8c8
- SHA512 c4b0f3f60e8f67ab640ebc6411cba992b2c4e796f7168edc5aeefa4b3ddbc1dd91539dfd1dbc29b6ef0e6413eafd6224a2e01cef0a8706d775da345ab1463839
- SSDEEP 12288:rK5FbrrK9ssxYE6yvpQSbNcwTVq/8m4pqLmyJd+:rK8xJRpLbSY40ym
- TLSH T17EA423DDC8E80B44C906F53310A53F92EC0F1D07806AA3679E7A633A97796CE6F112B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_1189560543\8e40a42c-ff90-4d7f-9d9c-eec36953a771.tmp
- Size 4.4MB
- SHA256 d364db16e995bf1205e67dfbc468d6f5ba57114821d2ce76fbcd8570744eaf7d
- MD5 9ead028da57964c3f2fb86d88b0018a4
- SHA1 aab5530c71b7b100e7d555be62c7b447b6faa0c7
- SHA512 9756a2f0da8a789ca8f227d60c359cd8c5bed850384c7888fe27214d052fadfe5646b6fae87f4044fd3b35227b341288607356695e57e8fb6e65b9b7743e39db
- SSDEEP 98304:Ih02mfFUL4lyXjcZvbVlGP026+OldabSiUlQcYwe3mpNY5K/KU0Kn+5367:Gs9oTEpQP0gOldoSRlQR0pNY+K9Kn+A7
- TLSH T167263370FB8EB141D937E771F4295BAB49A85810294FF87FA416634479C3ED08E0E4AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_1189560543\CRX_INSTALL\favicon_opera_one.png
- Size 2KB
- SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
- MD5 cd78c5defe6084243478de9874682e1f
- SHA1 708c8c0649039ce9b3f8894d00b712d65d488ca2
- SHA512 96744c72f623462f1c64c2e49e7a2387846ed65a78d94841adb3bb5b52f27d28f657ca3f2910b6b1b338a032a9b0e0ac47d23e7b25295d6841480b32268f4db2
- TLSH T163414D878974A4D5FA41D0215A037D9EF9BACDEF40970E5010D9043A427AF5573AB33F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_1811220800\d3121a1a-d7b5-4ac7-8892-558beed562bd.tmp
- Size 13KB
- SHA256 35d78e805a910aad7462893e050376f9d18dbc73c592b4742e6ada87eff3f06b
- MD5 08f7686326baa481149eeed33dc599f1
- SHA1 291885ee6d064f0d8ae35c92bc0cd6fc35e44151
- SHA512 d5580726adb7b39fc67a2566b42ccdc4f0db0c2d5be27d027afcf005e9145ee84887d0ada93d5dad1c889112def64525ac05716a8609959df2f85dbeb42d18b3
- SSDEEP 384:NMkqXIIKqOR/UjJQrQBe6nHUSpM1L0kkW+54:NMsdMVI6BpM1Ak64
- TLSH T15652B07DAB1BA841B1CCF26FDB25C8055304FE4B9834A37639424F8199DFEA2152D9CC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_1904354956\fcb87d6e-a902-4dc8-a808-56fc2efc8f5d.tmp
- Size 46KB
- SHA256 2acdd36bdc81d5cdd5962e02cb49a8714b42bf4ad8b49c4063eff022ba1a252d
- MD5 9fc934872e22d8921ef32cd6b60d76ad
- SHA1 37593c0599f28a903c86e1bd068c13a6c9ca64e2
- SHA512 b67a1c53703896864cc5b0eb698af54367d746fcb33803020a39cd84b65787ef10341db2d3c35e567836510da235f1406c40ba84f2a33b4c029394727735860b
- SSDEEP 768:cayThrSoZK84xPzIfyyK9R5dWLKNxIM4aQKsV25aafyyK9R5dWLK0eIL4a3KsV2f:cay1rSoJ4FcPU4axIM4aQKsV25amPU4Y
- TLSH T12E23D1AA45319C70EAF48E32D30300CBB12D5BB485353A7DE0CCE1B55D56BEA774E4A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_434626541\34c281ee-827e-4340-bf9e-49561070954b.tmp
- Size 2.6MB
- SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
- MD5 cc79434c290887ea9f9eb97967e3ecf6
- SHA1 a3c9fa2a279a6a30c7c44240331c500e37b3e004
- SHA512 49bfd073fdbdab7ac6adc62a3f2a5115fce06548d124ed355f40e8234329028499d840785bc7b2e55a2f3ce2fb9d77bf6b2c3efd70508f6303ed0ad861c27fd0
- SSDEEP 49152:uwEkdF+R+C0LfbAeXf4Lylz4wXH5wtC9HP3W1FPhMZSXUq4yP4wITCvhbgK96H3m:ugTYYLUDLylz465OCB34Jmgb4c4wIO0Y
- TLSH T134C53341B62C4A21C023E737C2904F763FD9D5309F166BCB8263E4F665E89822F656DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1644_434626541\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
- MD5 0566b67d5fa120d6da250a92577c8873
- SHA1 0baf54c5f6a7b8cff4c82d22be9113c43a099c87
- SHA512 9dcb904ef68419b2462d88133e87d6f4258d8f53f05ed12868718740d6e9467ab2d8769a79727c3dbd01c6807aa5e4863f1874465a7dc95088bd724f9d897fb5
- TLSH T1CE516D6D716E2332D0EFCE2E04C6860EF8680E9C50489454BAD506EF8905B9C9DB33C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\file.txt
- Size 58B
- SHA256 574abac7779db72af4420e7e00a99d73ba84321b45fefbfc9ee1ebcc4a8cf4fc
- MD5 01e40f812a897d53facc8e60dbe4db14
- SHA1 aebd9f71fa7fd05746be2b67e0c1850d10aa137d
- SHA512 9ffa5dca27cad2ce62858833f8562ef46266b9d07751d3b0f59161db3be966218d3e38293f96f035a932e3a14325ae550d2cface189ce079d1f87a365a15be0e
- TLSH T1F9A0022C9480919B5C19CA48BAA1154920204583657DD266DC3147151427B0616A2185
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23aec0a93f8e746a.customDestinations-ms
- Size 23KB
- SHA256 302b89d261486b856027c9d85b4c40b5a12e7e275611c82622c653542d5425ac
- MD5 c0a074df8d1dddb222a85f4be63f60fe
- SHA1 9b63ef8270bd3d803515a080adef5737a0b322ed
- SHA512 03b96e644899859f349126d4c4717151a8f762e92670418475ea08ade85ee803f93117150bafe8a3c9b33c31c2119877a032bc7faeded7c80de28e4af528e900
- SSDEEP 384:P/qSJX/U/q+/qF/qJ9Q+tY/qqw/qw/qJH/qN/qh/qP:Xnp/azWasxWpCGiq
- TLSH T1DEB260603EED3913F2BB87B94AF76741EA25BC517A029C8E2150824D5C32E41ED56F2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23aec0a93f8e746a.customDestinations-ms
- Size 23KB
- SHA256 f763ff3b24290af020597d1c192c5efb1c886c3d9a8fcd98e35642c8bbbc9fa4
- MD5 70837fb15f83f8eac3aaf905c0508efc
- SHA1 6651e72ca01d7a1598fa6b57ef5a90a946dd7256
- SHA512 0df5dc9cc4306ca3cc2e3c62bd4eb957bef08799cdd8ccf1958546ebadc3fe61482009e8cd198339548b94b9a1f2af794e3c5b0afbef83bf8b23870e6ec67c56
- SSDEEP 384:P/qSJX/2/qT/qox6/qJ9Q+tY/qq3v/qvr7/qF/qN/qh/qP:Xnp/gUoasx33arjGGiq
- TLSH T16AB260603EED3552F2BBCBB54AF76741EA25FD516A029C8E2150820C5C32E41ED5AF2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23aec0a93f8e746a.customDestinations-ms
- Size 23KB
- SHA256 47d5f604aa44d1487744ffd043e42a215ce3855a14197a395300e72b48b1d5c6
- MD5 1844a895e280ed1ff21a104aa4d724d1
- SHA1 57168310f59c02d818ed744ce22dff81b7dcfb33
- SHA512 b5eca3458d6d795867939e1e1049d83db87a8102fb1ed100ff555ce7d53796b5d4bc71e3714852845175bcee817381004bdac381bd38535858aa3a4b7291688f
- SSDEEP 384:P/qSJX/1f/qYRT/qzZM/qJ9Q+tY/qqT/qs8/qT/qN/qh/qP:Xnp/9n/asxLaYGiq
- TLSH T175B261603AED3552F2BBCB754AF76741EA25FC527A029C8E1150824C9C32E41ED5AF2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23aec0a93f8e746a.customDestinations-ms
- Size 23KB
- SHA256 34c6d84683f1f488c17c6dc2a1a375f270fe5f743f5d5be3a29344b9e01bcef8
- MD5 c1f965c3d70363d53f8aae68dc179d0f
- SHA1 3d4e8e14ea238936a5927a4ba95ea7946df087f8
- SHA512 553bf8fc438301db272f762ce474074b2d5dae9364d0354bb271922c22ac47fb0fd98d761fddf61b03d401f62d6a3a54c6dc7a082028239a4a6840af8c5c94d4
- SSDEEP 384:e/qSJX/a/qxt/qpD/qJ9Q+tB/qq5/+/q8/qH/q8/qI/qP:Ynp/kGRKaDx6tY9hq
- TLSH T16FB25F603AED3953F2BB87B54AF76741EA35FC516A029C8E2150820D5C32E41ED5AF2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23aec0a93f8e746a.customDestinations-ms
- Size 23KB
- SHA256 a6a47545d5ac7c73105559e2683797bafcbd76c08f75681a2c8b909bb670ba82
- MD5 1b9386fda268db54845df319bcc9ecfb
- SHA1 d8fa050a379c5be44ca0fce74a7070f41d678da1
- SHA512 eede02f3da23d46a74f76c40a01b66ecfd06c38e8cdccaecf20f7421b92f8d7666df1c4585bc069b8f97b4a996bd81aaaedd5df15fc2b3fbb8fd170133fe92ab
- SSDEEP 384:P/qSJX/0/q9/qN/qJ9Q+tY/qqyK/qq/qM/qN/qh/qP:Xnp/6imasxbj1Giq
- TLSH T14FB240603AED2553F2BBC7B54AF76741EA25FD527A029C8E2150824D5C32E01ED4AF2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\AmountExtractionHeuristicRegexes\4\heuristic_regexes.binarypb
- Size 633B
- SHA256 a10f65d7e0d56702d6f08850c8bee9bd51af17f4be051900ff2b88c9217e425f
- MD5 f1f50fc7b156489a7f5ea400bdf4e360
- SHA1 b7a57e1afc583451e4e21e27e25cb2e306e6bed0
- SHA512 85fa5bd86a3e478b50a642fce45e6da4137898bcdb320e5469c8bc419402ea5eaa952a41b171a478ac9ecd38f58510576ce35d1847ed89bca8bf10c5d483fc17
- TLSH T10CF0ACE23A11B4089B2C1FEF6B8474665FAE8C87014DD455E1CB905BF4966BC6F17404
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\CertificateRevocation\10687\crl-set
- Size 1.5MB
- SHA256 77ff7f425e4fe157fbad71cea49774a1fdf219b99011be3ba3428499c834f23c
- MD5 c3a83355bc65215634c25f685eea486d
- SHA1 ad208c298858bc074551b86217a5215fbc47d8c4
- SHA512 cd6582ea32aaf021065d3bac4c7a07c069879348ffc5d2caddae54a2b7825983023758c947a5158f69c9be420087a57bd0dac29f77c96ad0c3dffa2473721b6c
- SSDEEP 24576:zY5NFC3s/54O4uO4nbFiIpM5WUK320ePtOzYbRMpCJ3Nq05xaaTwJ1:4XR4O4pqJG5WUK32zEzYbRM0J3NXl4
- TLSH T1D97533AB666D2718DB5B35DE008AC1531F37DCE2867798EF1AD1036F0A531D2BAC0869
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Crash Reports\settings.dat
- Size 40B
- SHA256 69282cf3ee1330375671aedcc02d2c1096c8e33ba0b9de105752b9c0af86877c
- MD5 57dbe7bf038a7ee26c3fdd7c325f13a1
- SHA1 2f5dc5eb2924cbcef5749ab96bf49aa05905cb04
- SHA512 8ca0fe8e45f1db46f5fc00f1b935a01ec1b9c5afd79fde249c9ed2740a7bdab2aaba5bc796fcd8b2d698559e631b13897a189090d8d2f645355fa0826fb283d9
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\1b92b8c2-3c78-4c8e-af26-ad68fa2894a0.tmp
- Size 825KB
- SHA256 6c70d970232748f4c2862c8e5699297f7ef427ead9580504718213d4740d9954
- MD5 feec173a559712168a96c15f7143cf34
- SHA1 28523461b59e46ff59f4069672e84497f2ebfbb6
- SHA512 de9b446a7e58d89d01c2da47279d84d7c8a42575700bdc7b05616bbb46c868017e43487b0455c36feb6454550173991ddee60c4648633babaf6583011aa5beaa
- SSDEEP 12288:BYC2ihqaHMwJr+xUmYb7vo/Zynp7C0h5AhDkyOPdiuVlWnmoQRopxZwQMugSv7VN:2opW6kn1a0
- TLSH T16A0575AB868C1CBB5F8136D960CBBA5980C2701FAE8D7E59E780CC4CC2A55673B7C157
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\52a11a44-f9b0-412f-bf1b-32bb875a3f62.tmp
- Size 162KB
- SHA256 5903c920e584fc5f1e918bd641bf58fd56e8cb20bb68269892a4984ea7538621
- MD5 6c07e783fb8030c2aae67919d45965f7
- SHA1 46d2d931e5049884b4e4af1c247fbb1a25b6edea
- SHA512 f93944f08885b666c7ad9ab5d7ea051280cd636286586fe1ed696ad67c3b43683fe87dac24bcb9410395acff59a5b0d12d4c12c2f44a0963af2cd93c939a9aa5
- SSDEEP 1536:EEJFyMduylKOn7MU+AO8iKqqFG0urH6PtOE:RHKcuGjFhurHjE
- TLSH T1F6F364823BC1ACB7CE92A6B52F7CD4E9B372F5084746572B7FE1A2718B9D3180950139
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\58302b92-c0b2-43ad-adef-586a929032cf.tmp
- Size 23KB
- SHA256 725e74854feffe4eb8672982a1d83fde74bf56593044cbb6ce1588f9f0237f04
- MD5 3089fdcef186d7d4b5363c151861b249
- SHA1 f628ba74e435fbf1bb7388bd102e5b20e15ffc15
- SHA512 bc2ae05df15a1aba184d5e7b47556339b3dd80b3e1b0b93c221e5a1f1c11f7e5c4896be4d44800fd24441e3f3676be3026184a403ae3a606b9a046aa9b8e0320
- SSDEEP 384:NbiXWPMRYzoEoMioUInooPoRjofcodezYioJ+yoRKFTI75A:v/zNhB
- TLSH T1E3B27037C1065CAB817802E664FB761BF785332F5A888E8B367CD84D8F719236256B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\70667ccd-f0e5-47c8-a4dd-d8b65ff925d4.tmp
- Size 327B
- SHA256 7c395f2e54e81baa757e70cc6dc90dab6dbaaac1b33992e000cbd9ecadefd9ff
- MD5 16be5e3b6c4f115ae9a3a672c5c0b89e
- SHA1 7a8a9c41ca7f953c7c2b03a81842212937fafc17
- SHA512 044b8645754f5327646f895a9f32acb8550a597cef4e63946aa800b117bcc45333bf252a4877d2ede39d1cf19f8c30bfef4323a1579384766cb13d2e0d0c72c2
- TLSH T1CBE07D81FC64D451FDD56BE331BCB86283AE0984488025764CDEA44D032961C4B1D360
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Bookmarks
- Size 24KB
- SHA256 8a2b8842cfd484b323781fbefe46175a9eae80261c4bc627347d4e69dec75314
- MD5 bd663c43bc6d366ca6ce6c5b2c43fb40
- SHA1 285be274d1d82c4c14f3f5bb97c0b39af7eabe6c
- SHA512 a4ea2485c3d900b27e0fb9ea355ede5d76544434f2fafa004bedf969c2b77878d2cbf7b12f89b0c847c64c7dbe1a720bf68d3c35b187be36a7b3420ea3945480
- SSDEEP 384:NbmNNXWtMRYzoko2ioXIFooRo17jofGoUezfio3+yoeKFTI75A:EUxAogIB
- TLSH T126B28177C4065CA7817802E674FB761BF785332F5A848E8B367CA84D8F719236256B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\84317197-b43f-4ab2-874c-de3718dffb3f.tmp
- Size 48B
- SHA256 da49332be961b328e3da2d3a6ae0e60149eca75c3e6f41d20a51aa201b971052
- MD5 a87fcf3103d71dd0ea90304784c75262
- SHA1 f4bdd47b8712ca07f73daa8ca5e6d0da74758223
- SHA512 0aefcbf2bcc33566285d00771354458deb2fd5cd1d6534503f5e42d80ae862fa06a19d6395bc966cc75227324505ad961360751145e8353be6338fc72691eb28
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Code Cache\js\index-dir\the-real-index
- Size 1KB
- SHA256 4b6546750176d9525c2280f84a853e2dfb36d34bf46c9e6ecab4211b172adad1
- MD5 f1d83c839a74eb4e67d58be64e8f2d5b
- SHA1 3d15bc6d3d4dfdfcdeabccffa5e7391fedbf3ba0
- SHA512 4fcffa6ade9416104a4f48526531dbcbf1d17482bb312c782681a716f7f0b9a581315f83c09f5e6dde5a9436506e6bd7bca89f30391a131528fd9e0d4f10a28f
- TLSH T10B41B80152D86312DBC925F052D02C6135B418AB3417BFF62B7188FCEC8FFC656A2523
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\_locales\en\messages.json
- Size 2KB
- SHA256 57e2b257a65fa5e980c619214ed9ae25580bbd581143e28abac49928b31977a6
- MD5 f7b9c08913fbb4ee164db4de91a1cfa8
- SHA1 ee748920b53e30beab4925c3d4aa30bd7f667904
- SHA512 d39802a782fa37146bf509131d98d8e2ff121bffe7d5b37e6300b60c0acd6dfd80d2154825753395ca231493162b5668f2c752d125e4fc810cbb3d5d77331260
- TLSH T19C517F1AC850AD2B41F742697CA4A216F37443BF6104D45B7EBD918C8FB2AB3D4E7B08
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\background.js
- Size 17KB
- SHA256 c7a162a7650887dffe12034ddbba5ddb91ca5bf4f5478f59ded324f7e088bacb
- MD5 d35d682b17b1efc0528e351d5da2a63d
- SHA1 3e0723bd0389fe65d68555ab6c1c7e23cc945132
- SHA512 b0192b5a9faa3ce9e50b5d3aef967b2f0975e7e62c48b4cd0c7902d7bc833001fc50678affb28294436cdbd6d4193f3eb0a2cfec08a40e29b4a498d59bda7128
- SSDEEP 384:+EVS0GCdigHBVrF67GAoDyD9X8zLAFfIEsqqUAmHS:+EVndRzF67GAL9X8zsIsHS
- TLSH T1778233291AFB142559A7603D1F8F92027224901F381EDE1D7EBDC6E45F8127849F9BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch16.png
- Size 370B
- SHA256 6534efc770a8a32c881258029c2f2b9d9f1b75228f53bf9b4cd2b9a9689884e0
- MD5 b40522160b071581a7bc72884ade2d4b
- SHA1 ab23615bcaaa870b78e54e4d1061612282aec406
- SHA512 6a58400e6aa7eea02477f00de667515f3d8001d628dd8be1c4b5971a087386f5ed328e87a0639add1c3482cefa637a2d1d7196c42b55e8aab4b6173df979f011
- TLSH T12BE0605B9797E8BDC352C0B302B388502919FB09AF6302220D68796E083BC4822A30BD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\aelmefcddnelhophneodelaokjogeemi\0.31.0_0\icons\twitch48.png
- Size 921B
- SHA256 47e37c0726206401cc69cb6ab0fdda79b364356a5e2fdbd5ce479bfbb965f245
- MD5 3c287b3c8c01ed2888aece71cb04bdba
- SHA1 3ef53a36e4746521a4fdf845c54d05a4ea2ff0ee
- SHA512 984232ec2fa22271fff7aa0de4228a049d7a267239be1cb153a254261ee27bb0c4857e7c0cd8b14723aca5907d50faf36b0e42a8a04e1d4b7fa31f7888aff4a6
- TLSH T1EB11B31349144EBBC22C1CB6D907C10785F5A8C4E6009A3138F99B3D66935EE603833E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.7_0\main.js
- Size 46KB
- SHA256 e1b3123f37dfe988a8a22427e98d06cdf472c23429f6277f68c6eeb1626cd54e
- MD5 3a4b577e6f2150e055d503fc17aec243
- SHA1 6ab613cb92850a343caf28887301748c73b34722
- SHA512 d4fb08f3423ddb5501e2d50c4b3c6cec5be34c9b149d469074119b144fa54a317199f485a8dc7eb650fa7762a0be79b49a2d99b4cbe9dd8408a632baf0cb2537
- SSDEEP 768:DvKIO8ifSEWA5W847cy/FWpoMz908/lK85aipQqkUlVZm5Kdnr4WavCiwdC51SqJ:un8VEbWXxYNG8/A85DQqkslr4JPmCHLn
- TLSH T1F22328996269687E0BC2D2ED925D1313952460F8680D84AC723CDFDE6A0FDC2127CFF6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_128.png
- Size 7KB
- SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
- MD5 8723b83f007f8c910ae071e275f99383
- SHA1 9f76b6719f4dc7ce2ae4ce96a8577481735f1ecc
- SHA512 62256dd55be00b1a70e9afc127ba2079fbd563274c6829739f99fd02c6bcd2b2afa21337d8f58a7d64a716f41c0d739ab7b8f78058255bc1b59450eb0d0bdf4d
- SSDEEP 192:mbNUdF2i9HsyhJ589/J6sdWQG1i+5pqG/LzPYehuNBpDxw:TfLeyh09/J6sdWL1AUvfhOm
- TLSH T1B8F19E690531CCD4B5B99F755309C0DE2136CA98A431AAAEE0CCF1CC3C573697ACCAE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_16.png
- Size 653B
- SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
- MD5 e4fe7d0c1c77bb00d492bf59196fe3d3
- SHA1 350335cd55b2acb2b8957cb79257375513b525f1
- SHA512 73b6ed04cc5b46d700bf34bce51f50b19c89e9310053a473f577516a270b4ff7ff1ce954c18430c2625439bffed6153997a08d1aa6d3a4196b4ae5ad4089d556
- TLSH T135F0839A772C8958E9DC5C30B21F4297EA8C22E8C8431601A33F52313E63812138F08B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_32.png
- Size 1KB
- SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
- MD5 3e4cddaa76d8fcd9ac7b64fef89d4b74
- SHA1 3a44b23b9b8f950f9168361da56cf8f86958a408
- SHA512 9a6317ed1b9e919b3a6e3fd260f88b297b82498d294d7c86d1a40c20c35003694865f06632d1bf281417418b48122b4e01296e17318f7fe77612b3a716417bb0
- TLSH T1F221D8DF8464ED2E8531C8B3C14354E5E2BE94B3E47B9479F06BD8510C307958783E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_48.png
- Size 2KB
- SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
- MD5 1a3f93acc11338a092785da97956c034
- SHA1 ed1786563e53ad2fc076edabd25accb4ef241540
- SHA512 7ff3c3eb9b7e55e799bc8c8ca66225fff47c52d85e1326f99b2e7c1747624462231e8dc9c09cc4d6e675d072d8da41ea998f16a4576de76c6575cda271255e85
- TLSH T143414AB201335E202C334219CA7203E2A80CADB0C02A7E91E0CCDBBACB00DE5E2DF506
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\icons\logo_64.png
- Size 2KB
- SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
- MD5 9c3af737a428dd3daa949313d69be52f
- SHA1 c24aa988066fbbc4da252b858fa738e20cc42c07
- SHA512 ed9f869b3912eb8bf27624185c3ce648b5a586576deb7b1f9a0b6770fde1109a81fdb771a76f0902913c55aef7b6020f386dbd92a06c7ae106ca5fd593295c0d
- TLSH T129515D9D4EA1ECB15A2B46339AF935EBC5F0B37A0B2C277D60C94437A9C255231214E2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.5_0\service-worker-loader.js
- Size 49B
- SHA256 3ac757f49d04af7076f9f1af2ea33c2ff4d77f5f3200821153c520b4c58fb873
- MD5 16d83bc2a9d7b069571e01b4b856948a
- SHA1 06c8ff11bbc029ca703e3bc0cc4cf747f83491d0
- SHA512 22e573bacef7279fc642c251589cf334cf461d1d892ae7c969c9373c9fcd273cf1f3c5d4ed20ca7d88b98abdcbc491668486bf8b2374e61588ceef85079d97c2
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\favicon_opera_one.png
- Size 2KB
- SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
- MD5 723cf51fae375f557b2f891a2ea603ef
- SHA1 40f374149ae6f8f5b847be59ba019744c232ebd5
- SHA512 d0f64a88cf62642adf30af333f81481f43fd2141c63a135162152d1c7fa705b52121cac69edab0f93d35cc425b43fb6d6af2adc4323e5ad8e11109a423ff6eaa
- TLSH T1D4411A8324F7F9A0FE30E5AF1353E0454E655B9E2B512738128D08B4A4BA6DE92D202F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\reader_mode.js
- Size 112KB
- SHA256 4f72bc46754ceed048dccf5c83fa36067f144e5ba13b046b12538808986e3252
- MD5 59de0decd0e4751b14231dde34507403
- SHA1 5892abedcec573765d8247204ae038ff4c44848c
- SHA512 16a7716b4afd10d0984c99fdb4e2617af3ca0a96f7599d22675924760b72ac00bd5460de75b46fb26bbdeef9ac4ddd432bd70c47467d3cacf345af5e552de4db
- SSDEEP 1536:Ska6rka6dmEctzRw8qxUyIVGjYG6xpvAI3z6A0k5miSZ75U66dpXdd0yUY70Lcx6:Ska6rka6vszmxnS9lbv93NddM3prX+wH
- TLSH T1C4B3D9ADB3927199928320E502FB0047E3355D451C1A5038F669E5DFBC24AAA62FFF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\service_worker.js
- Size 74KB
- SHA256 220fca4d7acccb3242c07ce434e9b97dd48d9fb111c71c01c0c1b2dcafb35176
- MD5 c6d94d6d9b9a4be68d85cb99d21affc8
- SHA1 f46e15a657c99c62bde0b327cee8a0e120aabd2d
- SHA512 5e0f0f100118e1fd6ba6cae0fb934de6353136dfc6148a49253ab7fbb62dd163f2c2abaf0847334d00bb0915840c988f581a2aeb79a90f4d7c783ec699fe5c1c
- SSDEEP 1536:6ka6yka6NmtlOCvVVJjUYLQY7ZVwOmtdCMkHBabW3PCPUMhY:6ka6yka6kOEnjZX1VZ6UM0BaiPCRY
- TLSH T1C2733ACC79C3F4A597A3A4A5802F2143F12D2E01249D9891F726C9E5B86CC4DE63BBF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.57_0\spotify_frame_interceptor.js
- Size 5KB
- SHA256 a6b9c0dcf141b8ac58176b870851294e492ecc79a83c8efbfc85e35cb3cada0a
- MD5 6586f73b98953dc3d70ffd9a61e24911
- SHA1 3e9de04cd595f3a391392a92010633d1d0608a38
- SHA512 8ff2b9b2ac25b0cc60e79ac6399bed6d02a29b1f92ab499a89878c63618460a70a2d0e3f2309b227fda01e03c3427c4a11940b4b95704ada5689f80c385adda2
- SSDEEP 96:xSVa6rQaSVa6j38bo5bYe3m/I6FScpoV9FzKovz1fFUAJxuisb71TTta12Ho6Io:xka6rka6j3805se3m4XFzVJFs31wx6z
- TLSH T16AB1B505815C4C7D8FB5028A9ABE135212DE2283787BD4C4EFA3C47597353CE9213BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
- Size 86KB
- SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
- MD5 c8b19bb6ffa9ba9d07b010ee2483d6fe
- SHA1 db1af85512d439f749c1fd64fa8f7dfbbe5f682e
- SHA512 841d08ad1dfd23a85b3749dcec341c665457e0648509821ac140fe0ed753e8b0ea4a24e7b6ea5f06958f4ddb0b65f7e58250b783eea11c321fb975fbea63db46
- SSDEEP 1536:PYHgfauhQ7F7yEPlL65+aSWr0WUvpyiSBwhmSvGj1S+f8+:PYAiuhQOokiSBwhmSvGZS+f8+
- TLSH T1969308CDB6C7F26293E390AAC03F101FF23A6D19740D4454B626DDD1782658EA236F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
- Size 2KB
- SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
- MD5 bf24b39c7ecacb4ce180d5013d771066
- SHA1 8b05f38ef028f9a6ca5411dcbc347d6672c252a7
- SHA512 2398ba9b4216289bb2de142d614f312585f1e14e759d211ca169e1e54248761a78585f8ffd0de5f9112ebb349140f0346994b8a52a290ae22768a80d19cd8a9b
- TLSH T158515DCD26176426C397F654D206052A4F0841A72EDBF6E949306CEF9C53E0FD6DD760
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
- Size 1KB
- SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
- MD5 56868fb04ec3f6436a450b0be0c49947
- SHA1 3114eed847366239e1b72b45af410bfba81bde4b
- SHA512 a2211ab99b6d04b7f0a7c5dddeb8156c7c24e8ff0b2860cbddb6273d25089c7e066ea6be363a610553ee2b275ba4f7750f9456b30251000596544330d8262dc7
- TLSH T1CA215B5A35F53633026149A2670793CEAB0C11EEA4BF347BC4918374AC344FE8394DB4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
- Size 839B
- SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
- MD5 112b4a4c6143b507605be0de6f359ff2
- SHA1 4ad368eac9b4965eb0389d2da4b2723016c8c69b
- SHA512 9afaf96cfcde9688664d33f37168b9c637e414c3fb768b0c70cdb19cefcb42089e8f464a8d32bcc21a140414c0557fbc02c12a29a5eb662405d55ef7f1781b2f
- TLSH T19301B567C4255C230342217CE42B0719F970E14B6E646E2F3F9D845EAF5E47EAA7238E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\000003.log
- Size 18KB
- SHA256 a4d48b60ef75a985e249e01ca8b295a06c32d521d4c7b51bec1d3b268b30e1bd
- MD5 3b041a37600597106ec806026fa43dd7
- SHA1 c0b435fc4457fc6c8e1c77cb6623846cb4e5fcfb
- SHA512 a921895e6e42f5ca53f5fd052fce1b19bd6bb7974c9e6555df8ba4af340cb88c72cdca120266ff5c5a8ce6fd3612da7700e624c7149cde1068d3b6f6117cd57f
- SSDEEP 192:TozF68yVj8JHvSa2VMQ/kkiYajSs4s2hFQ/2tfXy2JCg5hSZi:D8GsvSa2WQ/RiutflJCg5hSZi
- TLSH T1688204063BE68E19F2761A3C42B51B954A7EBE50BC81C92DE4F0729C4476E508E71F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\LOG
- Size 367B
- SHA256 0d4eda56eb5b3ae5d4120d6a00e9238928a5436314a43f5a2ce73463d89e4b38
- MD5 16cc1a655682fc6cb12512dfa02c9f3c
- SHA1 07913246b344966339b22cb5c34f81447fa51115
- SHA512 f7ae0a83147bbb8dabe3d154f7064b34bdf8134b8d90c2e785ac2f6ddfb2ffac4f6fae77249b7f40a4586bda55714aec6bc6147a37b6f5628929d401201ee56a
- TLSH T1A2E0D859E1C8425FE11AC3D395317F45DEB72E4BAF44BCCD8F85D8187181814743AE51
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\IndexedDB\https_gxcorner.games_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\2609deb2-0804-404a-bc81-53a7b1068386.tmp
- Size 27KB
- SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
- MD5 dd8e6df155a2ff5f53f81679d8701c70
- SHA1 392045fa8c2bbc94b569ea3a70068c8dc8d34826
- SHA512 bb1b9a80f15288056a5792ab509451e841c7ad7b654fa7bd5b862bdf298ea8421c201b237d9cb4f0b64d46c40d0bbbc229161730eca3d5d957e12be515764145
- SSDEEP 768:eF2AR0FEDVua3n5F5chXL3tbF/a0YFFle/Y:jFFC1qL3rYFFleQ
- TLSH T1D2C2A85294CBFA07C379F6734ADA0DBBC3B38D0BAD904664D2E8B47CD8B92845D045AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\2c905ab3-3f4b-4895-9bb2-e31b53cf05a6.tmp
- Size 27KB
- SHA256 cc914b6c8be70f233d533244b1fe41e32c495b9bb57901a96777f7d19fd75dfa
- MD5 fafd40f7fceb49324821acd292290bc7
- SHA1 0c3a32c4edc6f4f4b6b4e0ba371cab917751885a
- SHA512 1a18133b6b2371fad37f53e5a23439124403a49282ea0df14af982c32beebe49ec5ddca1a32c7854d2001b2d1ddfee45dc180c1f92fb7ce55cc0ea76417c8008
- SSDEEP 384:Ogao5jgnaTCrfbwkIjxgrVybIfLEpH+tjG:xDe3rfbwkOxwVybIqa
- TLSH T174C2FA84D9F22938C37648BF51FB5908BF3F5E625C9B0462CD3A5E91787280F066F892
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\3d96a6da-8f52-4f3e-9f9b-f5cbc8a8f938.tmp
- Size 27KB
- SHA256 68c23af61ff2bbdb2e2eff18776c62cf64ed6ce0a9a12d1def8a2c884d09132c
- MD5 928b3330553b6867c1f2607985e626b6
- SHA1 043348c32f771a3f8368f928eef6206142ed5a07
- SHA512 0bb640f43f65dc30fc7471ae7da5e046a5edbedd9eec08364fe0ff486aa59640bf5343d3c918154f86f3b02b3ad467aa67da8da2322ee6e0cfcf64306b3e7424
- SSDEEP 192:OIBi/m7Lm7lmNid4lWXOHcluqtIpHoKeDDaeSND4GJSfVC:OIBi/m/m7Yid4lWck1CZoKeDDaLh4a
- TLSH T16DC2FF90FB58EC06D34B3EF896954B849A55DC920E230731B23CB21EDE352A3DD6769C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\6d73f726-44b8-4828-9c81-77cd667191d2.tmp
- Size 27KB
- SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
- MD5 ccd9f3e1f74f2028805e3fea6ad9b934
- SHA1 f5bc2ea0c0c3d89c7f37792cc43fe592f8bec748
- SHA512 ce32e58b002e2f7fe1649ca2ef4dab2a3ff9c738c11f010a9a837a5e7eb338d03672c325636c87659fa19f75625cebd9dc2602b428bc6d1e2d0799230d81c824
- SSDEEP 768:3F1F0kh7RCnrrh1q9i1coUSeJ1xM9eK3ZSk5:3F1F0k9RCnrrh1q9i1coUSeJ1xM9eSZL
- TLSH T179C297B2D8081F14E698B835EB7B9C0A81F8AD2D1439250FB767BC507D9F64EC983746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\8ceac9dc-b36f-4bee-86d1-519337111f86.tmp
- Size 27KB
- SHA256 b79b047aa13202f575c92b513e67530ee9a5de4755d8d67c85c2f156c9a4eb39
- MD5 73889af3b383a202fcedabfb464d4480
- SHA1 c248a6f31c2f49eec312d8ae516eda260b647f01
- SHA512 84ea287342dcfe50fc62eb4c14e80ebee0a452d3c39dfcc22eee8b0a45ae7be3c6bf9fdf712457741de9966a23792485acd216e7c3a82b52aa37de98311deb6c
- SSDEEP 768:pHQG314Cl6vdw20S0NzHBDXnkKEJzPRAf:p2Clww2SBHB7nkK0R
- TLSH T12CC2A3A561522444E6E98F31F10BC85984295F5C45FD4E1F2C903FE6BFEE390BE1AC2A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Jump List Icons\d366454f-da78-4285-abb4-560930925f1c.tmp
- Size 27KB
- SHA256 2f1a860dec73e59307d1a8e1b1ace276076ef77008f468720569bfc8d7ba2512
- MD5 020c1aeb8d8e137a03d5244491a1da9f
- SHA1 fbce07337cb53a16c340251c7cf146720c0bb408
- SHA512 ccfa08ed2426517eb85969d9bb482602c0402973aed5f46fbcf9fbd66647f9a65f60fcb037f0328ff04644f44d69a0b03cb6d79227d9b08ae27103ae58adabb9
- SSDEEP 384:OEUBizljf867VPsLWqJAtyF+G64zJCNz8gWaoSwFSk+M9Ol:uB6jJqGUE+zJCForQk+M9s
- TLSH T1C1C26FCA1F3806B9CD6416B4CE9BDF5A0A740DB2BCD97746CB6038920933EE515B249F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\65ed0243-3b16-4cc7-98d7-538040d647dd.tmp
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Network\Network Persistent State
- Size 2KB
- SHA256 28ccdc8e24c5e22be89765f2841b6419924b05c5a83259a808e5f85d9062887b
- MD5 9220864a3cb07662ddf2eb890a539dfc
- SHA1 3e1b11441a0303b26ce67127a2382806e4762f11
- SHA512 c6380d1ca2fc69224cc495ba0ef37a1a24c071dea6806365b8a2340b0f2cd110beb410037f740cc0350e1d8ea981574cc52fbe48f86d860459869dcf4a3a1409
- TLSH T111416DF783B49A6DDA2193F1AA146E1FCE5E0424576C3C6AC9D4AF1793E24B1E100B4E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
- Size 12KB
- SHA256 9c4050413fe2cda6627d4f122297f1057b9e42c9f579a9d355b4d3cd866c059a
- MD5 c3d235d7362a5f6548b5d86f8318112a
- SHA1 c696e27143fdabd042d8a667ee68038d6b988586
- SHA512 ec4a1ebdf03764012e0b1e0fba229a012b90969afbf247f75b551f145bada46ab6b69e80f3f113f1a42d316d1809e31fc07480c4f31538202d2cfd429be510f8
- SSDEEP 192:0auCB3z36VtjOrOCeAYzJ95XMWFXrUITJle7Rbv2ywrRXRH4Nk4b+WNLKhBVysw4:0audXctT1NP7cUi
- TLSH T11942555A58306DBA0AC68732F614BF57F3F51120A1666EE5B7F9882C11CB2CE2113DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Preferences
- Size 13KB
- SHA256 a17f3b20820c5dd4b945bf587511045434bbe7ce3d587ac3f5041a2fdf2cd63c
- MD5 2c7d3f481628e58da8c484cc29338846
- SHA1 0991280e3b2470984f4e93d9fd3b404864fb9d1b
- SHA512 e2d8fa23c7deea4e2a762b2a5ec973b24ea1d36ed1da3db6c9fb9dc64541d6e17790c72266d27a324947a4f5702a622d4fc4a85974a0c6be5215bca2acbdb61d
- SSDEEP 192:ujTCB3a36VtjOrOCeAYzJ95XMWFXrUITJle7Rbv2ywrRXRH4Nk4b+WNLKhBVyswV:ujTKXctT1NJ7cni
- TLSH T19652655A98206DBA09C68732F614BF57F3F51120A1666EE5B7F9882C11CB2CE2113DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Secure Preferences
- Size 118KB
- SHA256 527e6363e62b2ead9fc06d6cb417bf8edaaca7ba60649c43c8d1c1670aaf4b64
- MD5 ab742e84a4d72884c504d011dbb4b3b9
- SHA1 5f7f48cb4b5a87ad5b2222db7d2f0462b6abe4f5
- SHA512 574b7fd7e7414a3f135d6fd40f7a1550ea2fbef663c00f5d1af403f9280e56b1d241a10ba5a0e835e59ac539a389b3e94767fe2da2e14ec0e9d71a836962c8ad
- SSDEEP 1536:wEYTS9ds8JaqvHxH7HsHZp/HpfHwBbXHruaH/IB8hH+H0bHRfwS7GxTPHrdXH5GN:wEY0dsI7QpxnB8MRkbS8qFY4cGsOKwW
- TLSH T14FC3F9EAC8CD8E798ED98BF9DC366B5B99D50515AF9C8F04ABF9404C03C1789203F54A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\4764ce70-35ad-4cde-9263-bee6106250a1\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\4764ce70-35ad-4cde-9263-bee6106250a1\index-dir\34da751a-a57c-43b1-af9c-5c0bef1b3fb0.tmp
- Size 48B
- SHA256 6918ec4a2b272193c60b19e84ce1babd80cbdb8ee160f06ab62665ef6b75c31b
- MD5 eac77e40860916b6826ff75ad20fc750
- SHA1 6add7b0955149df734742b610489ac9b9b37595f
- SHA512 f09d0b0ec86390dac94d57470ea30c6e6b41f165fd4182074d5e9bccfa4db41ee0288f0b12ee3b205ce075a2afc4c03b1bc5a4b672e32dd2462f1d782641c227
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\4764ce70-35ad-4cde-9263-bee6106250a1\index-dir\the-real-index
- Size 144B
- SHA256 5a41c131d50bcf8983069ba04ec23651bd6d9a1f6175f25cc7190f044f56b2c1
- MD5 3ce4268387f36bfe67a6c2b32245b969
- SHA1 9aea16e5dbd9e8cdf50044beabdd4e10acee94b8
- SHA512 941760ba6715db755d397cfb1dcded7d570c4328ce7add311be8fcb0cebf79400716742f08787bd03b65ba9408c56f42648067adfb19158001a706b18125b1a2
- TLSH T13DC0120AC114148CE4A491F454D3057119F91840042475EE45C840A272361E0B71C144
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\63cc90d7-d91b-457d-8c69-d12f058aafe9.tmp
- Size 141B
- SHA256 88a1be37d84f60fc3c27eb042924303a9f642cc65e19206bd1d78cd54b2806ea
- MD5 42aa05851e565507c336cd7b1e89df1f
- SHA1 1941c7d735381ee1edf90229aeaacbe496446a36
- SHA512 1f6a914081f22a8e4a741f533b303bcbcc07f1545f68290a2a0a942f79a9997453bb6927dbfe4cefe5778067c9bc0186821c2d76230c195dafb206722f33a426
- TLSH T144C02B2B00104410273543C02124BC97C6BBDCC44C400C8C8511F0C861F0F32A9B0FA0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\9f7b0af2-c559-4478-8891-d143811892ff\index-dir\bcd9ba56-809b-4a5f-811e-d9773ad21a61.tmp
- Size 48B
- SHA256 281b1cbac17c627b9a060bbc31bb6edce48d18d475bce1987e97c56d19c57490
- MD5 2df9da936eb4d77a19334af46d2f40de
- SHA1 ecc76255521079bcd3536e328ce8291cc7bb44c4
- SHA512 a274f12b957804d90b8d9f372a7f509e47b5da321157949e85d41448412cfdc4cb456b30bc8d3cbb41d0bdf95a94382246507f3b22a9667b8e8a1ab4e520fe1a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\9f7b0af2-c559-4478-8891-d143811892ff\index-dir\the-real-index
- Size 96B
- SHA256 4bfa1db3328bc2457be499d6c322d7122db76da0461f5a4fad492b8e97b3c724
- MD5 e60c50eb56f2abf6b032451dffbe141e
- SHA1 4290c85f7b709d930b0a8b87b2cd3d6b26e517a4
- SHA512 440507a3108fd3dbff9f7d7a10c05735619876a539a5b2d544372d1070f1b7f0e0092c68b159d47e02888cf4f34cd7e0fd1b3908f9331108273d98a85143b457
- TLSH T15DB0222080000083EF0F0330080A80B0BB238C28BFC222328BB0A03CEC28388288E028
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
- Size 208B
- SHA256 8c0f640ec9ba724ce801ab61b1cf26de358529ca17774ba8d7c82473c0f91c56
- MD5 3bfe06a3538d4a1e6a2aa2e99bea1a7c
- SHA1 823626450f69ba0ef66b0fa2525ca4d849f54a05
- SHA512 6a1613d253a439542995c6337c9e80bb79686be3c5ac106bd6ebd4ad06c605dbd2094b00578d8947606864fa8ade8d7b3464d47946e9d11dd8f969822ab6ac5b
- TLSH T181D022EF097088201A7993D066187E6BC6BBEC8C0D814C8C4802F1C992B2FA265B0FA1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\CacheStorage\3f89513be45eaa6ed6020035b50ed601a651a63a\index.txt
- Size 203B
- SHA256 e2343b46e1bce011cb04cd3e9774cf13ca5f2430fe77acbf7cc13097fc351997
- MD5 77429eef1f8459631d2ce4ae3778e25d
- SHA1 34afeb61a38f2b4b049ae95f447df43a306597d6
- SHA512 140ed3c132c1a18c34fdf058d31e3be67cecb5911ab0d5d496b748f58a08e05b29e26bfbb044b7afb19e1eb1471760c20288e355de8612c20a9f31f243d3bf74
- TLSH T106D023DF0D604410167993D076047D2BC5B7D48C0DD40C484411C1C982E1F912570F92
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
- Size 46KB
- SHA256 749ee1872cad1e911b636fe9878bd5069dcba6da34c76056099a1aafcc4eb80f
- MD5 5a05299d3387088c2913a95c8614bab8
- SHA1 b9aad6485785a0a90810ab732ac24e5cd601f16f
- SHA512 6b04d8f2a6dacc6a71981204ea9836194d3a8783c1ecd2cb10595106d4a95d32e95812817dbd77b1550a89c0d8c81682faa17a298b98d5524f206f8f6eb37f32
- SSDEEP 768:4vKIO8ifSEWA5W847cy/FWpoMz908/lK85aipQqkUlVZm5Kdnr4WavCiwdC51Sq8:Rn8VEbWXxYNG8/A85DQqkslr4JPmCHLm
- TLSH T1152328996269687E0BC6D1ED926D1313952460F8680D84AC723CDFDE6A0FDC2127CFF6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
- Size 110KB
- SHA256 8c5e5117a72d728218b8cbe9e4b8e87a520bf4f8b5ffd7f91a50fdb939fd05f7
- MD5 73906aa141725a28bd36f33c4277b9ee
- SHA1 b8725228e073b389e29ed908546aa21f0f851248
- SHA512 3b516ee0ee8cc25b58e922958f8cd4719baa99dd343053c7dc6d8dc0ca6583619513f1ce4cd76ba592bd2e0e7ccc284c23e774ac1b82da67756f31eb64ca8ba1
- SSDEEP 1536:uGrITewf0rQDMx/d7CVYV8I2yUmz8iavzB7P3nR95IxBB:uG7QDMF77B5Umzj4zRPb5IxB
- TLSH T199B3D6522368C53FCD6A07B606635A5B3371C68E7F83E31B216AD33E1C167F78994426
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\ddba7117-ae8a-456c-b7e5-d4b30beb6c81.tmp
- Size 72B
- SHA256 3e1dca520bbee437994dc2f23c831f663e4c0d03bdb832daceb0a21ed8b052e1
- MD5 c36e835fdb623a9f77917050e4dab42b
- SHA1 594d890efdb87494a2485be18cf6955ebad94e90
- SHA512 376de5bf86378bf6bb460d402091238c9b5527f71ec00c93adc93a78abd4ec891c744b085fb461d10aa5b2c8d79852ace85ae76f2b71607f3beeb5eee220dbfe
- TLSH T1DAA0026242D0A160C500C6B4282183881601B967800012E77AD407968D740614D55146
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 528B
- SHA256 f99fe699d88be829ea25b95fd12d79b2fb0551828a377e7db3dc7352b8ea94c4
- MD5 792a3a616cd4e4ef3e3606e975ab3d8f
- SHA1 59f8913fed6eb7a4dd522868f6ed25a3906a793a
- SHA512 9204c41018def9c6883a5a77b50a24251613c4eca44e542e101067bc9d19b045ba7a8058ed417753bf01e4f6f0b4d8fbbf3e1294d196d99519e46f83b65e7273
- TLSH T1A1F0C01BA60A555FE020C23121051044333AEEB3FB1933CF0074203E1DA42324E23D8D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\95a359de-099b-4658-936c-60b318c96327.tmp
- Size 11KB
- SHA256 cd976fedc76ad08a7e89207fd7e78cb09a9f4b196a99b158d3bb15e83f5b7625
- MD5 231b0acbf8d2770e5854cfa25dc01900
- SHA1 50e0f8cfccf92d58dc62ffeae4b0b030d4dfdfb4
- SHA512 961971c7bbee15d273b0ffc6f47e8d8030a3456072fa3ddecec581686cf38c0e4294649320e04cbd75ee4936ddc21e090a262d2689d67e0e04c1f158f438fc4f
- SSDEEP 192:PCh7mkXqjc/ztr+l0aThVKXyNSLRksG607psdgNZizBL8wYICwamdyPWNVKed2fo:aFqSxk0aThVMyNSLjk2gWz+wYIC5wVZn
- TLSH T1BC42BFDB6BE33F807B4A756713E84E45849E19E7F0110A0E0BF05163CF66BAE97450A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\e4f0c527-15e7-45d8-a670-a9091e145dee.tmp
- Size 429B
- SHA256 586cc3fa2a3c3c7893c449af35b903835713c1f56684eab91a6e6c2125d3c9f2
- MD5 beb4d44451d4805849b204e52227a8d3
- SHA1 5da106455fc8d802bdddfa08296b2dc46e235660
- SHA512 b0389f548f59810a145c29a4dea0e35d6d626adaa7700ddc20b1153bee22e1137417df593dc6526e1d30ed646ed68dad1b9a4335afa3b4d7c862e04a7d9336ec
- TLSH T170E023935BC4703E0526B225D2839302210E14D4B7580E2CAB9303FBE485130D4CED1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 541B
- SHA256 fbda8296d5e45f49c81c1ac926afd852f49d253215c61dbad7b34845886e8731
- MD5 793e4dba75d11169c357d380f6d38db4
- SHA1 a48c6bfe6392c1b3c7cfdf861a567d43e3043f72
- SHA512 a9cef154cf2bc964d788f6aa2228828c4f1ac86d619e26759da8aa3aa3d439b5b5f6d22c42bd144a72547fd909481977638f6ba0f73f2c6937acec2703ab9c9b
- TLSH T1CEF02647087A55C8BCCE66BCCA676577F740E4117380742007861170B80426569D718C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 653B
- SHA256 0604c7a4a2eba6e8530e8c81fc25e6e8523ebeec50a2baa874af311b449878ff
- MD5 5eb7d4bebcc76ff4bae8a8b2cef55671
- SHA1 d66fe47415ec0a33d311cefbe7f28ba5147c614b
- SHA512 54aa29126c6a46d50fd083dbfe10a2fc6d2f87578c166d17cdf6a637b1d29c487080e7e7d151078061b241e03e6b94125d5ef8ec084a3631043f8f7c469aa696
- TLSH T1C2F083236123B3273A2613C4C06264238F248D821C7847703BD4ADA20022B496DC8124
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 2KB
- SHA256 c306dff567cadf82685eaf4a935ac5d6f6faad0cc631aef12ec9956395a82ee5
- MD5 1616545a6f71e376ed4fa2d270da5920
- SHA1 85afbc54e7d54c08fa2d73f55458a66f8f120fdc
- SHA512 79b5d2accb746337654614c50cd9070d90c5dff1027b6d3116b8210d624d096bb081a1860518fdf35971c4c5ccf83ed0d21de2bdeefcbf1236b448755786ea50
- TLSH T13F410B2A69B0A9C64C44944924C0A7E9ACCD67195814FA2F4BCF34A80DB67CE71267A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 8KB
- SHA256 ec7935f481ed0775c5858509a042ea70defe13ca58a3c4e5d5b5f91f275defef
- MD5 394a02e97a2c20c9178e7ca6fb125459
- SHA1 a5fbdcabe3200a8a1f0eb3bde243b06907900272
- SHA512 266b8975b0857fd2418a0ec44c0c0db517bedac720f389922e9669eeb5ead5160e05e224bd44c4bc3333ccd0addf76373a887718235fb23e8362cb8743baa0d1
- SSDEEP 192:YI+G51h/PD68+gGucANCUst1nKnEOzNVcF0uYQ3z3112kso6fo8iv/xQGj:YIf51h/r64hIXAyF0uYQr6s7j
- TLSH T1B402A03D739AD09F9517D9579ACE1D88E1B822330295EB35731681D1B9DDC89C0F94A0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 8KB
- SHA256 9a0f05a4eadb2312ce76ab66b40504325ae02354c974b8fcf8e0ae71de04e69e
- MD5 5e54bb6f23ee31e608abc8bda7c34f42
- SHA1 12c64eba3e9e7252354bb47b11c20ca7dc3903e2
- SHA512 ceaf6ce7f658c98350d83e570e7587f29b994a71b95f5eaf4e69355a3971eaa7ac3ac66db24890c8f144d01a3ab0cc868fce475399da032014c8b93f6a855d2e
- SSDEEP 192:IcNLpqLuU6sGTUV7fb5eQu0flKVmOE3hiwFpNd:IYLkqBTTXQDVOExZHz
- TLSH T16F02AFBDF423B3B135316E2DCEB7A4FC580E2D71B7ACE44735A51692AC0784A05B2C22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 8KB
- SHA256 323ebadd7bac7347461b5499f742fae02a28e7bd6e8675ada1f8a71ae1d2a4a2
- MD5 f26d15699384f047eaeef606dd847914
- SHA1 01b2af9969dfe220aae91e7f26e082551f106f56
- SHA512 a1799a5b86d5bc3fcdf344219ab6d2ac413c9cfa7d4f49b7bf08d3c57df8fd996ab640d0ae06589fdc098da63dc70edb4a571e3bbe9d1196e221d41965444716
- SSDEEP 192:5leUifnOyZ3SRDxqALkYV6DfPDAA1b7wILg:5w5oCYV6DEab7wILg
- TLSH T1B102CF97B304A1475B0799F2937FC360DA7F5100B1FBAB1705D3F9249CA80DCA2A2B02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 9KB
- SHA256 b3bd9391b83b6acd720be615fadbfe2bcf65804834b8ce89e915b1fc92ef77fa
- MD5 3d7064d582459d182d4049cdd118a301
- SHA1 432e01e86f0c966527e2307e32ea5b0e9586e0c7
- SHA512 d9d4fde03df3025393720168cc47f472ff324a47a48a5a53884d530ce820501a29c816186c498b0747e2b6f000a738a8062b152cd317cd4c52895f3c4fe7694b
- SSDEEP 192:K2bPY0yLtKPP3pEd2VRrF1PsHN9GFdRkCkOKEZApRkFamK9u5QuNWfRhIeL6Qhv:KUatKPfTRF1skpkOKE1Ow3Wh3xhv
- TLSH T10A22C080ACB3F944487AEC742230618B5BDFA3E2C83F62B7607DD866019FDD15D3A952
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 9KB
- SHA256 325996cea8d022a088021e9632bfd752a2c39ebe64dcc63800ba0725bff7778e
- MD5 bdd886f224dd3b7611b7503f454e335d
- SHA1 be296e64ed2e21e5bf66fa4c2b5c312fd4ac459b
- SHA512 74c63684da797d98baee8116a5b3c9b974baf6078b7c705962ffefd6fe8d2309943872f086d51824492852212b5ac7617650a76602ae9d3387f701fd61899000
- SSDEEP 192:B0gZFTUlOGEyvHcyEGRDmZ+X82mM91YrqtvCRWBuxzjS/RbQExadYRKIK0L:agDTNyv8yEAM2mM0utvlupS5g0L
- TLSH T1F322CF5B838B140B01F7D642E7D0EE61BD09349815AA687CE5F01364D00E7F63BAF17A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 f987ad4bed00b9b726de94c7aae4be65d7eafa86a6f3369e2c5d8a83c0804a00
- MD5 daadb59f35eb0dbef6547bf8fac039cd
- SHA1 4659283940f7c0f7e3ea13fa6b7708950f312872
- SHA512 5e9f9521ab0a4c2443b919b0d9d3ab4cc63fc9570a87ba0d76915f9c5dbcf01d169fd25f771b245a861d9366002892814136284e1cb7a6810efb2c6b9f8a7b3f
- SSDEEP 192:I6nnjR5f9E/WHeucDNV/dPgyZvBPvyMud4er9W9UvpQAkehj1W1CFq:IaXG/WH2V/dPgyvx84erEivp/kek
- TLSH T1B522CF03B4A186D67D48D3F613B9CA502520C6ADB4C3393B68F4248CBF9D595BB451B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 dd3707a247f641c58b167199469ad846e872f008d9ee384fa85807c63cb65645
- MD5 19c524c92089eba405373370dd757b8c
- SHA1 af40f2c5ddfbe900ee171eff6d8f05d1876e9a20
- SHA512 f89a3545be2548f38e7b77421b0af175af95805f823e037c48bf30cc0093401764db7af4b1c5a9339e3976cfd7df976e4a771d690b051c18e584ea832c58695b
- SSDEEP 192:qVujWqVin9IcOXAvy1RUQUeGXlydNH70HJWlClbc44PabDZZCVGOYozddUGJ:u8WqYn9dOXuy1RU3udN4HY4bc47DZZlU
- TLSH T12622B0EAE8C9BDDD2EC050A448422068B2DEE773549BD8C98CFF351979872B611F4CE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 7c28a3f8320f0a9338713b92975a1c91f789487806dfa0c09276b471230d2130
- MD5 e27349f2aa5bf0ac3ffada53ee1d46c5
- SHA1 6fa786181e37995bf43af6a04b8dd2a15f0cb87d
- SHA512 6d09e9cf87215f9554a650b0f56cc1034c35c2260cbed055eeb93876bb644a9afb857d4cdae29bd16a72d488e9585b8daa6b232944c7529554e001b37a92a393
- SSDEEP 192:+6j/XPvNuNh7kiJ5d3H8AIufC67WVSxOCpyLn3qXMi0Iq/e3:+6DXdG5SAIiWYxOCq3yMDIt
- TLSH T16322B0EB2F0C9C2A8EFB8278C40163D71849818550D435489075EDFA59FAA35FAC73AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 d2cc1f4cb95b9140393c6de16c9b193c3ecafb681d0aadc13a8fb9a99af83c4c
- MD5 39a2d37257731a2d8dde9358d9e5d1c5
- SHA1 cd8132da5cafd97dd6201c0eae6ba4fca3bcc819
- SHA512 6a70acfea6184d06c0bbe002fbbada1d350cf70fa4b09e71fefbb0353f1f80038b442ce914cd842a0016dd3321a27023ba5c00668b564ca2da3b0d56c739f1dd
- SSDEEP 192:fQMsF+jah7HM0Vekvy5YA6ZWAyeTZ7pVhUVI/koqREnG2seAeq1xphRfiZDtjt:fQMkhhLbVelKA6jrVVUVIqeG2seAzxpm
- TLSH T15C32C005A0576BDFA423C3EE1ADAE676F5FF2D8D24013610D677EE5D81A214F1B00DA2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 5340c4d1bf3be9f8c08e73f2aaf910e61e5a7bac5b1d2115b5706cc974af50e9
- MD5 bd07aaebc1041041c593f706ebbbdcca
- SHA1 ac90ec3d82d883730710b038b8154ae137a0b2bc
- SHA512 056f760bb7622277ae9783369dce8a032fbfeb43f18aed20f92c98013d5951514199d81f6310d965702c506d9e54a3e5d3263f8e6e27d20cb2bfa8eeb87927d5
- SSDEEP 192:we/vy2baIO0dFGA5b+6alnxltAhKkOmkiK3yh5mc6XmfWvljw4KuZzx:BC2baAFF5a6IjtAhbOmkTyycyfljw5C1
- TLSH T13432BF52D32346668027C712BE9B503086E750DB68F60D2C3FD8792D3B36A4B3ADE607
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 957B
- SHA256 c81d7f7325d9f26ef177be1f961212ed49b2f7e4776c37fb29d4a4c97f9662e1
- MD5 d928fb1db085b55798e26bac7b0747ef
- SHA1 d7320c7e0a97f0cfb6c690cfe8c753da741f56b8
- SHA512 c61f519ce6f72b1a88b049e822961e2a13d1517bde2be0545634f0db5862b47652b7eaaf75160ac8e6cf56150cf589bb6aa16e6ac832fa627d17261522edee79
- TLSH T1FA11C8B556571315591D32954510865337AC8F5C7DE583819DC8C3029874DC302BD21A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 1KB
- SHA256 cb64f3154385dd2dda2ef6a1af296e5126731cdc17b9329f8b3c3081dd86750d
- MD5 bfd28af3221e72673b70fd897aa025c0
- SHA1 f4aa507a2f6067b593c333ad1d4a1a960ec16a69
- SHA512 6e388fdcc20694bdee1c9315bb2c5baa7cdd8bee18aeb21c1413ebfa4dc24ca4aa6bccc8e7a9efe097b230dfd77d6eba610b0bab871b66e387520755febf0a55
- TLSH T10121C6248670EB712B7054CAE211012BEA01A0822BEAC5E3B329D206EB6C931270830B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 1KB
- SHA256 c7116462c5a08e922516f646dfadaeaad2e92493a4837093352811c9c3f896be
- MD5 e65f136cf5d21a1a0e3c16b1c45be766
- SHA1 37f0a0b138c3cd3b068f8243b1a32af3fbc9d5c5
- SHA512 ba6725acd6d64929886187d4d59459bfb8ba0429a9075dec05b6168784a562e3fb708261ade672485743c4af9f6f72f83276bf5d528bdc37e1925a581027d1a8
- TLSH T17721C8B717C0090B678D99703D7342A20A96B31E9751D73886D13E0C5BDDD52B4D3499
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 1KB
- SHA256 39f755d34d5a264d9b64b41ce44cc2fae0cb7876eb4b8baeda9aa788a8a62495
- MD5 856fb9b1f0e1c46e774cf0bc034490c2
- SHA1 d98beeb9a447f3cbad9d4fd41b5c6f9af1545e32
- SHA512 1261c33ef4c0848f8ca5371210f02c709c95eaa5a502e9898f22f1adf2ecae80dceefb038609bc3109f55251b6b1423ded27469a39b5f9462f9e9ec2aa8e2e89
- TLSH T1ED312CEC08FC4D437E480C8C2D3A87394E854A9896191B8025B2AF1BC963853ED63917
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 1KB
- SHA256 fe41ba70a67ee92dea42063e0170a82cc54c02c8a9d2e227a79f5b7631e21bd2
- MD5 fdde0bcdd269bf0785b8c05a7e9ebed8
- SHA1 fb155abc1980023f6ba9c2d9156cbf3395c63d50
- SHA512 1f85801daeb029272fb8b4fc502b830a274eb8c62477801b548fded0744be815d5117ea018f5b303b3ad228c85cd87dc9f3d5b2776993d9fc081974bcc1cc831
- TLSH T1FD310CDE48C1CF1BD0C153703CC560141B750B32B56E2841F74539A29AEBEC54C846D7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 1KB
- SHA256 8eea6bf91ff1029f69ca2d5f041a4c71644cc99ebc460828aa1bc251764e73d6
- MD5 bde8c4ed0ae8552b047502c6dfa265bf
- SHA1 3c3080d13da4560bbb2d57b487d28e6cf836b11b
- SHA512 3ffca3b179e69ba8c4acb89fc8a1e4310ff4afb72458f932728740469b99f556e5bd9407a7f7860114749214ffc4b6fad66921aa35775b52126f716d76db6843
- TLSH T10131E7C1A240EB44B6F2E568F8D2C6D268929ED629434C52168E7A77A31A18E43D2787
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 1KB
- SHA256 f12d70e3c976a7fda3bbb856ae7f328d29cd80379887a1da409aec711d8a86d5
- MD5 d8e9eec7e3f7e589976bc774067123c4
- SHA1 775298b1e6f08b67b38990766c29a0ffc8d5e1fa
- SHA512 ba2f6eaf30998446f918d73a3a044bcb81796e87380180804d462d3dd2ce930bf3282e75261aa0ddcfcedad733c8f4cd23e5552f1009026e7b716f8780292afc
- TLSH T19331091F532F552C7EE4E34CD01564A8C129AE06A4D20E3D9C65F388F767295EE7A223
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 1KB
- SHA256 131ef8ef3ad7e31a989ce4582b190e00080451073b621c0b645bd98efe6be602
- MD5 ed5d4417e35bf2f979c491c15e46380a
- SHA1 d86edcf894737e1db1ed54d577a9f8bc390d10f3
- SHA512 e021725fb647debe600342ce36c6f422009afbd0b541fcac65ac226228c36cc689c706b83aa448b604a95dc7f4c106cdffef16de4926993bd4a9b6b5d664d6c7
- TLSH T1A641087786905EAAF0F8716410650CEA850DE202BC14D9F69214A1F68BACC84ACC2DED
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 1KB
- SHA256 5f2027a56d0c68e44956bcf50f15528f3b1d977395c8f092afaa976c832e6a54
- MD5 d9422b920ab81e0792058256ac0deee3
- SHA1 9d9f89693ebca6a529c93ca1d4cdc35588607203
- SHA512 fbc5cdebcf24702287fed2bb179efb0cce48dccaf36799324c039963a4919218b4d511dcb57d0ad84e47f1d97453d2e88bed48b99137ef420cfc59c894f352dc
- TLSH T16D412A0E5E3673ADACD82701C69C09A308132E00BE229564583773392B833000EA8F4B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 2KB
- SHA256 8e18c2faea25ced1acd2cc90138e7b0e728e81b1bddec7e25bd2f4a10b9be8cc
- MD5 9e156821a1ce1aa06bad6d849293b56d
- SHA1 54f41d1cf5d9b7ea2aa6c5dfa7d0603ec46aecc0
- SHA512 e0193692db50176395bd42c03677891adf8022ead96cf752a554e81cb0210f0b6e8c42b145ae9aa6e6e988ccc7ba22fd5cd3933ab1550033e11723376eb68c0e
- TLSH T1D2413B0B44910E630EB8F5668D2F5727B0513E705508C15BB7F91D0BD750E9137E28A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 2KB
- SHA256 fc74b2ae9026a1b5295097455d21797e24ba3edd90196ccc1a9c3d3c93496528
- MD5 68c59ad7f0c513be36bd724990785855
- SHA1 ce7108a31229a05ac2b304db5d82470adf7750f2
- SHA512 ef61319fcee0dd45dcbd7e5065746295ef7f3d923e3b07c12f4ebaf7516b809650620cbd66bfaac1458c4f4cc7cde4cc7b6dc430a5bfd3052d4bc432319eb666
- TLSH T1C6515D649CBD4B56BF03F28231AC1AAD4A03257EEBD56B6F6BF429119D154D33078282
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 2KB
- SHA256 7d910a5b2e2b7823bb35c790090554b59c1812074057e2f22e9efba8bd50037a
- MD5 20169d0a176feb0fa89fd5dc80051b18
- SHA1 b8e3d10da233106a004d3073c5c46e394c9ce0fa
- SHA512 3d97fdb71b82881a88c93c1c7accb525302bd38ed3ee96cecc9a0212a865125462be80531bed70f36116afdfc965e300c1338648e1fb6151f9b75e792253676e
- TLSH T1FB517F00244009F576ED10AE6FA0DC5734C17E41FF990EE71A76D499C08465EA52C959
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 2KB
- SHA256 470c769a7b9e455a23cfb1f29f08ea47581d887ace0f20945bad3517130eb2ad
- MD5 bdcf630538fedeb11ed492be8adf711a
- SHA1 bd8cf84d41cbbb711786b773d096ffbc37b83b16
- SHA512 a85beff66fd3a8f33a31443ad5f12de4a3c72b13eca1fb9e13998e027b8670b8dfb1745cd849b2a8f139600925f1e06e28521ef5c07699248556110da19b073e
- TLSH T1DD515B88248C81B1564E67B016BF2CA74CD22F77B073087A0A232C85D978EC1E12C7CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 2KB
- SHA256 d4c673ca0c8c6774c5c47aa37cfa310d6c3c7609bbc2dd5673260ef5569c14c8
- MD5 39b809ce6eb5bd20d0363631598a3cd4
- SHA1 2f0165cde164e968df3aa6513b33678c147de9ec
- SHA512 9ef2d52107b91c2c4d8527918b33f1659d5dfa59edb0fd4179c961d5f37f48dfa49620b3b70940d4886605234d6847f0bd44f977dab7c0d7ebcd4cdfced03228
- TLSH T1E7516C2255678C330B28182C01EA04805966AC07A73E49526F1B8EFBC55427F89BFCC5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 8KB
- SHA256 1936bc5cbb311846f459022600570ed83cbf013ef5f826e448d4650bf2751ae1
- MD5 cffe0111af8ff3cfb4cb1927c03aa3a6
- SHA1 5352126de27026f80844f94c1da2c8d2d3cb576e
- SHA512 9aa5d0a2a187ba3e48db2b07b8aac01c278d9636d30415f6ccde8eba7bc96b42ab62da9594c15f5cf3020dbd5cf5311fed5ac25183c87df8ed10401e8e692a09
- SSDEEP 192:opxJzg9KfRT655x7kIcsSZhc1wsQ4iDr/66cM8KjJHOQ+C6+MEoi:sJzyOE1csSc1zQ4Ar8ZfQ+CbXoi
- TLSH T12F02BF4292A823F6DC4C57A751DFFD2DBCD7EB82FED9D280B85102340967A8C2653C22
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 9aa3941fa4c8f59be3bb5acaa0d3b732e4dbc96fb5772ef77fab098b1123e61e
- MD5 d786f1e17c7fa8cfcc9d10eb6958ed2e
- SHA1 7c2faefdd14e82d864bc8165845f34cf90af261e
- SHA512 5f82335334ddb8dc0d24433dc5956fd7f843a89ee5eecdd2af04163dcd1d2752abf56618617f3aea061191b6e504b319559b852e5ce64a82d3f7ba1984d9f45c
- SSDEEP 192:6gQzf/l4V5WHp2yY6PJ2PMZxPjP3pnIjc6P0I/6V8WkRq1DrLc022LikFua:3Qz3lQyvrZJ7qjc6Mi6CrRMjc0HhV
- TLSH T11832BEFBF406532121E9227536DA83C157A9BB8E1F635B7E8A432BB54309252326B077
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 99c1358798b7f3b4b74f83de0eabbd452cf7cec739d0e69dca5d5aab37f3466f
- MD5 15040efa343edaf32bd40f1316ab0d2b
- SHA1 a14519ff58f96a443ddf0cfc1f322f96e3e21715
- SHA512 7d1c3b5232c436248983f4ae88f766caed0eb081e82820bc5b3fec77db3b95195f84f60150943c98b4dbd73303fd225e527f13ced43e7b830987475989ccf6af
- SSDEEP 192:7WTcYSDhsC3B3EJbwtY7XjS4hm2MWv7Pp3AZIJ1ztX/rb240/ngN8pSycmJYCyXS:SOamEJbwkjfg2TDNAGJ1tPr4nzlKCyi
- TLSH T13C32C0E2B941D23E8A749814B8A3DFB688360E732349540B835F97126C92B07CE744A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 0a890845d8a95517db849e5ffc06c72066b2dae5912378fcd8ae2b380a4827d6
- MD5 9bf2c940a8fe9c4cbeb3503e67d43070
- SHA1 27e7db4c81687c1a106d43a027fb4267de868929
- SHA512 db0da6c709c54ca57f8792b71557f86591caacd6829ae8bd498ccc8fa03e0fb17ea878753e05a27925c06311edc64c1a75d2be3321aab7d3444a9f30e7790d55
- SSDEEP 192:aEJaDXyZI0dp3Bp1UV1HD/Oo4QSNmU2U8ibixYqTyRmKZsENyKKS89wwXL/mVPQI:aWOQI0dFhUHD/nH2sFioYqTjFENyKKSV
- TLSH T1A232C03C29D88D8E85E347689539426F6780A19A8329F3D1488DA22F7764FDCC10F9D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 3a2cc84da3856e45a8a6e292052f50a2ba701f9ffea773f264ceccd9ab4f7936
- MD5 1516e1cb20faf9593fb13eb53b9803bf
- SHA1 07eb2c85ca785c20e10cb82ce3014b9bb5c67b13
- SHA512 333f71b973a861209ce8014c1a7dcbac5407c5839eb8f5b8c7542c9035d3cc91330d693d65a6c9f8e74edb92cc80cb60cc3dfded41359858dbf068746a586386
- SSDEEP 192:xTXZSMhuD/osoFY1Jv/Yi/U6m0q/MiD52QVM66g9MYfxySl1oLm1KHkZ/8Vg2:xTXbA8so61Jv/YIUAq/dDn66J9MwYLm2
- TLSH T1FD32BF2847F5BBE8E387FC05C280B056C20806CDC160E5DD086E9ABB94C3BAE871F6D1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 8229d740b3fa661e5a229243a6c8150135246a9f75c0e42ae864c177fedeae26
- MD5 c9d23d8f4202fd310b40f6b8ee602b4c
- SHA1 d886f4e675847075ac826790abc6f055cfe673f4
- SHA512 ff027b5db1331fe4fb1ac6d71f41b2be65a75ca94b32dfa61cee42d502c3cf10549b4146db0be54fcfa073be3b7b4bfcbac9dcf265372c69e69b82d548b58e7e
- SSDEEP 192:KhawD6TpZlZJPAasOateLUo8eng2twIEe1GBHuQCfJTOv3oVFAro5jXCyK3jPbR:UawYpZlZtAal8eLUo3ng2tREeNHfJTOB
- TLSH T10632C0C19845BFFBB84FBF22128937728AF064A3F16E1315797213178074E461814EBD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 e72da30022218e81396e2055dbfa4bce12ea98ee9ddd456b87c90c833383813b
- MD5 e64bcd03cddb17e0c0487f54ffb717c0
- SHA1 8b86fdf9094fd4e31f28cb0337d177e87b2f43d4
- SHA512 f53ba68b2d320c4f5fe1139589cca7726ed23c7a1cbb3e4c231e851a72f6bfe5096c865ef5c73d72365858f6d9042bd0c69e24a3650113f0025c9e81ec01f82b
- SSDEEP 192:MUwvlZUqLvnconlNiQG209XKc9yeiJv5d61weOwNKFLDmxh5Ahv7WIvIyKSn1mhz:MXvliiNsjEeiJRd6WZSKFLDmxkhiIveN
- TLSH T16032C0F0C5CA1B4FADF2236264E47B842D8C05E5872DC316589A7564CC79E2CBF1CE82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 40a708ea9274f918dd3baf4269532a3b502c635a1037901edf4ec97b4fd3047b
- MD5 05ff39bee541856c554d34139bcf4e51
- SHA1 096b8c8392c5c8c07af0208cd8917b2c5df8a91d
- SHA512 44b4fc55f5e347654157fc522c03679fa11fadf2a3f20598e79bce8e3692a0cb3e0daf952ac91554fdb72c71b276061fb8587f0383c5ab9fea616c6bd55b68a7
- SSDEEP 192:yVugN5qkZ/OdHG2WJm3lBT6p/pbsVmYk3OumMRo+uqC8Z/nzTwizwzZYKShu:wn9Wqm3up/pbYjFn8Z/XLzwzZNSu
- TLSH T15532CF41F3218258AC2F53949E78BFAA39FBE56A0B73D1AC0835BC947B24454D824ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 8de09acd9da686df6c89f54a2925f1c0db4ea78cd87edcb1f9df449c799c690c
- MD5 bd072c1240b5eb1fe5fbca5adbfdca34
- SHA1 337cf1765599b75280cb04f9d794e60a3276ff3d
- SHA512 bad327ebf541f56b263d241c984525dcd74505acc1cc01e4d83fbc68a2690b9ea218e8da2a8d5e3e1f643e96ea3ea112711a608ba04089ebf138f0e1f7da0198
- SSDEEP 192:HuZuwYQ7XfNUpYOnKgbvfEUExCcgbBO7DnqrKCjeJfovAYcSvmhloGs:O4QrNgYOnKWXEdxsO7DnqrHjexovAjeH
- TLSH T11132C041EE33C5CD1074B2304A181EDA02F5684D66DCD356CEA7CB686E64BE32D100EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 781B
- SHA256 f53bd2fde159f77030d9a20315c618052ecd325bfb4a14f4384361308fd7180b
- MD5 e80b7b4307d68a253e6453757c0bac1d
- SHA1 5112b4d71517ac32a338a050254b45ed6bb4b860
- SHA512 6bc9457ff5ca1df22fcc83de45d4d668eeefd50e83142f321a422151a3acdd3398e79f1da4eeb552ed52559b814f761816cbb943e9727a040528ab38f7ea0605
- TLSH T1B201C5C1F063C111C1D36F06B2C0AC62F22AA6301C22229F012143F3490BC2AAED137C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 2KB
- SHA256 b89932ff7529d1464db2f1a8bb2ded07a5d73e988074fd443a3d4c538aefca91
- MD5 7c828f94172c03cb9cc5baed2cd7f494
- SHA1 d333110b556286dc3a7834d24ef8b49997fa30db
- SHA512 7af2ac9930a27abf07fc6200750e40ab7db4cebf822dfd77b867d6c196ad20bc1e962d018c5e932f873b5f2d2c16e6e72e7e8077dedd443323e76fe8c8bf6d48
- TLSH T1F8414C7848174BAB59A2106C653B112D83F5361CE8EFAF69D471ACCF704DF8055A09B4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 1KB
- SHA256 170bd87259d470a00dded8429c013fce4cf1c8054f77a848ad94d822faef78cf
- MD5 8d1f15014ff5912b8ce1def1f915fe4c
- SHA1 42cddbfdbbf7bd8b341f89b8e383eee050561b6c
- SHA512 b43724b9712bcc6acef7391959884f34fcf975a345b92ad8e2b776bc2483cdd4518e001d45e3440bb9d5b329830ecaadbc1bd44a08bc541d936c2bbe476b0dd3
- TLSH T1ED31C91F6B175902BDF55158495FD36A408B4484B091F34AAC28C395CA23304AC1C1CF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 9KB
- SHA256 e382e676726fa11bac1db574c42be8fcff041fe94efceb562a7cdf751c2d2729
- MD5 ebebdfaec2e1eec3e4c397ca3079f61a
- SHA1 6ea6d4527e4be8c3f2ae832e8203479aa094671d
- SHA512 e0aa39b42ea71161d0852a2b4995e3f9657ba75fe7eb3f0ad50e0f97976c2159dd3c2f62495eff8077674acb7a4a9644e02f689c912b43ad85f5f8a2d11ffc82
- SSDEEP 192:lvcaL3a1d8uPyRRzJuGbiT/WbT78A6KTaiTbUhCVcTlj/asLKAV1MK:FuUA9T47vpa4V0bLmAVyK
- TLSH T1B512B03659BCA55EC68F074162F81BDD280420311ADC9886FB2865E4D874F935E7A7F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 ff6377a2e8614989536179b4b49d28e5d9ee5e70e3ae70c5e2e0a782cdc91305
- MD5 621e9245fcb5d6d37c7243cc9e517092
- SHA1 3e3a53eb8803c2a5cffeb08bbb33ba15e2563ffd
- SHA512 6ce6bf5b4de7533259a137006c953e7dd37e39c0df7c0c4d69fdc1de989863ffdef4b02bd07bf6ab4eb467a66517171c71bf235e8ab29ef98bcaf1aa8517c865
- SSDEEP 192:tD2y/jHBK7qG+I4NPy6h5LrlozIt+xFBrXHKhS+OCNi9y:YSw2hRNPy6DLrsFZHEFJ
- TLSH T14422AF85676F89B53F4FE653B94B100249E710D8D7822BE988863227804E3D759B4EE5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 e85126162c989bf122f51d8ab784e7650b69671489d4758f6fc05cdf38989036
- MD5 dbcca2fa3f3c942fe1c8c3a505a87687
- SHA1 09815b6195d0991a5002f0564022df1047a4c03b
- SHA512 abd829c5e0d003c7124a9eca8c892469149767168273994133e2d4a2094768a3b94a27b24666e0e0e5f114a8d9fd7b53df53c101e05b51c14cc8f5e03b39138d
- SSDEEP 192:ks/qVe4wJBtd5Wnfz5SqaKu6nMoDe9B8/I3HtxYZT73W2qXIO9beT0:ksiVe4iB/5WnTDMNA/ucvsIaeT0
- TLSH T10C22C0F587B52BF354E6F7034CDDA92211B6F881725031024F654C18F67660D7F2BAA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 0dac2244f40a64f355167f30ad4fc3ea3ad6c371106dfeda7ebeb54eac6c0523
- MD5 c9047a18254c02655bf5f4de585e885f
- SHA1 45114503b90aba62459391a9d10b3977539711c8
- SHA512 76cd5447dc82e8581766504c878b752c6b7b7fde1b23567a8703d74706e4cfe8ef78609a7264d356a618e27387b0b10d42053954d00501325161787348a27568
- SSDEEP 192:oTpv3GttGvff/+bWW2V6hlaDYu6jnjRfzrsPIgs5yLLEp9zMqHjACF4uCp5DaCKi:U32+Xqzz3NaIgs5yMXzMsxMaCKWJc0
- TLSH T1D322BE57817174795810BF8EECFC359B581759F0601AD0B1CBEE66E6921B0C47A6FF02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 1212da006ec26c04fc0db8f1c2b3e36bb941959aef35a6997bc867b25d6fcd28
- MD5 4ca996fd7a5f99fb070e7ae8d5e2a45c
- SHA1 f77dc85488646f00984080c49b699eeac666d386
- SHA512 37ffb9c2d5624733102fee191e25cdabad8e63875fadca744682a34fb467dcbe69c85df474b33b2f00941630ab1cbce3585430cd55300dcf0a774bcf38d5b8d2
- SSDEEP 192:RgiwVsN3PNDaTEjAaIUqG+4kFIxINZ+kWMjZkDPODOJ6TpKGiVCjE6xIyCVzcy:RZwqdFDaeANG+4KvliPJ6Tp8VCI6xIyq
- TLSH T12B32D0ADBA93905B244BB8401767F3B7E13331AD2151F3295514F0695DAAB6C03EBD32
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 d509e6e5036d31b5dd59bcdb1f8cbf35419ac0fb8e8afc3e22338ab723243072
- MD5 a4d10e80fd64d171b908ea0fa027a9c7
- SHA1 8f00d1f043840e135d05bc53f043a92bcc0c32de
- SHA512 87bddf2eb93bcbf120d7f3dce94eef99cab7ed7fd91dce8e604f69232d59c40907991450d817e658fad554d33ed0d7074ce7a9dd0adeb14f6ec68077ec97dd1f
- SSDEEP 192:SuWCZq7nuEe9FhN6wbx3+7EQrJ0HqS1cOPZBQaSUI3kylvGdRCfxDGL4TN6th:M7uEev6w93+79rpSiWZuarI3z0q5Dn6n
- TLSH T11132AF8D5F30F975C44248AE9D981150699947EFD59BAB03C48C2A34204E29FCB9943F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 06dedc5326cad06b866a548f4d6c394c4711a0cf5883d65f28f05082c971be06
- MD5 0cc376c2fe38d6ddd56cd723af6a30e8
- SHA1 d07d944ab86b204accb77895757c8e95d7e383a0
- SHA512 41fe8fc66b08448287b867eed3a300ee4c1ebfcdbd0dcf36b1e13bc352f9317718843c3052a5856902fc3faa665a2346af646470d0fac35bc1428e926e88c38f
- SSDEEP 192:v5iN1K4AiLvtSF096rfJowhgBPX6n5okiqOEJlszL6j5z7+DCnofK0dklt6/Bw6s:Bi7j7sF0yKJBPK5okiqOEXszLDCofZCz
- TLSH T1EA32AEC598A5BC149A793D43905CF0A3E614E29A877892B3824714F618CCBD1B13FF64
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 ff0c09a27b26516e91c6c83cbf825718665d75bf16a303797a4e22103bcbbecf
- MD5 1ffaf0ed31f7731ad88769ffffdfef38
- SHA1 1ee5a3114219878e4959306ca88a89e968e61cbd
- SHA512 0471069a104594d4873b17b529c694932f59c7c637cad1c14371db327294c8fa7423dddc559a4d0b1aab5714737c5bd7886a18c719a8b583aac0bdf21a537dde
- SSDEEP 192:mviX7HdPPFgFYT8cICy2RVe6zoyjMwh//q0uozKRlwOEFsQxfymZFXJ8kWMTmX6x:mvi7dPPaFYT7BVzoyjMW/chM6U5FXmkb
- TLSH T14C42C0617840DFCA053EDCD77A5928882F41780DF730F879D2829646A889BC96638FA1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 fc84d5d2d3c6acef839efb3159c33297f37e7460f19c0976f0fcd4ba42f887cd
- MD5 09916b027e0e03da5882492fb7002441
- SHA1 110cee31c511e89e9be5911d21749118c634cf70
- SHA512 8c8a99ede3df6728044df254de2d194b9c0e20adaada14bea312152cbfddfd5186645e3e0b0e570d2a3d1963011f17826a1b28385179f2da915d25683677043b
- SSDEEP 192:0OHIhKubl17kxQ4tsUPwSzZ4vkgvMyPWgpuucE62bdEaKv:0OHKKuR97Uv4nvMgWBt2biaG
- TLSH T1B342BF977D0182CBBE61239785E19E5F8096454FE9C05B74440C23A0B17341B39FB5AD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 e21081c7f81384f182864316df5a8a8837fe704a882580e1a7498a697978d06f
- MD5 3f29cbce572c03c3e729b6ef1b5d3fec
- SHA1 edda553f2713f4e802cb5731d0e44cb71c491505
- SHA512 5ab24e6d1a43d5600d6956ba11913eff36bb14865b5052850055da2fa849675697c30c760af7a8618694a40019af987025533c50d16abcd73150df30821a48e2
- SSDEEP 192:+hdRI+kT/L4AmT9TxrxI/cIWUDRNi9uW7Ffs9IU7W9lPWXe/hnbA/u:cVnAmjNId1NDWBfWIU7uUXc0W
- TLSH T1CB42AF253001851CFBC5CD40EBDCACF9ADF24026FA9666461953EA6BE81CDD732E879C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 81d2693e7801c8e9b4df79034102875342eca684888757de5343afcec30550ce
- MD5 f710ae793d807c7b6bc63e1b96a0b8e7
- SHA1 60ee4505c20e07204c110670f1cf58c50bff3a28
- SHA512 3d70a3b7333ce269172ce32bf1edbfe242abafb8d63c2a1f03b60bb295104abb664883f45ce6b31e0d6bba0053922124f558153b2dced42c8ef2dd2148a96a53
- SSDEEP 192:iWtgZrXNi2KwlQm8ebQT8MjsyvAQjoOypQJhuWX7cTI104PEA5UQD:iPp4mQTzQyvA+PyYIklltD
- TLSH T13542BFAEB081CB9B8092CFD0C4D89C4757BE98836F2FCAD0780270657269351D5A73B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 d79fab1ee2190ed8418e4b67bf5359ea570c80cd248aed964bdd2da6d5a71780
- MD5 00968c4d6b53bdbce0cd7c30ecdef12b
- SHA1 423f5ff6b3d2fb9d014d6e54a145fcb9c0ff6fb2
- SHA512 de3d0de066db29c380b7de841a6739cea0dc67a29fa92d277e29697083c1b9ef625a0a3fbb9c857be5b829deae1144d2a0aa5b898217356c2c69be46b166d7c5
- SSDEEP 192:fioIslrYp4eJq6ftVzoXbR6AnNZYHWFU0XadLkiZYM9dti1xKzh8j/rc6ckK11Bx:fierYL7HzoLy2zYbYgLzh8rrSkK1XGKZ
- TLSH T12E42BF7121BCAD37A58777051BF891529060AA7B87F88CEE2C827D9D0D871E2246A8F5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 ca4a3479f70d7a0243eeb254c3fc3e4507f96c629e0e0fb4f020a34bf95e327f
- MD5 9a7b22807547b3bddba21ec4430c987b
- SHA1 027e82efc801f89f7916ca2889cc8306f500b14e
- SHA512 e363abf4becb02c9c2838a45048431bd3ab05401a91279b20491b5e456ae6dda3bf6d27f37b8651986388d41f0f8f4b2065a2ae66717caeec3f0d662ed64e573
- SSDEEP 192:80ftl7JXmlAKDEHCKJ+R8R1Yaml7GvinpE7Zipjuf4u83K9JqFP5uD6S/sUFqHj:80ftlwiJyUeaap8ZiH3KDqzuD6jFD
- TLSH T10F42C0E68D217B31E306CA5A6113B31AC64E1D40BA10C8D57D328BF887393DE6197A74
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 e07d01c2215f5b27fd6a77eab0d9d06abc023d29c11f3edee05091bda36e84e0
- MD5 2c3d7a33d43487018f88e8e06bd1ba38
- SHA1 93aa5fc1cf720d1ac79e033ca72bf1580e6815c8
- SHA512 36404195209c9d893a71b7e1f8b4c046e5c4710fdaa2d5d9f744dce8b40f11d60ef166793d95f5f9736a0bca6b518d761e3a5b382fc9c28f3b1c234544684263
- SSDEEP 192:xIkupFQYKp2o3que87Tn32Dw7fHvNMaiV19vwzAVZxkpR/n5Fom+yr5KyHmFj:ykoQPF3V53neaiT9ozsZxkP/n5FoGfmF
- TLSH T16B42C0823F1C875F411652F1A88D03BBF70DE542C214F17F5150C90DE9B62F67AB95A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 cdd60e0a9128bcbb228000d6a993a466cbd91643e1d394a2a712792102d8d6dd
- MD5 1f59de4e13702f961c4587ec08550c35
- SHA1 761e4019b76aac9e8a7556a0f82624d100eb9721
- SHA512 11d8aab30a1cf285ba5d57fbfced0b12bb98b9325f41d3a60636604040304b5ca0aab4240d95368f17e6ad0a6d4102e03adb8cfcd641025bab13ebdb9ee0401b
- SSDEEP 192:WYgzx2IXCpTRqGZxPguS24mYwAuE9ISGBFU9cPZ1EPl0XgvbTqprFwN:WYgzxhSpFqylHlYwAuEuG9GyMKb0FwN
- TLSH T1BE32C03A0320B91E709277ADD22074DE359D4B324C9F94987BB67BF4666D20DE705843
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 896f53f8c719cbb6420069316c4cd9253c2af90087389863bdcea6ecf5d7ff18
- MD5 bf9949da530fb423ec2f1d50a7cebb3a
- SHA1 269bf2d5e79af5242212127e10ffdb98a01bcea8
- SHA512 2702ca2a2819e1c80ed0787b918eb8672749baccc1174e31c736a75409af6d0edc61df5badf21bff0985fcbd35d06b0f87a29c29eb31b5c5cf11c05cc158f3ef
- SSDEEP 192:GvT5V1Yn+llPg+WFPzlfgqWfBbFKJ2tpRYGa0XoljxW2sbUwK2Tzb8i4ykUk457c:Gb58n+llPgvVzxgrmKpGfKu1Jl2Tv8im
- TLSH T1CD42CFAB036B32552707290B3692D707C1054C13BB26ADF868FA6E5F88E31295D6F85B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 9KB
- SHA256 0be61bc62c8a1ec85fcef5473315b09005d13fea01225dc8f7f4b3a21afff2a5
- MD5 795c159e7ec8da7d99efb505ed0c0b86
- SHA1 c89b05e80fd176d99203b1bf6c35406a4de9509c
- SHA512 5d7f6f05819395836e4ccb86ba78ff778d37f0372abf5412b6fc1c1df31b65cb47b8a963f6b9a8bffcf43cab499c831fcf27e9c875483806f9ab15b339f9b198
- SSDEEP 192:TFAnOS7lsH29SRt4Une1SxFk1NL0hyQjiIc3AaY4V9ZVrkUAkTVnwmhHi:TFAn57m2Wt4UoSx6LL0hyee3A49ZV2aI
- TLSH T15122AF1DED2511E24CCE65D84EA1C35E8C0CBBB64F8AEC6B4E93909C76C5382879512B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 c30ca095ff99caa7ffe6cac189ded4c2f2c5b34adeabd63428e90235fdcb540e
- MD5 13b89b703fadf793dd7ea0644352552c
- SHA1 a9574199138d2f5bfe6d67061ab4d5d1cb573bd6
- SHA512 d7b551a398f1249923d2c34eb3674949cc79787530f71d28fddef98faece044811dd2420b5d758ae4dd00634be808c2e88baa2731d5162e2f051684dcb989fb2
- SSDEEP 192:zhPBkrWSDVVORbXgMp+TLZe5UXDm8oXO9Y3SH5dffPc+kbEQfT68gwC:zhZTSDSL+TVWMOXOdf3zQ7vBC
- TLSH T1AE22C014F6547F061A3F52BCE5F3BF8239F8567C7E1AB1D23296CD9000290C26A5A1D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 725e9ab315df8b53d6c05d4ec0aaf01a79e96fe02773ff4af6502ee971619bfd
- MD5 f7fd113eb3a6b75fa4495185fe29544c
- SHA1 46ed7b68f8595f032509f7dda302e4f3b0c00b25
- SHA512 5e331a4120e9fbb5b29bf1f3d3c8471a1368d5451c0ba80c891b02532731016c3ff93c38a1d3f0a2f373f832bcac772abe5d1cb1cf6742957c42f012217c59d0
- SSDEEP 192:woH3MEE48Guks5g9uXvW3TPt0IIqU+HjcJb2yvwQ1M5ZSgQeiv+w9VlT5G:MmslQE+t09qUlhoffSDe8Vy
- TLSH T15732BF8AC3B7F61736945A5B1E4E7DCBA3B0D8614E1214D2A0F3F3680AC1368119D237
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 abb1f0e137c6793d9eca34b5e5a0f43c6c8dbb8bde828f9818a9cd05030e02a0
- MD5 0336724ec06a2c0413a9b253c9d45663
- SHA1 e0a066423afd652d9fc267566523be185aa0a046
- SHA512 bf15d281a3bf224e9c9a6383d222bd433f333e433f420386008235e3a1eba6b5478bfb7c806f84a633a083e0561a3f48dcc5af92819c87863c64021253f3498c
- SSDEEP 192:EHkwu0Y7Vx4I7U3Fz2m+VsvW7lBUGFq6AipVGpsFodWSKExckLD7maVHnW8kpQkz:ETYBv7OV2mIp6L6zpVG22zKF87W8CQHW
- TLSH T11F42CF518D1777A409BA0E9059F99C1F442388C0DED2D314FC109BF0DADE15B1BB899F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 85df38a7db5480f6ee00868ff7e3067108b19398b5665792b6d37d17dd0a679c
- MD5 202796e666051ee0040e277563f649d1
- SHA1 939377bc33a0c9e8ac301034635e1ce3e1b44639
- SHA512 5223bfb35c91c5e3132088c43f5c886c11c63e231fda5544ecb74a856fa058fe2b1e7d07a9e0222101f2833320895149c139a377a90891001b5dd5528b8f1feb
- SSDEEP 192:XqBPmLady4MtvMdCq/g3NSdyBUp0EnGcsD93NlOKv3GxX6PP8YC:61dmMdCq/g9Sd9tZsD9+S3G1uP8X
- TLSH T19442C0AC8322F33415B116C9F035DABA6D4A889EA407176B8F43CD7446835B159EE7F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 90d0d9f993cbf0419a3395e70bc5960810ad687ffe637288a1e1395339a75e2e
- MD5 2d1afa02123b91afd30f1d7f7f7ac683
- SHA1 70684fba49eaaf96577ca91a0b452a0dcacd2ab1
- SHA512 cbb6b6ee1b27cb08c8c577eacfa27b6a72fdf5dc586eba883fac3a2dec2eae44a44fe630180a996513fd3d540ecf56f1a7c2d76bff197613db4a4abccaf202f7
- SSDEEP 192:bhKkobQ40LG5UUGMzBszpJRYc/Blot7aCjlyqI3usJInyab+q4e8z3Nb85fl6MJx:bcHbQ4wMU49aD/3q7aChy+sO9b+q4l3o
- TLSH T1F142AE28EE69A049CDCECE8C50A6B98F623C17647CE563FED1A05D1650C81A6F634C86
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a818f3cab803136a7fdb85c53764477838ae3e507a24f40a81a4731533761a0c
- MD5 86cd918e7bfaf53ba2cf0e65a6c7f841
- SHA1 64c53d030f2f9e2eefc5965b432280f44b244d95
- SHA512 a41cdd67c603193bb206c1835d6ea85d89979e72504fae86321876a1eec1e466bbb4603d9b0ca3774f996b7044218d7bbe0be6a3e9a29380f6c7be252315986a
- SSDEEP 192:48wWoLhoKgG3t+oVlWRQkPMGdX47ZMbz656wY2vIJgJESOtQlW364d:LvoV7eYlWrEE47ZMbfwdvIJgouW3vd
- TLSH T11D42C041263EF606D1C4E3E45700B2CB91A136CF76E16DF80463514AF9B9EA2E5680EC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 1ce9f387dcf71b0cff6f0b9e7135b0e095275f192ee1f2e64b89619dd5fb7882
- MD5 b5acf15094fdf01fb3c11cfbb312e6d4
- SHA1 5c62ce785822ed04409a74ab3fe193d2711d7515
- SHA512 e027f179f5d86c870076b4955f4d14d54b1d32ab575c60dd2631af7ce4dc144aea0c78ab2d5caf3651503b92723d4167cb2d78db096804032d9d72f96bfa6b96
- SSDEEP 192:a+IsJ+4FDJf8IfILFTKuk9ITuUwSLoKJ+2t8ZWqyDEUBPyMK+T7fzdWHKNZIhe/7:aKLFDJfKQ8TwS8KXXrEUBlK4sHKNZQg
- TLSH T12E42CFE270150FEEF07DDB3DA153118C616153D2A89B58DB09C34282880FA9F3FAB6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 d44257a641d9a3777a2889cc814c21ef85b84e9d5f88c81f5d4896cf176db582
- MD5 a16e7166b79293a4b4bb02cfddcc3339
- SHA1 997b7536f99bd52de2590a144948d432052d42a6
- SHA512 05cf6431e1fa3dafe919129f23884d4cb8182148719ac480abee2162b7f4e84509a145a1941876ea46ced1c1d78082f7da3279ba91e308cb30bedb65b0ce0472
- SSDEEP 192:ebbEDrhW2R+8KqwuRr1Zq0QGwbU73yUUWeyCi2IGLhuDZsBaHat6SOdM6kL:esr7dwu/Z7zLcZIs8Zs0fzO6kL
- TLSH T1DF42CFC0457FB00D8E9612D5CDD23FF8D993D5A0804D5D8E6CE2DAFAE14524AC444B8E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 b09c9cf23a7f013079bd34d3ca2ffaf6de05dff7e56af4019498f2951d4118ae
- MD5 a10ea8fd8fa652df3cf87b11ae0d5f55
- SHA1 fbf55970d5cf31e684d76f652542bf7b7673e3fa
- SHA512 b736c8b96ee95bccf80700bb0b713c2fc42d358526bf446a53f1081c931588b425c2a9c64019c5cc6e1f3de73326abce3f17080f2ecfd63349829c4a0c63de1b
- SSDEEP 192:jSQ8i9EW5H8IiOSBqTvTbfe9LBrA1WWQdbAG8eL/AnAkvQOfd0:j9rIyoqzT7r1W5doQ/AACbd0
- TLSH T1E042C1FEC1E496755813A3C6C16098BDE2D550E7D15730E89F88443E41D8FCAA7DF40A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 6d27120fe4d6ec7679c2e665ca9b8025a8f9677de0c469975c0fb3695c58062a
- MD5 107cf07a237b5639a21ae83bdbb42dec
- SHA1 f3956bfb5e214280d68b3fabaf52ad31e346d365
- SHA512 6c53c3e1f7c91f3b26ebfcefd87ef6ec6be02755fa00418554cb9836310b448fd05591a8c31afe25fc146d606b427b0539b8944a8e6c04fd4ab3b72d7e8f66e4
- SSDEEP 192:4mDg75w5APGdbyzVPK0oGOJzW7cm4P0ePAlsFVn9I79:10jGdWZPKJCmce2sbe9
- TLSH T1D432CF38B0D4A8A05F11370140ABFB8527DE1D73095ED090A8693D1B38D1A2E7256FFF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 2KB
- SHA256 c9ac7e8920c9035a6b395a671eb67961e8d17b1bd64f0dc464fcb736995b0d75
- MD5 1f1727539e11c92691e74779587d9f84
- SHA1 b68b1cab9313c255e3e261015be39535cd9aec69
- SHA512 e819a892bde04bf93a79d7528e714985419c44f65f18ce37dff11b7904113a516f4daa3b4f9bf449191c194141115b1b365d969e2c252ff9ef3f8037d533b4a1
- TLSH T194515A41014282D24521CDB88F739A380ABD093CD78A4A929907B2E4876324BBE7E4B9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 cf9f17901326f3312d9f20237d28a2b5c2ad14bea1abc4d1bcbf755ffe050d2e
- MD5 e380c20a270b90f6837be698f6321a8c
- SHA1 ff2ade3fc1414ca7d478ec7e6d3f7b8ad0a50888
- SHA512 3e9e824d630f246e507045397893882c7fd1241952e6f85bb36520b414029384954ad9c8d63d5c7121f906e39504475e512f4fd591b43e6a57529e2bcb675c65
- SSDEEP 192:8ZFukzLg/6+jYMy6E1J+3O3rK4zvRZ+l0jATSO51HnFN9ul3zhpnaZ65O47+o4e4:CDvAr8CEAOlDSmOjnj9W3zHnIAO47+TJ
- TLSH T12232BE052B818E473DE3162F2068D571631EC69CB1ED871C263D34AA3ACDAD97BC24CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 1d4564b28a8a5f330cfb096e2d9f9b75b16961b34d494ee6800981b84b39569d
- MD5 c0fb6f102ab55ecc8873e6277b9408d7
- SHA1 0ec24aadfdc1e1176bef4c58fc706e2700efb877
- SHA512 f01a3de4d5409b0550f9b616488583e15f6775d2391673cfcee505b5dcaf48236abde8e9668d26cf0eafb11c5b328bfaa676020aed0748b836486a2305fbe10e
- SSDEEP 192:0zNn6qm9qxQDph0UJZEUwOmolWea4dlqXSHYqXvoEo+MAItr0K+WyW:Xvth1ZEU48oSXoEzpItYK+w
- TLSH T1DF42BF4D9FE68D67E94C0080E2CBBA9FDDFF87C289971ACCF95993304D65061C422E14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 3e2a3abd707ee9c19f413afc5055f8c942a5e76f974e81fd189ab0b4f88a2dad
- MD5 e8e4ab25c6cc6299459c50984bdf529d
- SHA1 2c7953728b40632be7f9abec99be9811bb866a5d
- SHA512 90bd23363caa51c672e2d92cdbad2bd69835449eff3477aeb466ced769335d66fb922ccf83631681a3702e06019fa83f117d193ae281c1cb6597036d38f33a57
- SSDEEP 192:Y4+Jn/MwzQydJOjTGGnb7ZzPT0wWk3LjXdGiXuR4Yp7sn/sfPZtSkxGVUZtu3WoZ:d+JnEwzQy3OVb7Z0wd7dGWE4YBPDHxPY
- TLSH T18042D03200C0397F0AF193B17D622FD8AB0A3CE2DA73945D5FADA2BCFD5A045411A89D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 239cf86b7806dcafe137de10afa3f6648259713ece22dbadfbfc771b5f5569ed
- MD5 2d749ec21e9b4e62797a12c69d369079
- SHA1 dacf40b05800b7c5243eef9ce4e4e4ed3120c0ab
- SHA512 3e1d7c835a4784eebb88e0d10538c2b115f38445568d20f36ef508063f93607544fef34e5dd00b14fe197cdb8b0d0e012627bed5f30b6992a79241d6ef75ad63
- SSDEEP 192:u0Vxna2eG/ejzGao6lvnME1moR3oyhPmvy9Kk+IieCV/6yK6xdelyOrsMmLZkPJo:u+6kejjCoR4yN3+nj6c7OQn+xnNA3r
- TLSH T12C42BF71E8E0F35A1117A330255035D450D281E8EA8DF098F572397B4723A7BF22ED39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 8KB
- SHA256 0698ad26a45760f61a79aa498bb679c19c2235a45125589129accddc0f65d0bd
- MD5 520ea40c6229f85bbc7d58b0af5fd6d2
- SHA1 9d5366eab7d4f2db30abad6cdc71445f7450eadc
- SHA512 9b8c475cb52041cdddeb023ab1a2d8181566dd3b3a165a76f13a42c7ca7ba3803fc9c3f6c8d8cf7fba6c82b48599ae58a93b83ca0902f55515220545f4b4c294
- SSDEEP 192:Z/sLAYvTa/lB5gwtR8wfAFMZUAg9mbTmHPW28cq6V1z7AiDg:Z/ZMTGx2wfAFMZ6mWHa+1dDg
- TLSH T13B02AF1EE678667F1E1C3F9382597020B8EE6B80138E3C43526B9D24D5B54CFD35C594
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 da4919ac40e41ce3dbadf5c86ec338324c38f4b1baefb150c5babdf45e66335d
- MD5 76e8b0ca48b0da06c992ecd319ab962d
- SHA1 e4034bfd020a3c12004602c596e34a389b15bf03
- SHA512 64e903f04da2d827c9c570a8ff193b2a847714e630923991fe131c0ba91fed2793dc29957f8937f07cc7e1590d507255693d1bfeb99758b7847cf0b5cf4d0226
- SSDEEP 192:7Mjry1pC/lBjAtEbXHz6szpJopzK+TRvsGhq14FWOo4Jg3faiHpNauc:75ahXH6Qi0Ghqulg7HpNauc
- TLSH T16132C00EB4079EAB7A17367412A8389CF51C87215E47AA14AEDDB89CCF511302726DB7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 0b8f110a1b67ae93ccc1512bb620ebee9cf400baaa94e9eb815fc78265cbf6cf
- MD5 71ab6f0500855010cc1f593d2a2493d8
- SHA1 e6b95ed44bec4ca84df975102548e7233c169b54
- SHA512 e792b8e9f5675a20c8e19d692f52ce8a4aae458a799b223005e4c258ba1a47acf4ed603c98dabcca2df79e1d49b2e9da5c84885e5f83b16cb6b916c3f7f8f238
- SSDEEP 192:mctmzNcuK5irXYPneBR7rpyl5LqqrGghuX1JBH6VfQ4vx7KKrCZRP0+YzLd4jYsf:mUqL3oPne37rpylDE5O9xCTxsGjYscpQ
- TLSH T1C642CF836A4E141EA7D0C49FA7FF6B1E2C630C889E25E63A7527541F1DD8C3C2A0825F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 5adeebedc1e176ca6333f84be985016efc300f49cac3abd9ec35f262f15f706d
- MD5 5270957447800a93f16318776ff33f32
- SHA1 34dfd469e4819460e0b362360b3b2fb94bca14b4
- SHA512 d5b21a4e0e2259b6c897ae62f6cb7dfc2e911ab31fe4487c0c60e3ea627af10cd11f7a8b0c70fd1fe94d0a7ac5d554cb0b27292d6b8ac8d74a253c2695b248de
- SSDEEP 192:Mwsz5ZtQezt/rJjO3L/RhWm6iFh1YULeHoOvdAjUSbpgxaJyJwnxO+ZBqpiddR:IZtDzVE3zHWmfDwvuUSQgnxjqpuD
- TLSH T1B942BE0FEF5067E1EA90410B6B57C13008B7D64D14D75821353A6834AE6BBA4AE837EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 fecc79ce6beb595f872bf791546a3e4662ac1335a340184e5a515b55e8cf201b
- MD5 2cfd32b116b206ddf14504da4941c540
- SHA1 55b1bb27f661aa9af54ee0dab0dbfedfec3daf21
- SHA512 738293b7e4c71b64138688584f2e0c3f72d5f62a3d6b4936f38394ffd2db5f625d36a2e1e6db6f1a84d1759c5731b5d920942365ef4fe8a101bd05329c44dd49
- SSDEEP 192:gji+4/CMYQPGQ14F182gL7BAlUOgNQEOcThF189+97KWxHJgLewAOA1jnjbkkXJu:gLmYM15L7BrPNQ1cTbSk97hxHJgLeF1W
- TLSH T14E42B00CB4AFDFD78D226C51A8B50E50D6EE55378A4AD0178784D8DCB9B90A24D0AD8F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a9fd5d62a8891ace0d5a7112f09871ec2c59df3cd3d609319cdb15af0b8372aa
- MD5 06e1012e4f21cc3b2575651e00a2d905
- SHA1 413a53f4102c4daf762aaa6af7d9d795a3973702
- SHA512 c2c0fecaffd4c88c9b756e014bdd6df7c796f05356f5eb045b80972d6941a328600876e3496d4957495d92b61f677560cdb5c5adb57bb7d850d02b0cc92eb08e
- SSDEEP 192:5ufWkyfUR3I4sKpJ9GC/Wcf+jnI9gCinNOy7hOaR6qmdvgOTXMtn:5eWkyMDWcfUjTNlgaR6qwvgCM9
- TLSH T10442BE8B9A2F493DC3D655C558E5A726FDBACBAB65FD0F720947A0C06C970C451D0E30
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 73009d1c9b9aa3830a624b96a863249eab58620b86ce05143885e918016d8a8a
- MD5 e366645dfdd6714430a0c7d938d60e0f
- SHA1 ea2d1654d29be079bfda37271b16cad92154e1c5
- SHA512 245d2e5880ca7967700fc32ec7df338470b574983814f5c36b044517676c3bcd7d1f19debc4dd016c89e28309b57ed620b432c33d47742b3022315efe0f0c6d8
- SSDEEP 192:W8Xol8dLNXEPQbj95Vq4HNLlgzL4M9T6BOX8YyPFirYo4EhHs1saTQ61KJEUyB:faQbx5RLlU4M9eU8YytqYo3h8s61Kq7
- TLSH T1F842C0C58343806BEF8B287984CAF9F6585A2215572CE07E803BE1F752DB84EA650C23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 653d3f55753913b2321d2ffd67a03238cd421295b8b7cebb5ff4c266158ab39c
- MD5 0495ab8909b634815620e32b67cf5641
- SHA1 fc2518cdf268eafdd69318a8f42ff48cfea304a6
- SHA512 fa9be73cfc2f0a044f079bdb4abe367f8ee850052659c53173432a7b716a076d6939c58c5a0136a778b725667ae912c03ca8fa04f484389b56c479840bd556c8
- SSDEEP 192:a8NDHkuaQaKJunA5W6uuIPCcn7MxCQPxZaRX6lrPN+rXggATpJqcFLvnBGQ0LAj0:PDHkuaTKJ58uIaPC5Ch+rJKpZLnBGQZw
- TLSH T16F42C03762966139C5907CA01D342BDB8D3D4178DB12398B46F27AB8BFC4219DBE4F25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 fc354acd502503140f457856e0cdaa6994a699e6b7a3ae09c1c693a723ce960a
- MD5 faecd8a2b1a0d707d0b8013ed22727cc
- SHA1 fd9babcfaad3b9b1dc219bbcc22272a101353bf8
- SHA512 c462f6ceea555ce9e95e89f4df60f9303a81741cdfc9b20f1e81a295dfdd58a579601286d2ac0406a7dcca184edf6d289f4ae8864fdb968cfe02dabfa04b387f
- SSDEEP 192:xL6HiK3S3GfYv0+B6VfmqVNW6DnZhbCu3YsWJW5rXsC3B72vuJp7VrMPE2aro8q:xLYigSB0+4v1ZhfYNJ98B72vA7rMmc
- TLSH T15942C0C4389D270EA716EF8CB3806317047C7E2969C290E61E5F7D74A796A25EC9502F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 d4ab5ee6a02cdd6dd3063cd8822b0656a93b124034fc0fe28b440159e7b4f2d2
- MD5 9882c8156f2327a0523155ffe76ab80f
- SHA1 e715b5fec34250e982df460ae95c8c57d1bb8682
- SHA512 a63d267be9ba4c162254e023bb00fa51044ddbb2ee19a1aba009f1a9a6c3c88f6f730cd37b45d4bc46e8544108f284924359bf1d123ee761868db376e7a9c1ed
- SSDEEP 192:VkgvydpgE9Bd6RJcOIjKosVrch1NIt3z5Cbjd9N0AG9sEEwExpYlw:VwZ96zOjC0kd9EhkAG9zUxyu
- TLSH T1F932C01C288F55B9CC04A955F92D9FB92BA6ED24BA63F1DE1035B430DB061530D96770
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 993eb29dedd91f30e0ef55178ed6228d6b8cc7affb28a2a831699788bb26b25c
- MD5 7d2fe14c33869fe7202fe8840f517e2e
- SHA1 ab005016382de60c9532ea719fb3eb11c981cf01
- SHA512 ad6f6998e578432b457980c35aba67baa412747da38ef8b64eed57d8d72673367e40aecb824fb3b9e2f4d132f3c99d1f445da735df350258cd0c781bfbac7523
- SSDEEP 192:xA3nWUFXXOHnAuzsI+vHRJh1DFnULIy7Gq2F32eTeaFMrEE2GKD5CecYRAzLZk9M:xWWwXMAuzsIYrzFnKEp/Fq7KD5ySA5j1
- TLSH T1E842BE37EA5E0990B0518C68069C2D237B0F145D19FD1BE027B7E6CE38266FE254ADF2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 b3ced98d2758a98bc4dd7d0829eb3bc76b0a26d6b7f1446e5fee8207c7a08a4a
- MD5 720cccc7ccd9d8335d6218517be9f774
- SHA1 6692087d35564e1ac0ef2d84c434b92ac1958476
- SHA512 e9b65014ed05b9d11e5aaafabfc58e0399b19c5d731fed7db7acfc87c837ecd02b667db8813dd856b41a42be7675b5cc00d1e3fd8976fdee5f2d7db01e37bc71
- SSDEEP 192:9YLcqDeBP9cj+OlZMoYGIPXDy65Kkrt/W4XUL/LpfakJuPInUiOgu5CzbNPEJcEN:OLnDezulZYPXDr5Kkr8kUL5aksMfOZEU
- TLSH T1DE42B0732C18DCB38209E4C7905BA5550B4A64D9FE822CC355C59B177FA13B9FA464B2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 764540a9ac313f331c69bf37e6c9d8710eefd8744d46d63c88f7d0c8d4a575b3
- MD5 1ffb760e186144ad607fb8873b5437f6
- SHA1 804a660b979efe8e4d3272a0ebe30ed738ea50b4
- SHA512 8eb264740a4bbdc6bfb354ac71ee5c6c4c917ef8191b568a2679a751e41a7c445fb4b939399cead64bc44a46b2402ae83e29c4c8f3026a016a66b0448adc6722
- SSDEEP 192:dQwh+lCidKbSkfmzHDCb5JejxW1JlddWaND35ifKc2a4nRTeXkg4W9PO1Uii+hy:dQwIlxKbvfiq5H9nDNDJifKdaCMUg4Wt
- TLSH T1EE42BE0A7B56622B622F778CA12D7E66C32B1DCF22D37F396390B951900D0D2966B4A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 874ed1227d6f1eb13085e951632b9b4eb0444b4343a32f5d880410786b82d4b9
- MD5 483983a55a16ebd473999656c762a8c8
- SHA1 ea82197d0d31bbce84a6c4aa04fc4ee825cd15a1
- SHA512 3d0ec83ec1bce92801c9dfe00d2e98f721e7638de6cfbeaefcec2d9c45840448987ce7c27a976f8607282846b94ddfd3ced9ed5892f1b18c09317d3ba0b89e6b
- SSDEEP 192:0SjUPwyneF/jASLlOIZgbrVI92Hxf65h+fuKsOnRDQZ54rj0xSSGS+sTaBkCcUrv:0mUcF/c8Uog3VI92HxfoUSyeyjKUAe
- TLSH T15342D04410BA26677234B769C7E94705CB0B22D83E4B78B2485C5CBCD87462BFD88690
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 177806ae69af7868b6a165840cd4341767e487bf151bc324c96ab2e6d29ea534
- MD5 2ba7a9257e83c7b006d1070782b71bc5
- SHA1 f3c7d8382f090277446facba53802ec4bb748a13
- SHA512 7818c9dfc8c4886e2c53bde934a55d2be2c8c6e2b87af5b5a6391e8895c723d47864b1ae72b83021dded0824970790df698ca9f1cd9ef0cf32864e0b27aeca21
- SSDEEP 192:2LHBg6wmIPJIdqTAtQvAIGkL6IPFRqTGTK2sp9Yd2NFJSSCGJJ/+1jw6Qvf48h:KK6vIedYAIGB8zCGT329A2RSpO/+vmfP
- TLSH T15A42D046E0A4C817B94F54BD74AB1B09ACFD9B2398A43204163B05E1CEA685ED8F8B80
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 206eba8771891f82b55f92bbcda5aea169474b9c9546af6f202e6d2cad6b1a67
- MD5 a5938b91140c0899993559b204f7a76a
- SHA1 97f8781f12a86d38c4dc5d0bdd591092c08582dd
- SHA512 ff8160d48eb636a0283eded7c2475cb137bb99ababe8d11499e9d7321a169ab6e215e8590b1fc49c443c9d24dca6abb87ae098c9e9da8332b82f7b84a8a16d0b
- SSDEEP 192:z0XYZyyLEizDqzzrhIL1r3muqQj3FKqEZYGcWpAyIRShFF4PlNgGLAK63CRgLRZi:oJeqzzrCVcu3FdDe3IRrLPeCCLy
- TLSH T12C42CFE62035729F2CA8239819DAB2B7309EE50D918010CB38979CB72A179B4D5F648A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 90546a48ddcf9152df2ed18086c34c9e4d41aee396f6d8d6e62c8c5c9a522115
- MD5 0e80b55c8f05536de4d301bb68a8bdac
- SHA1 d37a3c83fc6c3462513d5095e0166b30b7bf1b69
- SHA512 e5e00b2592220f6d8e1623175d31bab319b6869bd8b5a03c071423d6027be796b2c2e12dc2229c1a871c9705fbc8b2d430dbb3bac8af0a5058bc1dd4af653367
- SSDEEP 192:/4DrxUVja4fdr2x2nQnQEcnz8zV3BQR8k3LpXtdFm2bDE/kou7XY4Mg2JDSACO4c:Ap8jaoTnDqQRVFzbDE/67MRma1iv+OL0
- TLSH T1D042B0872D3A8C347C8D74062D27DA2F29D9D3241D06F6E2B4D9D76E2C2160A662FC96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 bb304c6c314d15fb7aa40b55c526b13b4711f55bfdc5fc26be77739074d418dc
- MD5 d2045eaf8c662db63a0e3c6c0e17d698
- SHA1 b852600c4ff9f5029a0ed228dd1ab90512b27e21
- SHA512 d1724229ba365628296952a5c5ad09b6702bcc8aa3419387fa46e362b57c2493769d95dc011c68f70de3850ca492e08ab7dff9913afe995b19303f87ea1da0c3
- SSDEEP 192:fY9yKtIsNGTlYqDyRLd2Whf7SaamqgOs8EsnmsijMQORvWlOJ2Gx8GNxRDwd4Osp:fStIswTqqDyGAdamqhXrijMpC1GNfwdQ
- TLSH T10542BFBDD964DD802BA75F0951BD60C4D56FE60B02E865CD6D2FA10C569E3B7318802F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 5dc3ee89e385a50c0ebf0239b7abb1b7084af5fc854140d83c2c32cf9dea2a8d
- MD5 a780e22dda283cdf39d046af4b8c8c08
- SHA1 4b3ada0fcdd119ebafe1d04936fdd0b693c690eb
- SHA512 1ff506361757e833b036a829bb71ee843be8403d1f8d6161e327437e87ce548a6e318a227ca0fc1390781eb7b5140221602621d9f0cbb49f51e5594307aa3284
- SSDEEP 192:N74XASbOiBEDEBf6XLGjVOMliu2WSS/6tEVsp8hVuObsBYPOgdrT9SxUYp65p9SC:NAASCiewBg9MX2tS+EuKrukgKk0SC
- TLSH T14932D0CB772009727E7CF287FC6B96F499B096318EA517C7EDA3050019B4EDD952A084
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 566c857252271e2c68e568d5afe3d472e8524db7163c0febd6741b84ebf1cd5f
- MD5 d341f2c5cbb7af5f468e46ce334176ff
- SHA1 33c50205fc3d9a68cf8ff07e925930dcf2e4255c
- SHA512 4db0e23a39a154fcf1e64758bf9c244b85c5e8c2bf82cf801ac886ecbc44fc1906a8f4d2536083de4a4eb97561cc4d48864b1b66a14cbd70a5ed9e6e902f6471
- SSDEEP 192:7Zf6PAFybCSV0Wkd7Icsgm5hJN9zrj1KTf8FQWAnNHU69AAp1EeU3eFJfHDqTrOv:p1ybCSHkiICHWrhhfp1Y3eXPDqTrnO
- TLSH T1C842BF5D1E2D3B4FD0BC8F9A837C1D61B5006B2F92277722C602A0FB9754D89B7C1456
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 ca659f6db6fd0dfaae5b02f86825505c4f1b0c0670336b215b36d98797a8ca8c
- MD5 b70278254b61b871af27322bc6f5e890
- SHA1 eac396397cfc3fe73ad5bd1e23a2947bb5f0023b
- SHA512 bd6761333c00343cb2571d7ad819a43616a5e35f434ab8202a4eba484c5d6f8036770cfa1fd9371ef13d6c3feb01209479f144e39e08a3a83a2e934f2be108c7
- SSDEEP 192:j9+Xeuwi2dvgM9XhqDZrI6spljjLSnIHqynIbnx6b8GuZvkvJtOrBJml3tAcL3Fp:j9qeuwi2GchOrT2ljKoIN6b8vFkvDOr0
- TLSH T1A532BF8330620C50C7B1ED6D5229A6C87A932B07C7460E94E8FFC7257F4F27A189D8A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 4ff37599a397a3a471ff4f3c7b16f4fa68a418c5e96c856e4f0b577093ac53be
- MD5 602b361af2dbc2ce6f7f0c856c6cd8ed
- SHA1 aa351f28e219626af2683e8878f465f7c54a4ef1
- SHA512 23aff053c6224f74b18930c777b2a24755f0a4389d56051f5a1e878f5b996e27002b13b526e3e2361e7e8b0d5816d92fa382015224bca5ff5fe003f0034a35ce
- SSDEEP 192:bA3nveUYGqHtbSswq7Cy1XXquLqHq5uDeXs0W5V70Yj8x58/nzkDEO0Jp:b2nveUYGqNmswq7lqud5Aec0W5VQ9x5A
- TLSH T13F42AE36CC368288B293EAFC10E824D5F5E54D2EA38BAA860D0019479743CD6F5E36B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 10KB
- SHA256 688b79ae4acddab76592716e3834e603aeb75ef5cb2fddb7e802cbb2b3968c48
- MD5 16d70f600e71d6d78023c0c7fac4c021
- SHA1 f15254490233acd2fb0b3fe3d7e3e7d3f5318e30
- SHA512 581d9799bfac57b56f8f355e41ff3b2b3e359165cd7fa530cf9091057289444f314dd63ab9df389b660827912a573e01134a83d9335bfe3f570624470dd397ec
- SSDEEP 192:/JkUhdH2yTvlEztztoZAumuj/OBrkXX0NcERKm1fOHq8uG2:/JRnvlOMHj/yaDWKmfIkG2
- TLSH T1E632AF3CDD6E9ACF0D8A1216CA0A1D54EA4D0E70376E67E7EE80C41A15E7EC79F460B1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 3debf2bd97c9de79db6d5394e75cd3634b0d2aef9f0cf3edbb0ab52dc5e05d26
- MD5 1791900935699f213ee260f0ed31c261
- SHA1 3d0974de45b567940452ae3c8282b7f6bf224736
- SHA512 8a8e87b871a84b0ee27d07d4e705178a127c0b7d33173bb92a147d0160f87fc03cc65a49cbbcda3c13d0c069a85842c09798dd60ec21133cdd17b29c1ead617a
- SSDEEP 192:a3wUak3YkMNGFVltZaEowkey1LLRWqL6Lhjg9jBP1ycIePR5mniXB/f4GHubS2CW:aWk31MsXzZaJwSwqOubcePR54iXB/AG6
- TLSH T1C842CF1A5E6E63866410BD8286F6F2033D59C13151BE843027168EC0BAEECC073A4DAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a4f83f9800d0de8547950a458963d7d2240512d05c7bdab5e032bfef89d69552
- MD5 ce3e7f526789a84b2ae377ba4aedfbcc
- SHA1 80fdff649d1d74aff3c95c6b75900449a8941097
- SHA512 94760e7acc75122ab7d54e8c7a61057343c097ae26cf4cd9477cb2168adca7ae1d2b6224efd8a11376ac92aa221b0e3f6768bec8756c8fd4730957a191ae7a6f
- SSDEEP 192:fk9SeklHFAmmYAztgGGMo4oRzJeSar0FU6BAaYyllYyPOSob9lA4gubV51io8Qqa:fXi/5GhH1MwlAaH3cPgchv
- TLSH T14442B059DA5AA01C22D6B502379CEE2C4E0FA4FD4160CE5BDF672CE2204265351F7657
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 cb230058d5b4e446d1ca7a527ab2085ee13bdcd294fb2306302be9b738afb3e5
- MD5 c66522250cef833631a04dd438c06746
- SHA1 9b302a97ad384858dd2571b9b41c0134d6b71069
- SHA512 914ab81ee9b8e15b1a9519435d9fa9e42bc610dd67ef530735f690db595cea6461f8e21a80d88ec7f62d99ecc6362d40b5d11fbe846f65992ebcdb0ff06768fa
- SSDEEP 192:z59M4H1UroBNql3nJFqJjEdLG10AsacayZB8Kd+Gny8v9mpMtbITn8gpT4y:zLp1ioBgl3JpG10Asaca08Kd+Qv9IMtO
- TLSH T1D942BF1C67E9B9964B9248C7AB615B9F7F02C0CA886BB44CC23F71006E4157E473F1A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 38eb49fc01f5996fcec53e95723c3b32ebe0481ae4e673dda39e86c6009111eb
- MD5 4af85b55092b69438033d977da9ceb8f
- SHA1 57eee00c821cf85ea0a759b971f0a5d3149d4765
- SHA512 89e8ea9192e16a4e4bf21bf96ae35c1ad19ee41a66aaff1dec0a9fd0112cd2d83f2b6305e74957c6e2ecf272e4c7f87461a629ba30c1a0078763da756567af7b
- SSDEEP 192:nXh1gsNgZn2R2tsMx6BBBofdjIJZJ2dltohT8JLI0fyIJV868JXSVwbVQZXd:nvfPVR2ID8dEhT8dICjV/QCqbkN
- TLSH T17242CF447AE0BEFDE4F258CFA66709797183A6A7D2192A4801D1D207F383346CF252B2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 6bddf25e1eb0c3a37925dd508f3e47c08f736014661db3130c612806aa5466a4
- MD5 220ae92f3340d817056c620c85f8c80a
- SHA1 a2eb800cdc7d3d1f84938d703d198e8fb748d9cc
- SHA512 bf85dfa8dce823ae6c91270cd2f597418550f3e73f7f709e8f1a39797649b6827867d9d24a77210716d4798891aaa104ccfae034c96a706f041c17d241f0fc4c
- SSDEEP 192:873ljFO0meqlgjiJqMLydoQasGOm6D3rcQ2Kd:8jlj8vOTMOdo+mC3rDf
- TLSH T17842BF5922C37B361D46BA372A1424DA7A25F0A14287DCD081EF6110C73357FE2EE2C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a70a93226a5d084e8d187a644e5bd22a57d2f3db50d120bf3fa27772b5438480
- MD5 40211857c31c2acbf3333c53cd341e71
- SHA1 edc48818a85b4cbd5adf2a7b1f44120c1ae2a18c
- SHA512 4c6dd940a758d92e85de2a2d5eeb1ecee69f7c4f8a76905c8d13912c59a58dc8302304e95bb542892148b2768985b279259f54a2a444def59659d252cf91a927
- SSDEEP 192:4mkZ14cBcErhgQoZjqqMHszKpQEddAmnDO4y0AAJY5iZWka1cVpEH:tRXQ6jqqb8Q8TOe1ZTa2fEH
- TLSH T1AC42B02DA6EDA2DF81C6D904C7D4E16277B27E1D6D93449A38FC36443C9C85AE4042D0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 026c50eefa6e2b1219f6f5bcc35ce377a0acab61a19dd591f7e4fb6f7a351e42
- MD5 41eee6389effcc534535cde2823dd373
- SHA1 e7b1af926e4d6702d0a01ada3acf7fe57d8a23a2
- SHA512 db32741f10b4c12123393a5e56adb4fb36befe992e137f45b6f1b37219b6db3729f50ba21d5adaea1e65343b047972915d89b37834f1415b27d5799563661542
- SSDEEP 192:lr0ryeq2wyI+RiUF59wunOQGGvdd/k16tQif0oOvgU1vUrEDdiYlWEI2DNMb/UfQ:lW4fZwYun9a03OvgYUci4HDNwd
- TLSH T19E42CF239AD4F00B25CE1695722EF3A42705973546A168CDE8B6174225F90E9FC888B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 bd7c432511bfcfe50ccd6883aad39246a5b8e24d3be50a6c42dd5184ab227ffc
- MD5 05cf92f0a3710b3a554ea12c53054ffb
- SHA1 735a153b447419daacdb780df109990f3258ed40
- SHA512 31151e3e57cfd12d59a4996244d512926756263a061382be06fa2ccc179c36b7edaec402c86646f9c4f40c511d947ffe7c9d8bae10a382ca21484c6f29ee4833
- SSDEEP 192:XQsCEGZm9vIrw2rlOprpif3iwDFMbwW18qoNdPQQ+FzXPFQfo8RGbNC3ADwx:uE1lsrsppwSwcw4mkFzXPFuiKAEx
- TLSH T16D42BFB28DAD708F1DA3397266E23A4C2D3A36331DB22E9157E8197F330E55188C0F02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a6c603291ecdf07c90ac8ce80e1e9afef727f695d98794c3878313db4f9df02d
- MD5 512d35aa6be23aff3b1776a8fa7f3000
- SHA1 d775350220a0987b5b5d8f9da6fc85149f42ae48
- SHA512 734507b4cb43a982a59d728abb261e253eb32e4156c3068cfb8ccd13b235459795a8ad79ecd8c2cae22af21e9bbf9df0fe608beade96a6d692e4f75717273003
- SSDEEP 192:CSiY374OX7pRu8/cVDSdcYKQDJoSpDA5k8HpuiZhxaNknTOYZihYvZi:CSiaHVA8/cBocYrFoSpDA5k886/auT7a
- TLSH T1B542C034179B2419F80285DF88E579A8B2FB0A9A5D42F17344AD8B460DF4E43AB8E70D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 dd59861e3c17220c24b5c5fd6b3055c5835bebb8d492f6b727c69fa0279fcf4b
- MD5 07155d6265a24d370e601b51e4582ef5
- SHA1 329a30ed86dbd5d970cd4a29eb63b9aa97bf39b8
- SHA512 bfb41b688ea1d44d78938625b86ee08d62972d7bd4a8dbc90bf1c20ab5527d5923efb4a62a7f917bf3197ca8d668d45fe710056778461eab0b732d6e5af42c0b
- SSDEEP 192:chYoFA2eD/87SjBFDnp9m62b29UbtwxB27gJoCBZKXfA3l3BLd42PL7i88U:12+87G9ZYXe3pY43BBp4SP
- TLSH T1C242D0E19408CDB129040C0E45534B5774E2DD9149FA5E30E9D4B326EECD3168FD6BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 d45b5aee016f74a0fc42d3c54e08b0dc9b09799bed1bcb6ea66b38b30c12e784
- MD5 379aed863769f59294eeae42e906beef
- SHA1 a74cc3a5d94297811f033aea4dd5d0a3142e45a8
- SHA512 ed6f066e882b91a87b508fe3c946dc40cecb582cbb731ec6bfc6d56b37d176c85f1bf2592a4b6bd4545d757646422b8c71af131fb07a2e1a537a4bfd351d9738
- SSDEEP 192:tRbPJasID9c8FW01OfwiTgeStF78MbIiUUn9urYjtJXhK0No8ByeRmvs44:tdP6D9dFWFfjTge+F7jmrYjt/rNbByVW
- TLSH T18F42C03B976FBDF24A165A3E657A929883070A0BF880225FC41F60DD19E17F51258BB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 612e004cd78e8bc3a95a3a2f1f6572f29b270e5b783842dda4596f0cbe40a116
- MD5 e05c634e215feb1027e704716d0f4756
- SHA1 13e5943a774334c122489cbb0e1b6979b9cfe91e
- SHA512 116bbe06277fbea90dba1e2477dd3f6641396637caceea0cb2d6f0106ccf22c58b8d3ffada43abff6e0792a2c7389aed105fc15c64301f48bf536a1a67c34a5c
- SSDEEP 192:K56H2/ZqDaKNBEHmxGiSpzQDa7pObqfY9qxmuzc9CzimSPDaisYtPfu:Y6W/ZquKNKHWGX+oXY2muw6dSukRu
- TLSH T17B42C0A2F4B7196734F2409A0B5E52B7CBDA081DABA061544F4EDC3BED06ED890F50C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 4c49b44eb35993410f6ad75e0c3c0c7a604c2174d84e3db87764a0e3cceeacdb
- MD5 f8f88d98741be32ad7839cb86fdeb1bc
- SHA1 95df61448b41566efc8d34033b4b8a1feccd36b0
- SHA512 6441b69475a3e416405df7c5f42f28a9246dabc9eb408ed26f56c5e29ae9e3b66c657a3fe804f11bf6291e8fbe33954002ac86fe8ae1c25075f55a0a322f6469
- SSDEEP 192:GEWULeOpFC+YP66xZoTPD4QVg8BD46hcov26pq7WfAh6MGt+qTy1jS+u:jWgeOIBZoLD4Q68BDrhrv2Cq72g6Z+8
- TLSH T1CD32CFBB684AD2078DA63188B5A5C6048EFA02F5C62FC1E0865CC03C6B6A75916DF7B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 1a526cab740b23e9b3acf043cd7f76e44945210b8cb37f5fd0ffe871ddf57532
- MD5 85a47d200a5bdd47a91b8e30373d7ad6
- SHA1 81fa650442b5a8743823733a552b640fffac9c9c
- SHA512 03536517c4482c8f8e9bece2802a15b55bfc63514b9f9c8dc861e47ae0eccda8523cb31ae0a8283d2438223579cded1afbedb6f749bd2808618f0ec443ce8b6e
- SSDEEP 192:LPyUq9+Kl+X8Hx7II2gYtY5x5cC4RNGNW9NBOLl/Y0d3Xkl8ygG7Tv2bx/yO3plB:Hq7O8HmIHYAYCGqw4J3Xk+HG7jQ/5et2
- TLSH T11042AE3EBAF765DFC0F156C805817A92C1CF31BCED8DD49C3E8E59949EE881102B6259
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 e2c6796ac1f517f40f41841c81c1044b3372bf0d3043ca10ab78c4750dfa4a7c
- MD5 b3d660e58455b7e5a917216ed807ac3e
- SHA1 7a58a7c7d94477fdc37140b26ef091f7c07232dd
- SHA512 a53e2986653fa1ea6d28eb00ec2f6a63893fc715a00da795caf4d96a9871414ea65b222d582f2beaf332a3aadf5038f9a7fcec057ae3682b8946a5b290527113
- SSDEEP 192:iOr8eTAzBepeWsjZS0d2sWrnJoJD9OGk8BPoHKM9s4D7hgntHXRF/j/xkeLuXlGR:DTASWY0dZWr0Drk4+9FPhgnZhF/jz97l
- TLSH T14042BF3D1493BF5AAFF6A01DFB267B637349DC54861EAA78AB74CC0005E71339B61212
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 eb9f5f4d78041a11e9bdff859a5b0f5e89c39b0c8d0f7cc8d9154c242246bedf
- MD5 c9bf6f0919d72256adabd85da5bef28d
- SHA1 004f1fa4a8694591b295ad7cfdf9a378304540ac
- SHA512 b2b2c224ada5a2ed291087109526c4701a4ce556afe1ef14a3d6458dff450d4cd1a6194ea140b0a79faceecf5d96f69572c59e4f58d2ad9541a2987c4d45bfe8
- SSDEEP 192:prpQk8S5zrgwZXjIO10H/PqTuDj2Pv9XNyF2kHhaZDz5/I25rWDDhvD32s/FoKYw:fQIBrgwZXjIwu3uKENoVHIZ+9Ddv3NoW
- TLSH T12142D065C46E67E0BB1E6B64C7BF8949DF19ADC4211883D66328B313712F4A07A406BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 152987f39224b1ff80f17c726c30be50e80dd4ff6b2458b66f43211fb8a3e6a3
- MD5 f052b882c266fc89ad89d9d1306a4b70
- SHA1 d3bcdd326616354db3856f632ae843a1c070339e
- SHA512 6f7162c81644e49bb1db10038824fc528003344ebb9145fdfeb65466105f7d5bca46afbe08cb97c7a3899169ff6e42e14c463231198d270726b808654c5e62c3
- SSDEEP 192:NA5qVrFHyJ3GQOn8sKc+rUROdU4eNQt3N/1X3UBNMYsKJ/V5aUImrlND7ADUKT5g:NhVByLOn8sKyOkNQtjHUFsKJJNrliDUj
- TLSH T14F42C0397775225DD0A33E750D1BD54F73B7FD6704601C62222CE0F1AB52EB41649297
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 365c523d6c1ee1c8303717b9dad5145e8e005e7cdd6d550dbcb5b934ea2cdae2
- MD5 27be1afaa2d3cfc38ebfa6eabb497cc0
- SHA1 1b7f91ce26bdc65e2fbf602d5a22260030e255a2
- SHA512 4e687ec985d6b7b75cd525675c7e0613c2861559884b6eec0bc2b5f7ef4662eba83be344db7259d79038091ce85442ab8eb8e4e51cd04f6a99cd6a07081e9f4f
- SSDEEP 192:ZYEXlB2FGoFIg2UdK8GegPNDvFcVJU/h/cCgpBxs2uZooRxQBVaeod4wLAWGL+ks:ZjV0FGOpdKP5vFcVKZms2uZzxQ/S6+Ck
- TLSH T12E42D03A35E9807696268689223C41E41620EEF6F4E5C0CFE79D8907F253812777C5DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 66c2d8d2a99a07e158281c4ab2da4c328e953683738765ca91b7f5fb25030186
- MD5 e84597024e8d0cfc6fc243f423e15a80
- SHA1 1032acec6680b3ad81ab15ad20d6ca04e24d47a1
- SHA512 e9e17d6c6eec41aa5060e4caaf5a79ff7d51f8b653598e6f44acbd395ee15945dc92610b330ad3f2552157771e7af8d1b7e5aeb3210f9af0e73b567e6cd3d14e
- SSDEEP 192:tsKSRJaCIceVc49+M8GGqG22U2IJIVW8PUPIrurosPdc3ZErhUZKl3X8IgyQFHmt:tmRgCbSL8G1xPIVpsh2YhUU3XwyQ0J
- TLSH T1AA42C0D11F4E4C5BA5ED1DC1AF8D683C5CA486384493330DAC1A422CFD2C96ADBA946F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 3bc26b7b2eac76545a3fe839d78df343ec2832ad885604375190b00a9a2f9415
- MD5 e50a1a6986fa759b9d65f95e47bfbcbe
- SHA1 a21a78d298ec80a71880457592cc6ad380a091b3
- SHA512 cc2c4af590674a10823579dfc58d30b2f331ee09b298ca402ce2b5abba45353fae1fb241ba2a9a5e9650bcbaea8f35fa9e5b8eca13dfdd9ef3433b312983b913
- SSDEEP 192:wxZhCVuVjabQfoPapPNbeYLQYY2zDQoBvTMXR05jiADgFf4S6tDPJlf9XwQEEz+8:SZGKoQbeYLQ/8QoBLyiY/mS6tDRlZwRo
- TLSH T1C142D16DD3D4E3892C826360759142B02AD826992B880D776DCEF7720273B9753CFDD2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 1cc6190e55bc3944b73c2b02f188d974e5006ea2f2c6dcd9aaf91f17b787af00
- MD5 620603c2b8dfcd3b6bc7982bf3095a86
- SHA1 05a4d3cd7ca3a56e7ebcde3e694380c0c44fee3c
- SHA512 e76045bd0b5eb592a1caf83ecb328c5ae5cb2c06a81b0413832dc990abe175b11284ed09ff9aa7df4f89f7ce52ca9ff7569fbd6c63de8289ebea50840be28530
- SSDEEP 192:zCRTkhnx9ik0Du6uLwsSakNxGcHaHA19sXi9HyjM+/GhNrgo2ARKMOS0vOtW1M:z4jUwsS7GFIeXiHyjHyNrh5OS0vOYM
- TLSH T17F42AECF87EE13F6C6BD06E97BAA28AF81A40D8594FCD4196160702B5E16CC0504CEAD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 eb76b4b0e669bc884622d7b893c1f1db9d13343508a56891fb970c63298c08e9
- MD5 fc8a112045d76d51ae9d405e065574f7
- SHA1 0d2ab63020542ae2cf9fb632f6914d1205cd4be5
- SHA512 2e61184aea963ce05da7074d357b378f74d5ff4d1250548ba5d98f48f076a0796d2837307e2322493d112080c9c25cf32ef5eb3e2320bd7a3900fa8de8b1654f
- SSDEEP 192:j9t9FNkNCwcTRk7TvLl7fGI5WEX1clZNJonJ2eUePPv7804p:jv9DZTTQ7F5NsrJf2v7yp
- TLSH T13F42BF0F1E0B08319753AF2C0FDC58F4987ECC88232515B7BEB58AD5AE7620996D6E25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 694bbf4157435e92600f20f78c3dfb75e0b5637311ed10a4e81c60b3f3f3b188
- MD5 3f94fb2f3cb90143c572d6644f8ba636
- SHA1 716b0e3693bb317e78ac7a4d13752385fcb9d855
- SHA512 933b56c96f13ec30311000a6f9d38b88ec07cf572115446027a2bb046354072da5fc3b459e45f69fe28b9f30273ec9a9f1c7259f04be1b20752dab65c3e8c4df
- SSDEEP 192:xWkGGkIJbux4pO3pq5E4gzfowfYK3rBVQqOKuUV1E1mHZLIl0I6qJGEo7E/BYxGF:xaGfufp86icLwMdI6qQxkYx2l
- TLSH T1C242C1E939795777F9BE3D4901A8386AF1C33019DC52C6DEAD5BD781EE44E001B08EA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 9989c7184670e59e7f7d8da26fd2a8ccf924fc225b7d7a1adfa75d3b3c4e0468
- MD5 24591bfcb45a39dc954e9df30793a4d4
- SHA1 8a1e0fa9c62ddd82c26a676b8874d45d17527b60
- SHA512 0b8d727afcb963a21f7612ca2a59c9aa792a8cc47d613ecc08d3b216da2e67ec21afca70b2366b4fca3923d63c322fcde5afccb8bba080eace482e23151fc03c
- SSDEEP 192:+t24YjFvi4405p5Bax5iDbnQ9ZVPuQWHzOS2lg6dQJHqdZIV+b4txr4g:+tOhi4405fD4rPFWTOS8g6dcIeV+Img
- TLSH T17B42B000A5A1C7252B4669B4AB0FC19930183A15D52ED9F32E6D8F743FCC8BBF1BE051
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 56176835ecf1fd7e3e4d47a28303cf9da2bcd51a0da8a5e2f9af546ca9094800
- MD5 bd5f847c0ed466eabcea1967100de9e5
- SHA1 9545e1afc048af2753fbef7f228fcbcc0dd0a057
- SHA512 cb708aba1aa753885b764a70dbfefe8e446a6a093cbdb232182a4cc342fa24b198694f338149eec3dbc6f2413ea7aa1d6fbcf90322b11550e35095d3bfeb4834
- SSDEEP 192:1uh7W/8LWH5ys5kyF4VzRvretPJYyRw9Xoin1UnqjZMdze10yU0d:uLWZYyF47rUJYye9tOqNMdzg0y5
- TLSH T17F42C08987E39DBA098B300CB74C705E74B05AED2AD5202175B929DC7661AEAE9B0243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 13ec075f1aadec700a5f21e9022d31a3a60619de65b8e542600825e3c5ad8357
- MD5 5f2c1846f065097e62e7e139f1a75e6d
- SHA1 24a2a166d09d485d51bff6c18a90564c22cdd707
- SHA512 7d2faedc4050629589ded4ebcdfa318f7e385b2c14742102277e26983f97d7e8ccb57510397d52c03fbe6eed517cd6c6249653cfba5db27a5296025bfd2a592d
- SSDEEP 192:KGOYqUuvivjn767kHFBkuIwPylvZv0+jWmETPk1IrfNdjrhTJ+XIlvhkMjxf3kBn:KW0+n7y2B2wapZsgETMmTNdjrdlvhk+y
- TLSH T1DD42BF56F478DE0818C16F34C4DE0884AB97B754A85866082B15AFA640ED1F95DFAFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 79079e8410af872c800f1b0725af287f717302089d350a2ba806c64523b6c349
- MD5 e2e787b1081d16b152d566ec959fdb52
- SHA1 e1a42d3e5c84ad2604f248d3f6427700200a2436
- SHA512 980be93c8329e784717fb6a789d04ac978b0ccbad8d954d5822479a0746290c19069a83806f50439365e4864f19f1425ee72985d93964cdab979a338f932de42
- SSDEEP 192:681opNzy8VY6UGKexxn+ItrEEI3AFkZu5HxQAj62VR:6x+8VY6oAZnWAFkZwxQAJVR
- TLSH T13342C008DBB10BDFA4C89A6D314CEFE56E305B9AF93020EE165B81524634E1A41E6F43
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 e8b8bcc5de4a1c6ffdfcca1cbef5cfdd098d6262501acf6755a6ac47292b0466
- MD5 070542a99c78bff8cc2e99089e94cc55
- SHA1 0329c3fa11afe62563b37a60d918dff43aebbe15
- SHA512 62a23d54291cb42e56c37d4f5f3273277389ec5491de5eb3b46074541bdbb5645064aeac08fa2a7e2a79d12eed3bc108f0e916006e597608850dcbbb91db5fd0
- SSDEEP 192:zM6Es+Q+H2PY7zfTY/q2yxDGsIIZvBBCCxmmDVKZP39AmOiGNG6yDLAbDnLIroU4:zOtQ+QY7zb/UZSvCCnKZPjGAxekrLRuB
- TLSH T19442C019708892044B347DCDC221F9056E80A3AC9ACDBBA71A7275C14D34DB9EBDBFC6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 f0b670ca0306e57f68c63624d240c9e44cec016e6183b5d104a64e67c4922ed7
- MD5 71694cf0edb0dd87c184d6f20fea82da
- SHA1 2284299b5d9315a85ef9c06cac5c0b9f4790b652
- SHA512 e907f7fc0b0b1dd1d08ce848df8fa0927e805ebdf3bffb828f94dcf23100d192d1817cd05f6b25834bcfbc35bf61b4c3a4a3396e879ac417e4b46b820ecd9fbe
- SSDEEP 192:ualllHLp0xbvJImWyF5q9pa14/oVBl1XRuZfx6DaeOHiLd760V+iW:DlzqbvJj5c24/49wZspOi79bW
- TLSH T1E742BFE141A5A2BE847C1F7B758EB56135EE656284F2C0917B053EC824D0B0FE23CBB2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 c2a86be1a4c7238ed8bf1797259f06a686b2045adfc7a22b1d5eebbd525e29a2
- MD5 b5222aa0df1bc8417cf43cf1b0f1fc0a
- SHA1 b57d8bad4b06ca511fb68b8ef09d3a260588c6bf
- SHA512 d090cffa235b0b807dc63115794b3a99ab94c1e0ca2015baf3db787790404f75a35b7166dac0c799d07a409a6274d49284e63fa8d8e06d0dbf729584a7090b86
- SSDEEP 192:iwMdZ+w/N6vKrrJkodQgmomTQjT/gY3zmsP9/xfGCMPl9TjxBoSUv:4++6UrbQgUTQj8Y3zm4x6LByv
- TLSH T13C42D09D2B00EDE7459B2CB0E787EA81CB7C165856667DEB02F18F4D5F8179A102F0AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a812051972a9dea44807d43e78c24cf92e691603198dafa119e56780402633ed
- MD5 a07d008b726cc06427e310da1b9224f2
- SHA1 dc7370f5161b7009355fd03ec224f7739ff80676
- SHA512 357fb7aa63a3c9f1259836115754f29d5c109ff372a23101515566d54bc552853981d7a6a4e3e929bc9c8cf64ccc1a79b832ed836f91ac74024ac7c4fca6de20
- SSDEEP 192:6LD4AIuWMiI8IXhIEdnoFE/6E6BKuCC/8S+JKn/gWsATbUolRRH/XrzGi8yN+35S:uXRWhAhrdv6EN68zAnIWBMo3RH/X3cyb
- TLSH T17E42C1B7C797B41FB1C886A954C58D7258CCDB2F2A3F42F91187DB2305F2B509255D10
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 6c43f707fde17fa371fba853bfccc4ef49c67f96eb7d17364814551b037dcb1c
- MD5 a3c32fb8a25cc869e4c17ab862ff678d
- SHA1 09015b224f37959debccea240ad4f63606b859c9
- SHA512 f92270d5b7b0bd1b5232b8c116151deb7aca69d8cf3ae2f4acc7c08fe65d14dc8b80b0dceb7a2b25159aacf9c3ba141d1fdc47a5f78be4ff70f256b9653efa56
- SSDEEP 192:X5uhVz9avTzD504XGaZ4yaEKkJR5av82zqxlbtuHO8zGiv6rMoS8ARml4fqr3:XCz9abzS42aBatQZnbxUvIMJ84fM3
- TLSH T1C342D08D848B1BBD9C8081A21FD7568F1FD171514781C76843274F1B521AC8ABFE8A7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 bfc911d188bb4dc9aa98a5ed23c88cbf076b3aac5cadc98d136aecfc88706ea6
- MD5 e90d659f956d6e7d4572ee2ea3c400de
- SHA1 1ed33f0153f275347430c727986f9f2b70c69a14
- SHA512 625e2dad15c024b6498f1d0b63976ff520efdeba0b99aa3eb6cd3cf7124dffead6432f5f098239f33a8b0432ccb41a33c862839696e0d4dc578d6e96aadba096
- SSDEEP 192:mX27SSo2vlw8NySHUYZxfXpVcIt/sL654M7/0ky9PGeRwju35edTkf29ArNjFKvH:lS0K8NySHNxF9sm54O/0ZLRuugdwu+hK
- TLSH T1BD42BF327D9D2BC71AA114F366B36CBD3952C6E08799D241430128F9C208BE8D4A5B57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 f5c0fd4cf1d681ca2f98a62863bf87746980ec2692e5130c3a1e961ec73bf8c2
- MD5 25a44669cedb41be47ddd237c1421b3e
- SHA1 ba3fd34711af881c967a21b9f7c1f99e4553122d
- SHA512 3e47ae30040608f8f76ec0e85f3e8bb98c6bc0853761384abf1f80b3db00f2912745562d5a516a876de1ef4d6ca1d54a3a557b643d2271ad161c60bfbbbe0f41
- SSDEEP 192:7Ch5iNIpESkp8v5spsBlF0rmXIjlY35Sl7SkAsAjX2tv4Pj3oN5VQ2r4Oo4MSEIM:OTiNIpI8vCpsermXIBYrk2z2tgPj4N5W
- TLSH T15242C08B94AC601056EF9B68F59C921B3D922FB3AFC6D0DC21D3FDD51BA00AC05471C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 015af849e5ad6cb362b3501123990145e01118d62ac9fea712ff054c6eb244ba
- MD5 37b1ebb3b220067ac00046a55cdf01b2
- SHA1 55dfe9354961966ac0b0f05187e7cc854fd5abc6
- SHA512 0d241e6013d58cca95087e17fe18d79f092d4266bcecff90aa2f9bb4f1b3ea11d2a5c0cfd6a2c90747c09f46856282aabfb30f16ff3993e4cdb3956c11f4a4d7
- SSDEEP 192:uUkXbpsf8yIXCO3uAwEikneLDr95JTzXKWkN7eYOKPSeK8JwviNaQ48YA1Uh+PXL:2b28Ny2uZLD/ZXW7eaPdK8tNx48Y5hUL
- TLSH T10B42D109B6877E73389F0F4B5BB7AEE0DC149016C9A92719A7376F1965B8304966C0C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 5719a805db927dc9f39bc95e74b1f8bb963fef0336fe2259070615cbabf8e09c
- MD5 4cbbb4107797f5e7adcc0d365b9e7fe1
- SHA1 9cd6b1f3603ef28e9d94432918dd2ee2e4f67504
- SHA512 19209dde1dc95f42166435ad37b6dd004bddda5f97484c985ce36eed23ae253b3345fd3740174b90fd94c8c7cb66f39de2a52865e31f92c7478765d57cc27c27
- SSDEEP 192:ht7ckDVVh3XXZaQkDR8OrcK0jBf6sqxkxMlw3ge70/gqhobbmPq8uTU3K43oTyXM:hB3LJaDR3R0t2kMW3geg0bbmd9R4mAjp
- TLSH T1AA42D0E841752547C0BBF29ADA664DAA232ADC01D3C7461F90FDFC7A7611341F9144EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 8f5649329cf3f8844cf9dbfd31560436deea132e56c3c80e16f3a251459d2c1d
- MD5 6cdb093c8b357708ec6914008668bf06
- SHA1 908f3b5a2eb381f70767f1c7fdf79cd1d5e34d5b
- SHA512 3c9d9a1a0597bc53a44e8e902009d093a5e9119d49771ef8b6dc897b407aeb2b56ebd385fde4d7e1e89b78bf23cfd518ce44f64870bb84d7244167274462a5b1
- SSDEEP 192:NY+49AtCPHzd9nDzB7Xixm6wM4ioldBnZkdKx2VGu37wHWD862xhhtfFbObV7R4a:NYJtzd9nDzBWxxwM4i6dzY42VGIG84nc
- TLSH T1B242CF3B7DCF37296BB7A20590AE007C8BF5F06F8117BD0D94A25A70098AB6F06C4D08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 5b8595196d9cd682974fbc7123667a827afac4cdfbabd794713468ca3700468e
- MD5 21432541b3d39a0227e5752e5a58d765
- SHA1 571640b3397977e49d359e24d34f27bd9a41020d
- SHA512 da18e169ca63bf5a501c6cf5c1c25c931302acf84d85175f7b2bd685164072f1bec3f65469957d6a9dfee0906332ada58a621fc0fca3fa5c9111694a2e072d1d
- SSDEEP 192:pFG/RjVwAwTsdYleF3PZ8rBMr3e1mw4+aniki1Rkv47SQ6tDzhpVt9JvB:pM/nwAPdOS3PZqY3e1mw4+aniki3kaSp
- TLSH T1FF42BFCDB21BC542CE48E389DB6E9BD097CC7E801BA2560C74FA646719342F69A41CF0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 975881cfccc17c885679d21c057eb170d731dde114dad484218e0d0022615c3e
- MD5 ecb1c340e6bbb50941b2b9f767838abb
- SHA1 85a9d168a9d101b8f5439ac917bd5b0df2ea9737
- SHA512 00f2759206d37fd4294b2c86bcd78a362f1e0ce7c8c7413f9cf3bd241fcc3a44b40f2a194b192f614009261ee6d0263c3818ac517a16cd230409d0d92e2c316e
- SSDEEP 192:Serp3TICmM206DXASLcvyntfVXLqY0zH0qA0dSdyE/4HjQJSaQsv/ndNDsyzwyWT:SOlTiMkDQSYvyntR+pzH0qA0I8E/4Hce
- TLSH T1B842D0C808743D1132361D5D80649E1A7FE925FBA30A2BC26F9AB8A0114577B63C575D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 6d1637a7eaa86295e1f86439e6da735495d68574612bcdf8c28215d1773b66c3
- MD5 cafd835a34980fb6478365f3ae3ee606
- SHA1 cecf4f4cfdc3cc9dfd7e5457f3924c7643225f3b
- SHA512 4e7e0624c29efe004cf0aa3f6d32fc48dc5cc32209062a357343c98aac1e76c4735547623d8dcc91a6de064fa9df564f0ba6376390701c6b7637a11aa373e172
- SSDEEP 192:D0yZXpfmPjQPm93h7Ps0KQ+fx+Lj9ee043uIRd/7HWektzZzA/Kh5RF:4yZZerQPG7E0XGoce2IT/SektdzAin
- TLSH T16742C03F2C36A0189AD85643BF112D0553F74F4601BDBE276D02E3AF55A1067F2F49A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 69e34fc9fbea160cd4dae2b46364188e7c033d8ca38525b13fcd2459aa072885
- MD5 b2fa426628494d3717421464247b8358
- SHA1 e6ef03880d0f5ccb483d9b3392b948690d455384
- SHA512 a67e94cf7900fb51a8f708fd7b61127b93e5c3114e04c4da2d5a429c063eddcd2da1861ebcd996c781c818358ce5f391a1f704974a7d352905b962383bb9d4b2
- SSDEEP 192:EZZ32VVFWycvl/UoP46IoiOs/YrRr6dot8GSO0FyiXcsntnG9QnmFuxL0zc3X:O8VFWycvlcogZ5j6r6doiO0FfntaNFuD
- TLSH T1C642CFB01CD8F40C92A36AB34E3A7EDD97A1AC7DB31A3675782545D6B9D010732049D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a8ecc83bcd2426d6932721fe90a30482838423a186ee34a68e92891786e8367e
- MD5 d12c4c5a4e8b5ea455dd540069fa8313
- SHA1 9c53abeefd1fde044ef4b70808e6a1cdef4347cb
- SHA512 7c94bb6434039b3ee1543971ceb2b81d9809ffc7729cc56419c98387e6304af78c0bd4368f72693d78142708ddee7607f919b764efff93a2043ddfbc7d3112ee
- SSDEEP 192:kSoGYwl9Fp0eDuXVxNPT7Ul/eMI/bHBMBDRvYVDZ6kXAmvvSB1QP+OgsKuJ0zXqu:1oGY4Fi0uXVDPvUl/fI/bH8vIhA3eCjd
- TLSH T17342BFF97B93BA62B88F24C9CAB1420F4711BD1CAC2B648E4C4BB659055287B0F905B8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 d01e0ef0deeccb3d2ee8312626b8cf1b5e18047a447f0fb7a24d6eae4a3ce09a
- MD5 bc002e24f07fd02e21ea4397dce89229
- SHA1 4b87d3576813c0ebce3a2eec98886a3f2d5ac345
- SHA512 66e1f231410c4706892d4bcc4efb58b7b5b466012fedaeca2f071148b65b10492ff39c40b1dc0dfa805a55acaedcc466272f6b4af626361df60c8f233dfb2654
- SSDEEP 192:KB18dMGM7OPsWiZ2wcNZSEDJCTVf5edcWdfcPxpsKvr+YupgrmkEFP3T1s4dRZ:KbsNM6EBZ7cawJCRfhWN8sKvjuy65FPd
- TLSH T1B942BE5146ADE030BD1ADAA53D094871BA884A6B0619D541EFA7D0FCC24F2B2ED1C9EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a41194d89234313e36202fa80e6575a8597fe2ef34526cbc85627aab9c6e3df5
- MD5 aa081a3e5b7e458bf66d8f16a6e59c54
- SHA1 910d3c0a60831f29c4eba4681271e7d7f49c9e81
- SHA512 2596e3bf2d720cc77b6c1801b155925ca121a29083e353fd94a831438a508b7d0e4c78936261b08af7c6be95a338451de159389d15f3efbb63089924c130d6e5
- SSDEEP 192:rvA3ofdXY+iei0Vfa0muFMcuQUlW6nXzTNJ3WK6CMjJo+fu7wqJjhvAo5SZvPxxq:TNXfA0rZzBol/6pS+fP8hvjOjZpWf21a
- TLSH T16842C0733D132DD7A139017987AA89F48DF06C7F7BAB21D5428975CB99D0425DF009B4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 5a5e61182798d47ee6e019b2f0264fa5335d7d60e9c04917fdd53d76adddc6b8
- MD5 2c44f6c058dc56d5b428f0d2838c5055
- SHA1 dd669626b01b2896c179fdc6595916f5de980e29
- SHA512 01061c6b2e213e8d9e99430b113f1b78ad6537c94436163a3ab7d4d87f577f2df45534ad8597c3fe9da64711f72fef96e34363503769c579809b8607243e1bec
- SSDEEP 192:nfQklpvFLbgBvziVJnYq7/6AZ0ZapBIxXErf8j8Z4DUO7JmCTBf0EwB60O/bB18U:fQCpvlCEJnz7i00ZapBIx0rmgUUrCTwK
- TLSH T14A42CF555E5572ACB8EC759EDC1A09334B06B01EDE21F6B8143AE4613AE20623D27707
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 d715336e31982a23172d13cbcdfa38e99c94d53c144877657fb574c092eb1463
- MD5 92914ae6495a36b939b13c5e829d9cb0
- SHA1 ac53753862aa6414598ae6c6476a919ab91143ff
- SHA512 469966dfb2ea632f099e5cd3d4388accbab8466cc426a8209458575c18f6f39e9dcafd69eef63c1d854a65bc13bb678f9429787bb1a52b0d981051a61a43ff6c
- SSDEEP 192:mwq9WTuBdZDz/5ZwBHcjxVk5Od+12wl8W75oizdpL9d2XmZhufmgRVRHey0hr:mXWyB5SB8/Bd+nSW2izXLX2XiqmCay0B
- TLSH T1D342D01F314D41269C3C7289D64A74188BB6667847A3385BC0B87A79E92DFC416CEC7B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 959d79f9f4eeb7532ef6f254c045bca86de46fed5b3b41d61fdd1dbd7b37f939
- MD5 c18d29301f3978a3ee831de7990772b1
- SHA1 5d8462f3d79ac9a7507adf9dabe6c7ae19a0ad41
- SHA512 b9053755cff42eed758f876c7c1aaf52136a1a082f77a02746edc023960fa2b2697aebf14aa729866ed3a9f129e7e12b59148a5ac273958f84f5f2cf66576c40
- SSDEEP 192:NBvdKf4y5LgHs+SXXY+/qkB1FUpSHibUNTDgR5uGejcaepmfBe3xWCQ94nJV78B4:NBvEfUHEXXFCO1FUpHiUnuGDTCMRQe8K
- TLSH T1A842BF5C4ABFE51146E7BA48731AC41B8686C940AC8863490F35CFA3189D3DD4ACFBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 12c366f09e4bfcf623563fa12f78bffde19ce8fa7d1b8d6529a7f4bad132c314
- MD5 e06ec624c2310cd3f09b85ab27dcb396
- SHA1 d9a0395b398da64c55866eeb24b2388a18f84c00
- SHA512 43b110b3b55737698c1f080fe75c555bb7120cc67b6eecf0e32e11bfca44c2e4f9423a06f3a370a25498b8ce718374f23634c5f5ec7536cd80ecf6b0e48dcef3
- SSDEEP 192:FQBKqvuHCGuUUsG8xNDqfMGI+iRKuLS9+8AZ77efMl3OqDeJz98OTVIcvIZ:dHYLsGikfHeJZ7qkUR5IAQ
- TLSH T16142B099497B11913BA2F368A0778F9BD38139E4B40CD2112E791FF06BA92FC475D68C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a0586f00d2e7c6bf361552aecccc70801ba30f203c953e08e0b6951b09c7621c
- MD5 b7e0a420700f936216eb7a9cdec03650
- SHA1 5597dc629fcbd2deca12d8cb8de5b6285143417e
- SHA512 1b1bdfb84139dffc22a3b6dcd2fbd29c7177c44a95a8d3ba7f8f159bfd523bc753d9aa869935e0d4fc93a3fed944713f7ed547d2a956fd97005b6820a430b9d3
- SSDEEP 192:0YMNxk9CAWFb183yvfryWyAfbIFOYWhaoZJH5UledgOCQFd0es97l2q3sPyoTuP5:0YMN+CvFZ83yvjbbITWhJZJH5UaRKNZZ
- TLSH T19942D063CC6C1098A673B8537407ACEAD2EF5F48D2C9D44512E2658ECC1DD20E663EE0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 bda9f509deb85728a17220824004fa824f47c3d7c3e2d7da7231761cfd4a1e37
- MD5 0d3ad8510695eeb79f362b243388cbe5
- SHA1 5b262959b79b48e681993e2d16d25462e8223fc0
- SHA512 9153f8e0263866a7ef4273a2902941f30913ea88106400569ba32cfb16665d794c41511859791a0f73bd785ffae052ac31086754013d00f3dc075230113faa20
- SSDEEP 192:ypVw/3A35VNDtMOW+I+ZqIHlGrYcFBzU95mGI6yFEU8/zNZsuGP6Ka4Ppo4B1zA:ypVrxhMOW+I18lKFtUTZI7FEUT6KxPSH
- TLSH T14D42CF48A83C7E4AF045FF55AA1B8F13607086E8E940F6F2F1169122D11CC2D66A2EBC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 7a58f5b9430c8df2b4f9287e3ff78f2212f26cf82d0d83aa56e290ceb3fe7723
- MD5 b16268142a03f1582c24e57516e01a2f
- SHA1 29372fff467ab0870c03121722357665e37ff958
- SHA512 f6235a106b9396385cbc20ac8d1836f7f8a5dcd2566b9064d4b563b6fe5171bec45ae0b1d9d6dd9ac8bfdf976badabdad9a3001df53ab0d9fb026bc82dcdb024
- SSDEEP 192:Ge+hV9ZuchWrTfybnxP7NkN9e7tVYFg19+Q3WFjb/CvktFuullMhwcH7KFHJLuRo:V29Th+kxPmN6GFg19S/88F9dp5luRo
- TLSH T13A42BF5304A97FD9229C2C3EA28F72734463B8CB2CF349B9BD0724791A4AC6329905C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 2f0b090b31f4eef42c2e23e84e727e63e6174292b0d3070eff8ded96aa9da7c1
- MD5 516c3f97a14c079f53c70a8f4ba0da9a
- SHA1 0aea126717a44490147469b42aa481c2b94b160b
- SHA512 4cfd93f69eb65ebb78cace45c3d30a7b74cb5cee86dcde8dbb6c937e38402437767367d3372fc80f136f0128e2fc263d2113417f5e1cb0dfffad861c7ae6eaca
- SSDEEP 192:M2eOW2MI+ouKxAQ7omCmMybsBiy/IqGYAYbW3y+7hhAHsnBolpBzLw5FraHDytMp:xukdu2AQTCmsX/vGQWi+7HobB/wOHDI8
- TLSH T15842C0A54BEA6CE9DE819D4A4518F93F03F8044F7A0D3B25E0D7905C922854E0FB5365
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 611b5ec071ff01164377f10c29d55e2720ec8754c081602bd3b7d22f5bd2f1e8
- MD5 49493bc6d401245c3835680e575d2a51
- SHA1 16e730bd18a477b26eff912d8be8ef01600cfd7e
- SHA512 7d3c15253cfaabdeeeb59e64aa42d597e2b0a0f644df9f5f25250c27e9890ea047c2cdb911b4609c075cb05ffa9223b9295714450cf0e83282a36f51d93d0a86
- SSDEEP 192:aqVvRafJQv0rV0v/PKfZ3DGz4W0aENm4m8UD33ySKBK4jhqRcMYL5NVbOlKG7r:CfSC0XW3kvENm4lUD3ySnCAqM453KlK0
- TLSH T1AE42C0D936E15E7F1B09E21BF8A92C694EB6855ED494DDEEA66003443D8E3634500BF0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 42297f69dd0a721eff8774705ffcbb6ba45e7b96973f354517dc3864c5cba014
- MD5 9e1ea511bef4b1e6afd3268ec4fddf60
- SHA1 aec3d174a57df9a51e79e6433bf9f6ed11021589
- SHA512 1b9fd952bc3e9dd34c7d41ff528095674cdef8c20085bf51e25143a2913ebf1ec794f8368f2093d80e80aac9fe7dadbbd7d16fd71ed0ff019f82ad114bf1ae66
- SSDEEP 192:XBk+H31es/2Crq+hMenPTMcx0WxGxFSVIMGeS1d8DGLZupYs:XGk/JrqcrM9wGe6lLZupYs
- TLSH T1E642DF3A35641121529F62210733FA7F2CA0B8C5F8EC495DC12D41DD8DBE4BAD6C2AB6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 c8730994619c5b28a191d53cedbedb67caba0efcb31ede65389b76f6f8c8fee7
- MD5 d4ebf09d887ed0049471ab8a6e9cf319
- SHA1 4a41b84459cdd5079f50b6ce957672ef8f5f9ed4
- SHA512 e7f424cdef26121dea31a278f407959053b318b7f1f85c39fbccec4ed62618d7cf4737625a29948d2c1c60f31952e40c066b542298175985ff5863d7468c91e2
- SSDEEP 192:fE8cBHUEXFKPIKIFhKF92BbAr6toZI2DZyrjOMpbEg5WAx0Dv92PqIHI8fm54NsW:M8cBHUEVG4hKF9MAUV2wGDlmqIHJNKy1
- TLSH T13842C0E38F363F53ECE4EAEF811ECAB9510C36866E2DB510508B8E791E41B56C316155
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 aac608b5d2487909694422d0b1eabd871bf32d6e9d20e80f64d5a6ffa813abae
- MD5 9f961bfa96c87358ebe74bcf5970a05e
- SHA1 e4c5dd2e6f8cef5033704964a397f4a9b2dfab11
- SHA512 140192275cb732d696e07ccc0235d30a78adaf98e206f674cc37f118daa86b4e3d5febdc358c90f68ab102d7189224a9e37ce44d6e1dd5025c883ff43dd0491c
- SSDEEP 192:FdT5Bvjvg+ny57d/Gv1xWnfcsAJytHPOm0g3vJ49JIPKZHT4Ueu:FdTbvXn2RGNxWJ/tbFmIPqHTh1
- TLSH T1EE42C074F5D843419385CC076003BC534A036D62E8267B3F97F61CBAA6AA8EF6632654
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 d45f23f1081f4ebec8450171f4e1b52feec3b1717d857f1d52457d5c00d8b8c6
- MD5 a32dfd638165e81e0405b47a09448ca0
- SHA1 15a022bd0093008df1cd0ea10cbdc83a2087f187
- SHA512 c4daa6f8ce889191aaa20f500aa97b1fd38f707cc18b867cb6234a4fee2c9093d87c86efba5f84ea78b0409cf5bc42fa8791c3461aae51cefe59e4c22ad9edf6
- SSDEEP 192:kw+LCUao18XDykSDK1cGzDVVXsL8b92GAity/BieG58ijgt6UIEpWw1K2Of5daL1:JZTXOkSDucGzDVhsL8bYSsa8ibQWwLsI
- TLSH T13B42CFCAC2107AB17CF21333530A8CF9BD91E744C57E438715B6E5ED89F80C0561A89E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 e6ee586612587b103e3a0c23abfb343d584482e55c7b6981af8b4111776af756
- MD5 0615c510a9bfbefefaa1711b64a25761
- SHA1 0d582a55f7fbb7f91dd24de0ce6d35f9c9b39574
- SHA512 34ac6e6aa9a46c38821299c9e12c28dce38f6d7cfa9aa94656002de8c60bcd528b04182cbeb95e827e9ce7031553d2706d419396c8e3f071da66bb7b30c46caa
- SSDEEP 192:c7g98izPQp0YBzpDjbhf21He7AlyEmJ9HNCh7l6bn0CKoahXCjSIfkLXtIyxy2fj:2g60PQFfDZ2J/lyEmfN0CLa18SIfkLtH
- TLSH T10842CF18170961014AC2A137757A53DFF86286EF7AF6B239E03FE3364DD22C91968F41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a5b0506be4508c6f77f7c0a0a50d006f930296b2808db38b8395dbe1514e6f00
- MD5 7f9f85d4654ef0ddab0ddc6c5544ebe2
- SHA1 5ad339230d69501b24be6d03ab4fdfc6a7604f09
- SHA512 3b52d3b9223548445de4425827fa4fbc596f940c24f7a20e21af0da9919713aba2b6f7198b3cfd02a2147b93d6d77862fdfe4b942045aaf508a00603d389c058
- SSDEEP 192:e1yQkmFGrMRSzFbb5tIeXo1pffXp7FfXUzQa5J4igWbNcR72o:e1p9tOFzIeXo1dXhFfkB/C2o
- TLSH T18E42CF16536994D9CE9BC9402B1BFA1799808EA7C2C740CC4C2F21EB9DE372507CA5ED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 30eddadfd66840558ee914f227db1d48671898ebcc91e13a6d8756a7125f3c88
- MD5 ec9e53cef7831e1cedf2d36fed02e55e
- SHA1 241d7b87620052b4dd7b97805364a35d0afa2af8
- SHA512 5b3295f68aea988e616493b3f24e407f6888390789fddf747f81781589e9c9a46211f0943baed1c3b7e37b8ad733bc14ccdba431d849fae1d0638ca30316d339
- SSDEEP 192:F8cmHcBolMFpEARa5J47eAPfgdKWysqGrGMpFIqcfd/T57mWPZi/Wg:F8c6MFpEARacqAP0t9GzRdF7mWPZsz
- TLSH T1C842B0095CD5B397CE636FD602820FDEABA4F50B230D47D90A86D8D77BDA42C3254B19
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 cd0fc0c6f62543bd7f63d6febe766541ac8dffe19bbda405bbe61ed7bc7c0630
- MD5 1d32adb90f960cdbcb5b2c8c1d9f7a35
- SHA1 9935c5a6b5d7f69205331637cfc59eaf203208cc
- SHA512 c0e86a895d9e20465d96cf48a969ab7596bb3ef6832b8343360095f8bc92bf351cf0dff7cf3249d169d1e5f83627c3315495c3923db72eaaeea165bfbe945ba9
- SSDEEP 192:LipkmqK4MvifKkKDOJjAaydJoed1rENjEnOnw8VahuuN95dkEqmOjtOEfQEFLsaN:mpBlOfWXaaJR1Yhw8chuI9jkE2L5GaCs
- TLSH T1E842C14D4294D231830973895FBBBCFF96D100F619A1B6BD757AA6F0281940B0B8EF12
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 845323675b1279ff03d6c084616b57faeeb6174f88160fad33e04275d98f3b02
- MD5 787577aa43aae9532366ff32c2de9ae2
- SHA1 bfb4064816dce3ce291c0533781edea3c48dfb94
- SHA512 e589269b93c56d0387f224c198f11c666b3f21a453415ceb0ea6558396d8b8d43223d9520157d7c25ae14a9a1669b044af0660f0e3d70e7dc809f94b8a7ddd23
- SSDEEP 192:8NAXptnkEQaOinkwUzeWdceSSr3ULz0Aa6RZVk64VlR+CH8JMls6e8l:8NAZt5Oi7Vep3GXV/uVlRX8JMN9l
- TLSH T13C42B0D8B59951933F9F05E6B26F26B7F583291AD3CB923349440C2A1F1D18C1D87CAD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 2c8ed8c7beb5b4d0964b0299be3720b83bbfd7374c116e296481105065230e0f
- MD5 491ad35c4efd309d068814ec8b09d45f
- SHA1 84f07828f2aea8020d8a8252f52d45423f50fbe5
- SHA512 307558683ee5e843540a2ab1f8a605fd6d658cea9d8479aa7d0f6634db9aefe9ca7f6f2c7731bfc17635e14601fa47dfff8eb75982baffb5f47cef7688f60479
- SSDEEP 192:fInI6bZ+8yH+OuGgxyUjGhxSV6NaHR52EmkBwUeAkdMq6nqt8PiYUFqwIh:f5AsXMJGhu0aHCEmWwiqt8SO
- TLSH T1A242E0B1E6644281078C1173F60925C4230C7CF4A91ABEBD03CDDA7850FA1783EA8B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 03f1f2d46e55cc17371e72354620efad54961e7ab475292b3eaf0f2937084dca
- MD5 f82eaf9b35dbfd9197ae6f5a305e4fdb
- SHA1 22cc6edaccc4652255b5762c7284b9b7fc285875
- SHA512 bbcdac1fc1d435acfec5796963af3f84f2daa4e8496481391162e399505ac6f5bf6d32ef20324a3df9cd9a6dc7dc2d154f5d852358c9813a2a3ec3c0ec0c122e
- SSDEEP 192:3MtyREuBQzN72uJ6YA/q0znu9iF7uh8h1z2Tv2d0p/F56Bg3FXHf4UjBayyvCI:86TQzN6c0C9iAhEb456OVw/TKI
- TLSH T17E42D0A4812EF297501A3BE4509C872264DF225729D33374675CFCBC384C99FAF2D29A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 3ea02ca3c204c07eb02f7eb7bacb2f870bdf8ee766930a518ef5a84bf66a594c
- MD5 86b27531651544c221a6864f6ae55a63
- SHA1 58ae26f2c809f8fb53578ae0a2ea754bb2d66954
- SHA512 83cf8551b2d4dc14dae6841b140d380bb948a3466b7569eb7cadcbc8e158a52e5d01909ed469fab57a8186dea55f7a00e969fe8d8ae0862c955a808b92afac67
- SSDEEP 192:b6SZDbHvd1SQ/ciyPkfJE06PvecYfSApn8TsNgyqOjptdWbTHcTDK75pkwBb2g:b6KD10YyMUclKTs2lOjptdIT8DK7fFZD
- TLSH T18F42BF7A93C1911752DAD0168A231C5B6F8D43FBCE79E50A23C913FC0DCBA54B26A9A1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 b44b89a341b99aa6b1f70d25210601fef967d0df00ca597e5cb7f61e2edb2e02
- MD5 5aed182deaab1e7349b8adda281f3c9c
- SHA1 732e19efe284237587f6cbbdf78dbc48dd56777a
- SHA512 1777583f77fe68511b5495666149fabce32a9b632d8fae801fec36ad3f37f95c25a28fbcb431a270733e6c1467879aa127dec04ee02f8eda0d2b7c4f19d07161
- SSDEEP 192:KgYkCsvjlDI0DrRBLvmft/CxdCvLc9a+lNk1/Xx5Bjt9l09D2+VeAm2g+ltY+fzi:luMjlTpBbmft/6dCvg5le/L70neAm2Ze
- TLSH T11642CF74895F89CA91D7FD2483CB3AAC4565816FE20650962ABD6D80ED8337A8F37402
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 5cd23d334888bd7215599527d6d8a3949d8126104a71390fcc9b0b0fdf12a85d
- MD5 9decfe97821f02e7b420dd5b5427e5fc
- SHA1 ddc4a06bc02b4ebf8efb0169dbb8c2417f20c03c
- SHA512 1464e15961c363f02fce39e03f3c4984c297a0dc21fb560da9f1345284191f5144da1c8567df80bcad6d3051954ab4874db5631a06760d9ce6c60d7ca4c807af
- SSDEEP 192:ywYf1euAnMU3x8EZlHAHO9+qBPNAZX0yh1W0JVS9DnpTmw/UI9gxXPSH:2deDP+EZlHAH47uZEebynpTMk4Pu
- TLSH T12042D090E58E93DBD4C787DC0CA485CB78A9AAAD34070F7E60251F1179BCAD1B6029E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 ca61c230b0841ee942fc223d4440a415d4bcb2229251262b6649b7c6ccdc14f8
- MD5 f1474e94f8fa89fc34c86d7465b87236
- SHA1 19fdaabf50dbcaab3e904b512319c7ba4686a9cc
- SHA512 5731876c5e1f9bfe1967604d98bd23167e3ff75a9d3d211dc378051731f1ef6f16976591377686f838e8bd5891ed5109937adaf7ce9ce856f04412588c1960ac
- SSDEEP 192:qNC7Xz+3AFJ9HMsT+qnRyRbTEa7JcdvXqDBr9xtrRKEdMwqrAyvjCJzhUWLjr:qNCrzqAr9T++G3lGdvXsBRrlM5rRCJl
- TLSH T10C42A03B2FCF6861BB187D489766835374D2720AB283812DC8BF154B0E5917F57E09D0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 ed63c4bfd11e07298c8c87dac46b6471ff54ff54f73240bbf53b3dd8179eb7c7
- MD5 f3bcc5dfc1119158bd0c7ea596f95aaf
- SHA1 3b3c40722234e9c080508d0f690873450731475b
- SHA512 256cb314d98cfaba85e962499f80017852f09b50aeb170ae3d9cdc3bd85dd819aeb5e1d959e659cdddc321ca23700bd1929c5a963cca5cfb61105a8563d78c95
- SSDEEP 192:kRcuLye/eAFOF8qviOw+A7WXmpenIzmlREOuSU598ldo7LniLCu1ZIazgh6xtZ8j:TuLye/eAYWO3XmpenISFuSU598vo7EtE
- TLSH T19942BFD909EA3956E1EBF1E63887BC644C63C3A44301DC7B476BA155B012F3E8263E42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 1b59edf9804de0375d2b0b7e5fa102dd19c3efcd25061a0c5b428e7faa7120c7
- MD5 7c5eac935c0db3161a3f13a3cea42adb
- SHA1 b27a64fb83393bc62f407df0468dc28f3b873027
- SHA512 5a031638f5527bab6173e90f931bc86de5b23df5b5b81fb228eb5b2dced72153ef581f59e7787401824aef3f2d9fb6f7bcb8596baf3a98889433331a9d0991d0
- SSDEEP 192:UVzrGo7k37gxfm6qNcy1oUnf4Va3u6dGu6uLJvunoI+R2XOBo5wD4I08l/Y/9ftX:U8o7CgNvAf5LdfZd1R2go45l/Y/91QNw
- TLSH T12B42C06C0183A35732B88C0B468E6CE8A71587F346AD1AFF505A4C764EF949C2F323D1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 907388db3706178667216f9fd01af533262d50799fce244b37683ff51ab2a689
- MD5 b975278438fadd08f03b9d58baf7edcc
- SHA1 b77682f5da78ef8ae50e89417cb35b9bbd44e5f8
- SHA512 509648e03f44eb04e413b24a9f668d9a5271c254301f0b2c0be172f6fabad332cc3ea01bc5089b5008b43d16875ba5f1c854a566a917d44d8996046bc9d64da1
- SSDEEP 192:POjYG1Y26wu9SqOvpwoCoe9wwkY28O70+QDlqs3knD1+7l7JqfsxXINWED/QcVTM:POMkzNStLcuwR8h+MlqsX7JJmOXevn89
- TLSH T10042D1EE467F577BD6F85A73B7370F8BFCD00319292DA87C0501552882419665F264D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 d2a875923aa9e3a3a4360358519c56814f9b291b6fa0ae1ca3f599334eea3467
- MD5 14a9c408b42f1da1532d87058d6dc0e1
- SHA1 aacfa6ebb5fbbc1660dea1932c3cfc90026e0a5c
- SHA512 019f54bfdb9d14584b46c0707166abd64adcc9546e27e8e88f44c94f02e339a204992ddb9cf09645226ce0d7948e9bb969328511377b0cd250afdfffeb8a3005
- SSDEEP 192:kOWbhQwzcFjDRDYtyfuYdnWDsX1iusroGgeTQJ4Ai3XoA+ju3Zwjbw+IeQjB7KT:kOshelDYtyfnnX1oXoFUZwPw+deeT
- TLSH T1C842CF1041CD2F95CE1580D46278737848DBBCE66853F439BDB98523BDEEB640A6318D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 b7ee0c8ba5d784388b7501dfc8601ffe9dcfdddb8752836d6590cf8c9ac9c0ab
- MD5 c3f45cd69d58ed74f38bd774ef9c2371
- SHA1 ae592c1053152ffd334ca02b6e5911fb09cff220
- SHA512 4bd10bdd46492c6b5c6313917945a9377fc2bdd789c1a9023503cd3c71692ed94df6a852308c0e8197dfe12b2788940bf2a58b7aa43d17eac765414c9e2bec13
- SSDEEP 192:LSa7zE7jUpccCl6g+zYtYUgn9GGXoZqVsspt57cenupl7CpYI1nP+kuL6/qw8G2D:v7QHJc9g+stVSg2Vsspt57crpNInP+kY
- TLSH T14042C04FC292F95B7A3D9A04E8C52C32596101574CB229DF74317F89CAA2A626E63D05
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 91126a7d39831d3f62bd043f4519977395152c0d1e1c56b21ad913a15ef1da1e
- MD5 8fd98febf3a5b279a2117f02775b3161
- SHA1 01fa191d325dd1b9a3ca3143faef761af18e6a98
- SHA512 313f1d6ac902c65a5b98e3da023b601a1a70dec0d3f05b484d387ce14390ec2f731af11172e76f8cb0fd29eb7b9039204e4c33941e8fa75d54d7033f4e7ca5f5
- SSDEEP 192:KMOwkldb+npv+3NCItKGpv2MOzdQOtBhgC2aT0vLiefMEcx0mi9hgzkz1b1ExbYh:Kjl1+nB+3Nn4q2NtJavLNfM5i+W1pdkw
- TLSH T17C42BF254C77F059B0F229D9B8E7E9A1C28092022D327BFF1938BE98478CADD257D457
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 224f230be2c1108c3a8df25c9a0df07ac8faea7006b93b79c71237ffabc04e7b
- MD5 4da584e29d34e63d8ecbbfd7e73750e4
- SHA1 591671742b1d99920f9f3fe5ee7cfedfe3479f7b
- SHA512 2821d7f2fda452ce11684d0cc3990af912dfe33a3f7d9c9cdea8b047afb12a5bf85b83fe8341883196e650441c8dd1c8d17bfe08c7cce14824c47cffdd6c2e8f
- SSDEEP 192:il1ODVri03iRndhKIWgFBDNZBae5+0h4Tmy3VT/ZrFGDhUv53CyWO4RuteJjpxAG:iPODRPQz3UeGmy7hGa5jWDrxAE22Tr
- TLSH T11D42CF5EA8EA299378E848414ECE0245C54D5F04DA99CF2CBDED3EA23A1D328DD11D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 e0ff5787474d7d61f10ea24ff5ab9b6e2a5f292d0a9c9a77d998e698eea6a5db
- MD5 2152d37b0c02f54039039b06f3570fc0
- SHA1 fb31172137332463e9a8658506f852720ffcff13
- SHA512 ef8e256e9ee54e72a401bd6b0539f2e4b87fd8cf950e92dce197e344a2d52b9ea09cfb1f060554364cb85391379fe2d9470b087d2c6a53240f02b70197e90023
- SSDEEP 192:6f50nM4yzsH3bnj2e1iGxhjgCUyy2HArZb0Ffd3hlz9hvOaqq+jEdICYyrklxKSd:6htzsXPn1iGxhUwy2gVb0FFTphvZqNx/
- TLSH T15D42C07E1C854B39D7AAF054EC684F8A0FA121153593B861DBA201FBC2F5AFB1270CE5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 93bf2a7d20bdc691353d8a69c3f0f312b940bad5a1c9613cb6bee6e7f6e5c454
- MD5 bde42d3f98ca6d2d64052c73c5fb9778
- SHA1 1044e1692788f05dc265fb83d2f96df4fa0854b4
- SHA512 9889701bdca21278a46e715d345404b76b2f6a672352481c3db1022dd254b15add5f1b7623198a3400c9e7e1243e1d1f9da530c766191fd0cdc73f6ebbdc5e47
- SSDEEP 192:o4ZVEkGA6h5f84Btz34WLk95Lz7S086+93uKrYasnMo+UOar48nC7mLzVbu:o4Z/GAa86tzm57SnYaUl+ni5eazVy
- TLSH T16F42C061A9E73AB5FE04417D5644DB2356B6343704B17ED2972CC623641FA2A2D21F81
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 0debcb69d0205f2e6bfbe25930688c388ac8bcaed45cfa45ffc1069d0b73b042
- MD5 b98a121f2d9611bb40d93c494e47c266
- SHA1 415069e04b2e7124c106349fc76adb3bf24f853f
- SHA512 99cdf075802c2343955e04bd298f2cb0cf1d5abdf4c3f36a4cb13802ff86446fcb83118bdf15e3a6c152182dbdbecb4226887e482086e9d05f5f1ec5f5336f47
- SSDEEP 192:YklUbDtVupYYuncVXMVpf655r8lu8CgFrZZxebExGCbfe1yyOPIrC/QPO:YkOnOp3uc9Mb0Iu8ZrAQjWyymIrz2
- TLSH T12E42C0859C77C999C9821F3C4D6ADF292041D61B01E4B11273D2BAE450F16F948DB79B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a569e5633c307b4a0e5052ad6e815e6b3f4ce44276a83d5819b4a475721eb4d5
- MD5 8f1aa03440e7e53c9b97ce78823a9b7b
- SHA1 d57f69685290d183fbd4dfdaca0b3b8424850677
- SHA512 6f9f014edbc92ecd466c658d899888e16eef67408b0418d710113358882ace97d2c384a625281dce9fdc0ece53a86b4f45c253bc354c06e919cd934d447c19ca
- SSDEEP 192:/OOFt3eu43JPrRTmdPSrkjV2fblNcS2t1UGW0oP41kceL/FmedionF2mZm+qDg/Z:/rHu/3JTRKlc5aSzGWRAcJoCZrVIQ
- TLSH T16942B04FCB9F0D4B5FD08EFBA7FAB1396C109B169A0E044E5005F501E1CA4B679A9998
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 40dc3056913e1ea09a6f497c521c27220fc6ccb54a8dc33df7454af0f49ffe44
- MD5 d81561501e93d0f417a1d02ab6b58b8d
- SHA1 b4412493e875c385cf4fd3f1999f4c1958a8e3f7
- SHA512 16966b38afe14e493f57a7a3548073b9b0bcf61e57b210f628e220174046cf5b24af6fe5e526be7f69346a0ab871cdd0969abb2bca22fec1d93b25b6679cfa69
- SSDEEP 192:62AuR09dZtPfC6BlfyTVqmfK6Z2WTd8V9Pz6c+SDEY9EEr81/JOgGomjyuBY/jMu:wui9NPfXzfy5KjV9Pz6crz9Prykgw0Mu
- TLSH T18642C0DAED24E557329104F18A6AEF336860BB96D3ED319D450A272236C35F53532831
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 df2921fb7f104e2b03a727d1734e8373eb41178785f405811e1fa4f0d5dde840
- MD5 f8de2399cf62f4eda6d7a2006ef38006
- SHA1 14651ac86e4e4e0e16502dcff51369898b2ca4a3
- SHA512 d7693c021751a4d779aa34387a87264d24ca7d4fde6162ed17b325dbc90bd2257248f5a373b5ad564a232c29a826437063ffce13e90103970311546b871b147a
- SSDEEP 192:sw7XIc71EYkKM6DwpCq8B3FKZjLeMVGQphM1572XgQItImem5slJiC05Tq:su4cJtMjpZiKZjLtAQphMrKXgDsmKJiI
- TLSH T1E042C0A5CC0B705ADDD2A6EA47AD481C0A72B20CCF25EF5B7B718C0A945C78481F6C1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 bdd7a73e7713b2cd7d67537954c9e24b936454163024bb0f664eff8ba2d1e5ff
- MD5 d8f6baef99e847bec7ce08df97813a74
- SHA1 e35035046d3d72ff762e7d2d8a273125fc6d4564
- SHA512 5cacce411631977f056175a4e036efa0ee24315d8e46c4a61424a2c8249ea66fc77e9055e5cfd6628b4b1ffe0e96dfe3c765734e7230ef9a67822412688711e8
- SSDEEP 192:zpM544GJp5PIu1HTDRvjLctufa1iu8x6QgkhhwzugDsfqVQw2dxub7yEDpr:zpMoTzlTlv3cUfa1Q6fkLwygDsCQdxuB
- TLSH T18242CFEE82C1463A41B31F63210E3343F2568A6D0CBCA6140477DB119AFF8C99331666
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 021dcce5bef7f287a5207bdbfa9c230b95756c1cafa09f51c5e7c72e1c6350f2
- MD5 cd787ac73ab7fa774fb4746a72c64736
- SHA1 496fb955ea11fbc07bbd9e62444a987135c83b2e
- SHA512 c2ce3c78332865c677708387b99282fe4bb14a353cffc35ef0d16e73f474c42fe9e79232e81e8a241b24ed63ea02dda1e11c2c3b5a69883620e5548c2aad314b
- SSDEEP 192:E1eE0ybaF9K7nm3UASYfHdJcBfUbktiOQVM34WZaO4MAV4iJuctn2zDUopRqc3pp:E10y+KSR17cCbk43M34WZaO4MAVIcEnn
- TLSH T1B542B016D483FAC71FA36B527E8101E31A9BAADC4B254CD12AD82507C781CD8A95D272
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 efca76320f078ed3d11df4b1e3dd0c8e3733b715ee6b75b582b2da3ccb6c4cbe
- MD5 9441b150c53fe05e106e0de658723477
- SHA1 79975d641c4087a86694b4982d34db5a4ed89b6f
- SHA512 d79c8555e5092d31247ee14a533c521e1826cdf4603f6a06dd60b079eb9e7c8e65eca10e454a31fd8ada841043bec36f64b2994f3aea014a387f7a6a45989c13
- SSDEEP 192:2ujKbBDYWh4PoYDEui0pp+uGdPn1mWeBxASR6H89iWyGVJ1aZl6wl7EV:2xNDYWh4PfDEui0pjGhn4WezfRC89xJ1
- TLSH T12042C0BD11C78E721AE95B0CFD9E3A19CA44883D9C1645571EBCFDDDA09014B203C9B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 5e32c701fbb5c15e81d7163ff27b6bc9006097c29eac65f511a7c3dbb139f78c
- MD5 e89c03fe636583632e36f4f5ca964f9a
- SHA1 b3623576723761983c41cbb4c618973db0aab823
- SHA512 3ae8f3dd36f15ac2d1a75423f0158f42cf770a5d2c92279395f3d8b859a0d85348a5175600884dd11caa7dc415df2711ee70c3e0f750e7b223d829b7b4324730
- SSDEEP 192:JsH0INmUw2uAcnRAOrtIKmnrvDwLH7Pc71GAuHLtu4EiTO5PMVmJq+3QwfWsmC:JdINmUtJcnRr/YepBA5PMVslYC
- TLSH T12F42D00DC34D5B829EBCD2F2ED6580AEDCF23566332C714BD6900E75A980C40B2607A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 c5574f8815248fb26c276d5d769d61ba69a055c8bc344f8f91e46e5d5d93e97e
- MD5 5aca53371e6fdf73359dc7e6fde6d729
- SHA1 86087c756d41fac82c48b5bfdc104439a8a0c8a2
- SHA512 e8cb684f86da3ed8bca33090863466779501623d5bfb16aa966a3f65fa21ee464c340a44ea0fddb2a24eb527226f022f60f63f04a271661d52a41353de394943
- SSDEEP 192:SWUqpvcxP6VzLk7cXIyDXeW4mO2RFCBJ9GX4CTu3MVYmr8589WbVSmiyT:Gqp5PRDMrlCQMrk5VJ
- TLSH T11F42BFC6F3CF0F024934BA24147B3867D76D02C966A4D7CD8B1F258AE9D486559F4E82
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 f9edcd9e40eeae1bfa49be2d5d0a49af5975a1568aa725679bbc213c881e2fa5
- MD5 0f7e8d3864cd8f83838938498c61baf7
- SHA1 4f82b1d2f3e20f01d42928bbe27c3b3ee75b68d7
- SHA512 26c32653b0204484a1366fd6c4439b639624b1e8238e76620dc20eb2bd386a6b3f4003af5a1866b4080c40ce6f5fefbaac0636f9609f1ffbf1abb8968d2f21ac
- SSDEEP 192:cCnoNsJN4aVH5IYEIEMwAJCKMSrW80QvsL1iXMiiPvDzdmjCA5tUVSItGJgGo3K:lnoN66Q5tEIEKHW2vKtmBVItGJgGMK
- TLSH T19942D04E32F5C9602B61B7C09A5F15796CD53509080861AFF729B074AD34EC2C9ADA73
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 2c653cef0487f6c94625fdf36d8efbcd13ea2b3d9b215392431d051db938e273
- MD5 f44f10ddbb65efc5c01c30d83c1576ff
- SHA1 e24cb4e590af89654dc2f7795b8d672ea5f72e0f
- SHA512 1766c031a55d085e925ded3fd43233bc7ac2bfae3d7179bea3e6a52aa8f1439825ca61a363a62f7f41b53cf540f5104d155658a5efaf282b55d5af4b1606d8d8
- SSDEEP 192:PaFYw1mjsPyWCvtQPf8smZwNREKu/vDaAZ7EeELYF3Hn2FL8Oq0siSGbV:MR1+y0QPf8PMREl/vuAZdlHn2FL8O/zV
- TLSH T1C842C0A7C4ED713D1E1C732835C001579398B75ECC076175AF86CBC9AA9ECC90A8C47A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 e1eec4d87d3cda08fa0fc485c3d91f42ad1356e9b4cc2ecf65caf21d06b9ff7c
- MD5 521cfb32f79be6ea90194b3ae0bf5516
- SHA1 532adf1596ff9fdeebc07db1a6562de9218e6cc6
- SHA512 8b5dc857950fa64b311d191184232bbd5bb0dcbbab3796c4d1e52725e9eb55e5e74e33b0a6ec44725e9c078e8a226c0a0dd2d53fdb1f40a20840e009c650dea7
- SSDEEP 192:1Ghn6NQiKKZjY+zSbBFGZ4+Bw8N+cckT2k97xdsOLt8mJnqAAB0xNt8wn/f3e:1emQW5YUSbPGZ4GGcXX7XZtsOtX3e
- TLSH T1BA42BFC9C5F5A84D6B16A3180861C03BA216F1356541A62921BCA47CDEECC01EAFFDEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a7cc1502a9c3fb8833315f553b2ede2143e3e816939453ddc511cb5f7d62c286
- MD5 580f33efa1139eda85bbd1c79eb03860
- SHA1 a1625b4d99cc7fc339b1ffb7b12f5c0d5bd5c0b4
- SHA512 b045e973691712d48183ae655982a37d730f49064ed97f477bff65ca64fc41018d4ece096359cd668a76cc4c7b254d49bc0cb9ff8b225720838d0f8948f25538
- SSDEEP 192:S1rMGlaDq5skVE5AeQxerMpqc3W9EgdhbFKcYm+SGbHkd2vucQFwrUu0p8aHTW:WwGlaDq5sV3Qxlpqc30n5KbgGbHlnr5h
- TLSH T17442BFD9A30CC516AFEEC96B05985A3F46A0233DF6F977CD52495709363C1580DEC22E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 6ab9a0ee0d431e570dc04d13dd10c6c674d42c9639f5d2a82222507fd25b62a5
- MD5 7b45035704ed8a60a70b7f3198d8942c
- SHA1 098699fbba278ba9cf476f564a3c2d2aee194a29
- SHA512 1e3d873e58c554abef372029f9dab96feccb52b191ce67433daad5405dd3bd1c74ef387c4f2ccd709541e2b73c9135807775f4a65718380a04329d7e5d5385fb
- SSDEEP 192:dJ5hmZAl88JKKWeQYF1D0xC427XvC4iBNzP4fJpwECUwIXgDElsORkf7zbmC+lq:5QaamMeQYDAxQ7qZnsw9IXgEenf7Wng
- TLSH T15F42C0A287BF1793DCFC5B98A03CE057350875D183F10A5D6818821A3B63A18DE0E3BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 b19b2d28ba0cb57aa9bf2e5130bad099de0b8f4fe7296769cfe8bdf6c83f2b52
- MD5 d0efce79cc94b128f90ea0e74137cfda
- SHA1 9e05cdc3c7b8a6931c4cbf8d9f63ff22c0b6bf7b
- SHA512 d995f313f754eb1bf797e3059074a0fe21eee1e860cad86ce2e5132ba071ac1e1997832fbfef242e2f0b74a42d1a3431e50cf767d39b72611dfb3df04406f318
- SSDEEP 192:QOC5dvhN9MU5mdY20KES1XVuFhFLxkSdWuJZcw98qYFmqIbIP33UXiV+lgHj5HOO:Q7v1YFXVuFvxd5ZcweqYFt6IESVdj5uO
- TLSH T1FD42CF065B574C13261F0ACF90F3355DC4BD807B10B68BAE6251FF675363E254A28BA8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 3e9ebf1172466e4d3e703f876b338f7a001ecaf2ba43d7c4d9fdde90f746f80b
- MD5 41164b137ad64a3fc76588e16671273d
- SHA1 402b7c55b019b65a315a277afeaa96d0701e121c
- SHA512 881dfbe8d028c2cc8566a3f44e2181a39a8ebb503d8f52b232fae5c3ba2e0a779cf637536bd5ee7f83edfcf6195cb30f5c9fc27c8a357f07c07300ca973e537d
- SSDEEP 192:ZDkiRlGQey2KG6D6NN+CWxNoLRPIBDp+IYJamYneUC8IZ4/8Gfai6FzkXbRR2ZW3:hZGWw62FI4/IIO/Ja3k/L
- TLSH T11042BF62F055E03949DB2609EE2F505E23C9980585C6F491277CBBA74C73FB03ABA095
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 bbdeb06c08c38060a4b8d58edcf7b1ff5f4c381d094e959db07385aa203a6f72
- MD5 8bc5c7d8bfb8610acf4303918ca78677
- SHA1 d0738c5e6c85a4d6bca3d03d0611280c29ec8c54
- SHA512 ef2c402728f4466cee94ef7f0a8451e26a734f7f1ab63879512acdc5b99cc09250d9233797f4d060e22bf2e5170b5be900afab3b946583bcd416b7b257d7006d
- SSDEEP 192:bVtPShL47jBRnQAk+0mSOUGw6ULfsiDvV/mVWmEhwSsYoL1Mj9Z3VlXkjfmf+ejk:bvPSJ47XnQA10LlBDvV+WmWwSsT2BZHE
- TLSH T1F142C09ECB50CEC1035FDEB3D7B81A94632B75A5097020CDE76B81A94649C6C64CEB72
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 18cf7fc799e59368fee63d3e1929cba4d38b05eb78d41db51174183b82a8b151
- MD5 b3cff39adaacdb247e7fe9da34131803
- SHA1 bd82f768e617c2b95877d96b3aa17c29399df17d
- SHA512 2ab6d6251d1bba415bfc00f0da079e65a52ebb78db4153e51e8fd0708ac04a7502c7ce5c367d545d3d9e0e2b874898e432d8af16dae4e359178c81834485313c
- SSDEEP 192:K3QWe3I+8O0f+5F677FAvxcdA0wZQp+IKAn/iv0jRCeqMk1l3aiCzbs1BAtVrZfr:KgWe3I+1L6772pgwZQ/68j0H2lbcOdZ5
- TLSH T1AE42CF70E3579BBC5A12002E1810A6BE92B9E1AF16F3474C51EABB3196CE038F94171B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 69d979aeb9b1376f206afb09e86f4dc3ff0febd15da89b06ec920013e60b45ed
- MD5 401842cb5a886b4e5cbdd3a876676a9e
- SHA1 b4ecf7f1421162048942be7b75588c5701d7c8cb
- SHA512 01971eec45c54c7c4fd104f4e860e925a95959bfa79793338dde82253f4ecf4baa598964612c78c09db815d853db1ca8535dfb5125818b13031cfec19e3022d2
- SSDEEP 192:cM3HRMbCee3QSv474K6J6kLX+UGXTy3JbXx/rBj2GoDRgx2KI/QkZZN6c:cM3Hybhg4xOBLXQTy5bh1VoFMt0Q8Zsc
- TLSH T17A42C0CC3BDAB351C5E49937A217B954D1A430B83170B48837277AAB2640F1E5CAA397
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 7c6cf0c02741903817feb668a52dc557b06b468d8f9f7c81769b2c43eb512d42
- MD5 c65d7fd41ab3a72f9a6bc4aded62b2ed
- SHA1 c2209f1e4023182de6ed5639c54fafbbf91ba946
- SHA512 0c0acb2321cb4c47d6f525415fd828dfb08e4312cc2c18d2224e8295893b20b53802427af20ebca5b0d5a803d901179141baf3680e10e0f6b3353828d4c71e87
- SSDEEP 192:0/teUMYCy8YSAgqWClp3equivRWa6Zqwj2TBoudzVMkP7LMtufZunymaqrWoVU7H:0g28NAgqJp3nvyZq+2TiuJVMkPfMQ2PQ
- TLSH T12E42BF69768E454BFEB9D086EBA5C0B6B6835535C183C7A3887F011C8B02452BE8F576
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 a9a0916fda8223ce5f635298ff86cacc7a9e0072949a0eb59f34a9aad2686482
- MD5 52c466b7f44d23081c5b21e707871870
- SHA1 f963ff72fb300818fd8dec763fde91f8e941fae1
- SHA512 19a2727120d0b3f8776d0a26467f59a1403d01f1aeb33d4fec030bad865263ad6ad52053b81d120bfe79589a8ebb2f2bb9684b236691591d365e3131046d3894
- SSDEEP 192:Z0U9Mn9RNTHEkkDb9fFd+iFCaEsjj4UEWFhwugk7gESv17twOHwjh2ZG1AWaXM:Z0b1jkV7+iFC9mRFhwBkEEMumwjl1hac
- TLSH T10242C06A90603F3E8B4D899D0F0662C3E49A6CDB3CE7063EA771A74005894560F1E666
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\StatsSessions\session_469b95b8-0b3d-4414-aac0-458fa52ad033.raw
- Size 11KB
- SHA256 496cce1feee6d84344b1ab189365880a80db10ce9d3d204486185f0f3ed68094
- MD5 400d90b432c5d2c28418eb212a063058
- SHA1 2b630539a8c8d2b6286aacaeb982a2741d541a02
- SHA512 0edd95c9440b951e3f495754f5c0dc22da22b5f4852d41d2225aeeb8f41860d1fdd38fbefdaa427f8a212589d31ac000b206fd6840ca83d4fe5803a7dacf8f1b
- SSDEEP 192:rRz10SVrzGeizSLmXVDYFfJLa4m1r+2vqSeSmk6WhBDRvZqZAMnWicxi09Aj9I5g:rJ1JkDYF+tje8huA1iuiHj9EyJAPI
- TLSH T1DC42CF00C313459F52F99478E2930AD6C21285B3C54BC8C869ACB5DE71766A7BBA91D2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\Sync Data\LevelDB\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\a3548ee4-0798-4560-bb4d-87e9844c35f4.tmp
- Size 12KB
- SHA256 8429048d02b50d157b932bbd4e4a0d95ffc8e84ab744ae48b04379b180131c4a
- MD5 523bd8a623b2b8a106bd95892f5508bf
- SHA1 cfde4c83318617ac296424a299105aec4885eb73
- SHA512 1f2e76ab00955672a46afb7a39fee029a8a4444e559bc4deffa0040b837c9383b6f2c0951a4bc086c8f49a41d3c919b19fce3604585063c5e4768170aceae6c0
- SSDEEP 192:0auuBlS36VtjOrOCeAYzJ95XMWFXrUITJle7Rbv2ywrRXRH4Nk4b+WNLKhBVysw4:0aucXctT1NP7cUi
- TLSH T19442555A58202DBA0AC68632F614BF57F3F51120A1666EE5B7F9882C11CB2CE2113DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\e5b51d51-1dac-4758-8778-9603f83ce010.tmp
- Size 86KB
- SHA256 92be337ad50e1a86a3a95b259f1a477c1079bd2a3f5c929179acc9cc1ab472ed
- MD5 e5b8a3723599c03aa38b941079b9ac1c
- SHA1 c50f45f350c67c4ecea61da72ea571c31e7ac0db
- SHA512 62c6950a87a3a2a56ccf7bb3341d1273865afd2aab8343c88ca7f1be5bfc3462cfaf4757469899782d3b82a4376a0b935d3c0c785275334352fc855a4eded236
- SSDEEP 1536:sH7HsHZp/HpfHwBbXHruaH/ICH0bHRfwS7GxTPHrdXH5GkvocXaDHzHzHb6HCHex:vpxn2RBbS8qFY4cGBKDJ
- TLSH T1FE8309EBC8CD8E798ED98BBDDD366B5799D405159BDC8E04ABFA404C03C1789103F68A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\f5d56a08-6072-4aad-9a8a-3187d038e835.tmp
- Size 171B
- SHA256 c3bba5050ecffa480757443aff8243f65194369f4454d0ac1443a1858951ed43
- MD5 fda71a5ba20e2d504d4af66469c9a18f
- SHA1 747cba933f2ea2f65e173172c88c5983fe2c47d3
- SHA512 cff18808723bdcabe8e01d0c881e36ba2ff46b8593ca473741aaecf0798ff6989a469c4cac31f24ae8dce51e29bf2e8f9db90ad877eca7111e9740697072d135
- TLSH T169C08091B54035078CC864FFF96C76A51957000B544171D0006D24C907455BB5376740
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 548B
- SHA256 ac61c17e130d223362b4c2b56ac6b8493fefcf63edee9fef995772667f59f387
- MD5 f02230a7c9f0fe1f1d49fca26a1123c9
- SHA1 0a9d398f77efdc51daf59a2842a660807e1e36f7
- SHA512 073e6702b1302a7f8a364418afa5ed89d64a5598f62264dfe75d7bb3b05a5cec4edff3888aa408c9db994b61db6e062e6c982a43855a2e6523de784081b9828e
- TLSH T15DF0C0407852D661BAF4B7FE72787F67427F4869448019B508FE905E027D11C4309362
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 1KB
- SHA256 2908c8602316ffa1fbe1fc2dffd2da4b18933836dbccdf70dcd1b16f50f91fc6
- MD5 18fae91f7f03c6b4183a75c58899f644
- SHA1 5d8543ae801fc4e9852a546d816ba153169dd731
- SHA512 cfb3ff397cf7b022917167c4b1e674875acb80c3bf8c3259398f920cbb1f3381a1454b51c2c721f6e27730a2e8fc5db5549b6f908197107dcd61d97934d3f120
- TLSH T1C421F110DC51AE732FF6CA6E71E17A231BBEC5C6711155FA16EF404E03AD62C8107616
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 388B
- SHA256 6d646eac6a3751a75bf6a11d0289e7edb9616593477e8247f2e8d0bee79b70bd
- MD5 129c68100e13ae07db947cfbe960da93
- SHA1 f073fc3e01a03e8fc8c0d95427f7b69377898aa9
- SHA512 c5738aa5ab0fedd267877c991c54ab8572d5d10bc047275fac4b6b7f8ada8b2280a7e35ee16ee09fa28e708990abde9864b6a1c45ef7813ab65f38ca15f61042
- TLSH T1ACE06140B8668655BD7597F531E87922836B0494C4D115F54CEED4C9423551C5715151
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 2KB
- SHA256 783bf09878f313113c481e4fb1c178124ae5e9275a3f094623a4f55ec45cf572
- MD5 b84b810864688286c3201c136a3f078e
- SHA1 2cfa1f505612ea920aa34c16092e05f82e4469c4
- SHA512 f276017fc30b231d047a5006a265ba75ce6bb11501ccd50c0661e99d4776293a95e91fc81c691d932d231ba43d13288052635d198ecd2ebb1657e861ffc00f47
- TLSH T1965121009C616E37AFA6CAAFB6E23F220F7EC193311161EA35EF414E17B95694117207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 2KB
- SHA256 33d60bf4c02ac07b6873c4693a1970f3054f80f3e6ef07819f041113768fa420
- MD5 a5f97992d9aba8795116bf261d7d73e0
- SHA1 06650366f2767eadb3beb788b735fd270b230150
- SHA512 7b4cb860a9b488ab822a4bb310abad2ca876715de9d7f5ef5f230ef675ea0355bfc75796e8fa760f2d6ed0c9901a88e1f138d219467a26ccd6b5b9703c74a291
- TLSH T1B6514400DC517E335EA6CA6FB6E23F120F7EC193711161EA35EF414E17B956A4117207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 2KB
- SHA256 cb5c1ce07d880b30d672a24e06d76aeb9ca51c434f4e14389f1a66b6b9b1dddd
- MD5 405b3af014fff68e325a8e9a5fe83b20
- SHA1 fdb105f6dbe23e1b1d4a78a1d768ab3d24c9cff8
- SHA512 f5ae428c8d165cf1848f1b8e2ccf8b9794fe7541f54821328795b5db2a95547548c6f18d1592e3c2666730d50937e1d8019dfce432ef6bbc920c82bbbfe49d2e
- TLSH T166513110DC116E339FAACAAFB6E23F120F7EC1933111A1E931EF414E17B966A4217607
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 486B
- SHA256 bc0121237467f27888dd32ba567467b428f26e44075d69a49fc93afe7c242d26
- MD5 93a9de5ce3437d51083b55d1000b3913
- SHA1 c535ff3165d290d0a77d9f7cebe5717cff425172
- SHA512 4209ca51ae78ca7715abf8c5c9e46ced91a7604becbbb063a2c4d79e12ee1ee3de4df8cc397d84de69f250c66eb6c1cdf4874c0a1e9e93aa395255eaad942319
- TLSH T154F0DC00FC619761B5F4E6EAB2B83E63527E086980801AB58CFDE04E023D61C1309263
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 2KB
- SHA256 8ef5eae5a5215de7b742fe30d11a84d730cb7e8dcc391617c0edcc08c6d08e21
- MD5 1eb3efe53e8eedda46c1a96093245b12
- SHA1 9ac550b0606e1ee029dd6b0aed36683e8868d730
- SHA512 a7681f9e31a011a09d582b10bc1f6c31bd2ba28652cde48ba120e5642b30797dfd43f88fe25ccaa53b3aa19833ccb8a36c90498219ada1300705024cd68c5af7
- TLSH T1B6412000D8616E336FB68AAE75F13F221F7EC593710061EA36EF414E27BE56A8117207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 2KB
- SHA256 6c1e8b7eea7ffb441c1570e84fb9aea9f55c3743ef2fc5e8fb910987c674b6dd
- MD5 7ea20ca819639f2ffed20a12767a78ac
- SHA1 65165336fadda483d791e5ba5ab9090598d9aed0
- SHA512 6440d5a195893885783b5f6b6fe893c8a1eb5cfc9ade8f2fb783bfce816767e77167e1f593e87cd133d81db8240359abe6d8c198a9eea02b0f9f3454f02e1832
- TLSH T156513310DC116E339FA6CA6FB6E23F125F7DC1933111A1E931EF410E17B966A4217607
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 2KB
- SHA256 f2a2064d5c424c2b609db6b379b551b23c3b4bc4e8c8a8a8cbb35e5946f8363f
- MD5 24c135e4a9c4240dfca9b8c4610bb530
- SHA1 14fb7503c593dff93aa7a496a2fcea18ad695bce
- SHA512 2cd9e52cee0ca34775e5329749a067649a996882d763b1919f4f6b3bc1c82577f73cb16e5d993e918c1cf807cfaeed13944dc1c3c8aafe3b885818649397f72d
- TLSH T195513200E8616E339FA6CAAFB6F23F221F7EC193710151EA36EF414E17B956A4117207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 2KB
- SHA256 b6da8832822938ea812b18c046b8a776e52eb27405f37baa40fe01a7e357e517
- MD5 114f8bfbe8845abf848cf6c602d0ecf2
- SHA1 cdb0a485788503b8d6ae18b5a51e98a81b5e7103
- SHA512 dbea63f9299ddf1629801d298621f96598e530c4ba448084fa4ef79023d196f15704923d2cce4b074db1de22303189b1697a91c6271c95d052f98afe9ebf82b3
- TLSH T1615121109C51AE335EAACAAFB6E23F120F7EC193311161E936EF414E17B956A4117207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.0.1833969897
- Size 2KB
- SHA256 874c36f71b8640812a7298e26f60058d4ddb21a1cc35c09e53074fbe8b313c45
- MD5 6a8e5c28f1bba76b45951a7279db5b13
- SHA1 476e35a4b82a373234e7c1626e377e23824396d5
- SHA512 61cedefbd3c159bb4328309a147d6f5e1ce6d382bcb35290d2958bfa3bc79a5c607176f697a1365d9f89c73cd7ab45650b46f782ba383eb662986db85b65b1b5
- TLSH T165513210DC517E339EAACAAFB6E23F124F7EC1933111A1E935EF414E13B966A4217207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 200B
- SHA256 f954607ea3b781384b1fe9387e8cccaf39b8e5983c1d9c3ad244f1be0921671c
- MD5 69e5e59c20dda1f9a207469cb5db48b0
- SHA1 921806df6c08bc4fcb0991ed099904750a73960c
- SHA512 83a2e72a8f92aab97e557478f44bda3b8f7b6fcb910aaf9012a5c2bb24a2c378cec20778b2a7912b6d87722168be4e09f7da074c6ed8531131fab88488855d18
- TLSH T11DD01262BAD03448ECC904FAF498676219B7144B990125E5158C61CE531A1B6B629A54
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 997B
- SHA256 b1f49df723676ca45425e5ec2fc33a0b86cb5ac1ba6c6ba1282e2e69ad8ff89a
- MD5 31afd5c85f50e83642b804cd1539821c
- SHA1 bec712dcf07ad0edec0d5d3bbc0fa7099c585d5d
- SHA512 15308ae86b67ca7264eb75bc8b9c2e5cf314399efdff7318741a922a5c78e316a14c71c51276c16f5eceebde43b8660ac3bddf84d622fbb3a0fce71806026762
- TLSH T144119BF5251407284F4DD396FF787A45C7B284CBB88451E6D9ACA89C02DAABF68263C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 7032742deefb43d88880ffa3d6e1ac9d5f1d41c686325da15f2581d056bb2728
- MD5 a9a987a09b2bce400fa40a1683751239
- SHA1 e25bc517effdaa9e90ff9ba702962aa9e85941bb
- SHA512 9ab18106ca3e4c61f5b0e5fe937107e5ce6d77afebfc1b331859e698ee32ed8be247225fe405e4ededa92386d8b016151fc494366cc4d0b3bc7d4d15b398f711
- TLSH T160218AF7112407244F4DC396FF783655C7B288CBB98051EBD95DA88C02DA6BFA8613D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 d0bc32a744e4911e98f24a9d23cf058d39eefe2cf4bfd12bb785ff4e375be1e3
- MD5 b0b98db51f18de7f0f35d8f1dd200639
- SHA1 2413e2f99a39e86fd131f5e83635cdffa589fc22
- SHA512 a602170bb237e156a5a3eca4f4e77192f2a29f3d652e445073d3c49a403efb5c2233c82239399ba8142235b1a2816d4024b044912d50ac9ba196cdedc3245b53
- TLSH T1BA2157F3212447285F5DD399BF753769C7B280CFB98452E2D05DA88C02D96BFA8623D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 7f3a4a1e1e9fe2afb0246223c5cc802f9399f0be851c038cd400d43cd5f8dc67
- MD5 85259c482c19fb1eb706cb21f05a362e
- SHA1 4f4a60d58ea98d2cf85a4df8a406aacf34bc7248
- SHA512 c8d244a6a18443a443c5dd829e6d45cb0d758f502aee588bca667e39803d39c8f767a8e53eff2b5f796179c7caf56c108489774757c200a9b63dfa12e91cc243
- TLSH T1B5217BF6202447244E4DC796FF787655CBB288CBB99052EAD95CA48C02DB6BF98213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 bbc3b06c33d9048d4208f2693a23425b17a9d3f168814ae74fb6be4c50e271c5
- MD5 42706014232d732f69f05dfbc99b073a
- SHA1 357be403a582ee04a05daa4affa67d1fbb99ac29
- SHA512 c9891b60f5b85bb1bb457873a85ff7966ead0053a5b0b0ad19dc8e418f0a093c26e74dc7e226f3ed6380d4fa9fef56d087210d07d62ea7d3d04f096624829ff5
- TLSH T1AE21BEF2112407245F4DC3A5FF703B59CBB280CFB98015E2E49EA8AC02D96BFA8613D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 c72b6e76518fff6a389bac420eb539a2d25ecdda2509178310e5e774aafd7d04
- MD5 cd2bcaf793c9fdeee4e0500c75c73c2d
- SHA1 75a5eeab653100e7c63a87fc4b26ca85e3e4ff34
- SHA512 fae62f664322980974768d0890f463e1e8a713b93fa3e2b05663f058cf254bb39e1b8a1ed35dc776793762f9667197d5d95c4d420012ce701881bec2175f50ea
- TLSH T1EB218BF2212447244F4DC3A5BF703A55CBB290CFB98455E2E09EA8AC02DD6BFA8613D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 d76736b245d5f8db582172f13cac37e1b72d4355eb51a3349b210ee9b5e2d869
- MD5 6586835d589f82e4854f684f8e917879
- SHA1 b573d3648192ce1bd123fd7963849424ece9bfaa
- SHA512 1dcc8f4fa863e178a3227c3de089a957c045045515e7b22cc703aeb2aa13501f037aebaea4479c6998055995ca1b7c051edc37339f6136c0912bee3faad4dce7
- TLSH T124219CF2212407285E4DC399BF743665C7B390CB79C046E2D05EA88C42D97BFA8253D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 631B
- SHA256 d39551b8719eaa5df923ff3a1d63bca15b34de1cd87a9e748141f307932ca52a
- MD5 8c7c866cb93cab97959d3a6a5ce21f32
- SHA1 a1dbc80982111a4a27f3a81045d2b5cc1a2d220e
- SHA512 0ae9606f832841ea842fab81166d8acd73c2cedebb1cdf99fa584ff4e609776dcb095ceb4f1af0880796397a56c68ff575ca55298dd6be939a2bcc2e1f36f895
- TLSH T160F0D8E2750813184E4CCBA7FBB82B82C3B3C08FF84820D780A9A45C01E667F2826390
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 724B
- SHA256 0c62653c7236fb75233afd527f28ec8c56e8555a725dc00878abfd758f586078
- MD5 b1f03f4dbd55d287971b0d33a482902c
- SHA1 6d3bc028849f1e4221202383e54861553e9ec1e6
- SHA512 cc6d71ec6fab3b952b8b412275b4f7703ef0188a1396f9cec89ed09360781e6e305b7d26f6ff127dd976588c7f4c566bed15c3669eeb9da74016d09daa6acdd9
- TLSH T1E201CBE1651413284E4DD7A6FF687741C6B2C0CBB84820DB84A9A49D42EAABF58267C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 8aab0e77d29b4dd44e5c8e2057e5346140912665e49b69da3b31458db72fca28
- MD5 745a122abbac23ce6ac3ebd915dc2224
- SHA1 159eba82c0872caac9d2f23587a3d65538677bb8
- SHA512 5f2d6457e570dae3d7d146ebc76936d70585671b1d3accda99f87ec59923b6ccc320cb9d258c19417a59fed2edb7050ab4c89ca7aa7f2eaa053bf3e921301049
- TLSH T1E2219CF7212407240E4DC796FF783655CBB284CB798052E6D95DA48C02DA6FFA8213D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 89596b66536abfe7d785efa5c729fa789a9b64a0ed3f54867636f29a4c1d8be4
- MD5 af340288ffe6a9dac8a41c1440daaf59
- SHA1 ac3d0cdfb10cdc7b8a64f8d2e467dc3f05cf1108
- SHA512 4314ec7ae5a1b4c1641e084551b75f742c6b828231c2697540255d4fe85d015fa5f0555e2b1389e3b3da5e2b686b58fa56692b7c4aaab12d7ab46506f83b428b
- TLSH T1E1116AF6111443244E49D396FF783A56CBB284CBB88011DADA9D749C02EA6BFA8223C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 922d1e7f1075c37af1fefe2e206afbf4cfd8ace9e2afcf4bf0eb46a431252448
- MD5 904502b19cb45ddfe77e519efaf07202
- SHA1 c3baebe92e58aa2bbf25fcc3a65b77ff97b0f23f
- SHA512 dc3dc7f72926a48b39d2f5fd9d97e6ad0f29789dcb1d26baae7d0c0a7865beab3ff0fc8af554bcf28904018cc7da56ba0e8a1d42d0e85ceb494e473aa5d2e592
- TLSH T14F2187F2152407384F6DC796BF783659DBF280CBB98042E2D09DA48D12D96BEA8713D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 2011caa34817adf471f7c8ba8452b529f2eedb3f63ccc09a4eb3f4cc79e924c4
- MD5 f88ec78aff9757b5d55d6604421dcf1e
- SHA1 47065afc84c97526e385d30b35a51a9e2fda2665
- SHA512 e96a72b38eb275e628705103946f9de4184c261106b856ac675b6a9fe12b11eff367e2e412de6789e5acc387bd3bbc2e16a7ec56159b85cc7bad472ced6b5528
- TLSH T1432199F2152407385E6DD795BF783655DFF280CBB98401E2D49DA48D12D96BFA8313D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 01e973ce6b11d0813ca24551b1cb819d52e1f97eb105a2b3ee96f4435a02476d
- MD5 634d8d2852145aba12c34b6ed981e9bb
- SHA1 c0827ad42d579449dac9b598317c81294d91c237
- SHA512 ddceac56f2a63c0b4b6b5c4787f5adf4d151ceb6717a4d54cb65501efee14faff0e6e50232eabe6e875f804216d60d1f586875c60279fdd849c8fda758ad442a
- TLSH T1D6218AF3112407244E4DC3A5BF747A55CFB284CBB99016E3E09EA4AC42D96BFA8613D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 06047f52480e9f9943dbed31ffee5cdcd57242807ec4aec51f77d1775c9c18b5
- MD5 895e34fad0734f8cc0d252faf1e81a76
- SHA1 263691d90a47a6bbbee83ab0e5cf4780e6ec0e26
- SHA512 1cbeebb8287561dd35ff2ca4d6a9d5338948f1b8ff59f2030699943700190624564323ec26427b1388f233883df6d40f5f53aa6a179deaaa0944019ea3d24fe7
- TLSH T1A52187F2252403345E5DC395BF783655CBF280CFB99056E2D09DA88D12D96BFA8313D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 e6f09f7d4af6ac973a15cd1081db328b8a8b72c0e5dccec38775ba23527093b8
- MD5 132139afed9b8c1177c8a1c924c5b215
- SHA1 83149526b920533b5561fed9106f0c6d95bd3de0
- SHA512 7ca8e859773362bc3aace1125571884936a509b9716ed3bfb4ac0e68ccd1c64a2d75c869f5cf0e3b7dc5b55f38bcb72c623a5282bd35a24e543f137bf7f4d751
- TLSH T1152199F2212443284F4DC399BF707659C7B3A0CBB98042E2D09DA88C02D97FFA8253D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 26878782811c372b80a109335e03aecfd599e8b0464562e2c833ab1fc9532bac
- MD5 6d2da1f19e05c14ebb9ec506100d6499
- SHA1 f960216c3f590e19b9d00f7a296b0bded685f2d0
- SHA512 8ae9876352e91071f41bdf0070e20bd73eb323d353e16fec613b60309ac2a5fba118c0449876f08be549a060f582b44d4c626a6e6b1ad06b39f0b327808dd870
- TLSH T15D2199F2212407284F4DD399BF743665C7B3A0CBB99016E2D49DA88C42D97BFB8653D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 904B
- SHA256 e52442233599d9c7eef8688c1ad4c6a51d17c228ea411287e3ace92f26df2a46
- MD5 aa42b398a5b96b33a08d84ad53782cbd
- SHA1 53bbcdd4bf87979eab543424037d1e2fdeea72bd
- SHA512 f997fda8063086738e917caf21e42632c209096b0c6b40ca629b7a230765f25a2bd02b5765b0174414ae628477e0b5348563787ea855394d6bccef96ae2d3837
- TLSH T1D111CCF6250003184E4DD7A2FF787645CBB2C0CFB8C410D6C99CB89C02DA6AF98263C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 7c698cbae120c7eb40c2fb5b3da9e851cd2d3bc62d99b6e8c43128ed235eb53e
- MD5 511e5e9f2898b82ee6c0452f061b99f2
- SHA1 5a1dbfb699f638ce5f1e88ef2e99706b1c52d854
- SHA512 db0607f313db9e343e02680abc1a2eb70887b309b32810274f52c52bb5adad0f87dc6827c0b0bf2e4e6d6c2b046031280f831ca074c8269cda0f81d77c09241f
- TLSH T161218AF6212407241E4DD396FF783695CBB284CB798001E6D59DA88C02DA7FFA8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 9c15fb279a62d0c3c470baee1e16744cd1da1e875bde910566f2d0e6ccc9a006
- MD5 fbbcd62af6f425d3903fff21ce0beab9
- SHA1 c14117f573f5f9415e13410495f29a8a4a51eece
- SHA512 9729864598bfe4b92db8c4a414bc6169d7bdbb16c8373a53db12516396618aa70189c6214b5f39eb765190628ca599bbbbdc76e2a04abadd516fcc8d91d1012e
- TLSH T1B421BBF6211407244F4DD79AFF797659CBB288CFB98411D6DA8DA48C02DA6BFA8213C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 ec73cff8e579acd4d6b00b03f7e75ef1f5f386b4a6703d8cd32ce0b3cb77805c
- MD5 20fe6b8d406703296f21a642023dc7f4
- SHA1 03255ce39002d071b4f4288e2007af302f8c3d11
- SHA512 4e138748b7a6e61678db15be768d4e3b7a70254516bfe0f0601df68b438e99214257e4e12a32b4827d20a807d2525f20570821e8ef37cb8c078b25554a119c2f
- TLSH T1B92187F2212403240F4DC3A9BF703765CBB280CFB99045E2E05EA8DC02D96BFA8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 58be9777bd8e010299a36139489322db0ecd7c55154aa1f5f22892af100dc317
- MD5 27b02a7e6fc5f3bc777052c64fde8d25
- SHA1 384ee3d96ea08a6d37f6de04ae06656fea498ffc
- SHA512 ec3174a1d13b9f6dcae49549ae7dd19be2b7c9169c7d68eca04731f8dfab9cbd3cccb2504db85de6ea8d2db3c8fe16514c19c8672ce66c00512a9f51f80be2a5
- TLSH T1A12187F2212453284E4EC399BFB43659C7B390CBB9D406E2D09DA88C02D97BEA8253D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 446B
- SHA256 97412cd2fe63c0c88fec1017e86c9ba56aa9d33a44f0577f69973a961fa13a99
- MD5 4acc684b6ff4a501d6a047842a22022d
- SHA1 4d5252a067c8cb9bb4e016f54515de13fcde3144
- SHA512 60034117af75acd5fe1560d6bb4f7cd97dd7f3fa590daf49ccd3432fd37336a716b2a5175a4fa8f94ed84dbdcdb224ddb22fdea0668ba4e6fbea0dee2c60ed79
- TLSH T10DF0DC917A04230C9C4D4FDBEF893361897240EBF40071E28069609D01E3A5E5521310
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 539B
- SHA256 fef0a0c955eb2e2b140a6f59009ae03ed17ca0dae1414982bc07ca5d5e4697f3
- MD5 a3cd6509f96d376acaff4f5e3219a0ae
- SHA1 5f8487a93f62abeb2e3e2a3ad07f5dc78059dbdb
- SHA512 6d73b0ea9d5903835d67e1343b256aa49a4ad0247697d595d36186cc75286e7d77d7ee1b1055b3c6248a414a00220e87ceb4a0022cb55888ae555ef95e6854c0
- TLSH T16CF0C0E1750417188D4C8B9BFB682B51CA7240CBB50060E6C459642D01DB66F5925750
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 81b6b3724094dbb562fc1c94808875fe6c462311136879413ffc4984678f4f97
- MD5 73cec9de92c3a62ee8820e21e0c8062d
- SHA1 f35fe04b57a5638ef5b688ff772af39a2a5e1899
- SHA512 5eda4d9f1835cdd0b2c4498294b038445e5a98f295053807227afff5c1754bfee1daafcb2fead0e82343f3e214ef2f5d00006dbf7b037b50d6d71bbd0911e8e0
- TLSH T12E2185F2152407384E5DC395BF783659CBF280CFB99052E2D09DA88D12E96BEA8313D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 509978da96c510da38ebc7570a5d389b6071dd2bd9c8d8559310e2f3a3f59989
- MD5 21c5f5f2e46f3e6eec0158dd666f7b67
- SHA1 cb1bc4d8b260f1cb5957f5417d00697a4953e4ae
- SHA512 9ab2bf715453c92095e54e3c46193c970603b11b4950781ffd18d3fcf51c91c9e7b9eda9b3bac3c10217420ad1a4d9c03463c589e371e9ccd1aacc3bc6e4e0b0
- TLSH T10B2179F2112407244E8DD795BF743799CBB280CFBA8052E2D49DA88C42DD6BFA8613D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 eb274f16dfdc474bf2d292d9090fae920727203500800a1a655eda5a345ddfe0
- MD5 763473b65ae5d005aedec783a3d4416b
- SHA1 172b97d8445c6aadba0d943c88b97a2fd08a7bfd
- SHA512 b33a1bbe35e9c1e4fa1f522e07082b27e80f87076451b91b7965ceff8c5fbbf55d12b21b4257d85742c5a80f58ca7a93b33bd64c81c97fc54aa5254b73e710bd
- TLSH T1C021A7F6512407240F4DC39AFF787659CBB284CBB98002E6D49DA88C12DA6BFA8313D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 27edfedbefb01358fac9221ed67e50e9c9ea9a7fee55b3095fdf11ff289408ce
- MD5 d64c2d9b46da217aee7027de3547c6ac
- SHA1 03579b2972b85b1ebc008a072d26fa1316d97236
- SHA512 51ec11f9c2cee0ff3323ada9f8a1edcb3492e0ab9a419cfd85aee003ef4b9d6be19eab2fbe0e55c72913a96dbd1e1ae27858e09cc7ca6733a0b64254293be6cb
- TLSH T1F3219CF6112407240E4EC396FF783655CBB284CBB98451E7D55DA48C12DA6BFA8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 82b11f99138d891210a5e2ef23acf7af1980549f6f0ad7b0951285aad53cf5e3
- MD5 6e033794d85db02281d10fc70d9dfbe7
- SHA1 d44ad494240470c3a6faf42672a04435d93607ab
- SHA512 e0150fe6c856162255452bc9a6f6d2528fc26eb432f95969625636540b023ea4a95398d1bc7c88d4887c902637180b7fdf2a9a309d6698d616fab0263ee32fe2
- TLSH T17E2187F2152447344E5EC799BF743659CBB280CFB99452E2D09DA88C12D97BEA8313D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 58fbb7c2bd4f849d018467fb4409d8d788f07ceb7f18a455c2cc1e160d8b53f6
- MD5 2bb537441f95c08d8c019f07f76508db
- SHA1 061ab82c425b3d6ed3a1eea97e8f208d04e3344e
- SHA512 5228732c2a4fa221695fd1c30c8547bfb3a381701ace89dfda1dcec1b0bb325e7144eaf0d812b92a22f4b47627862f8839bd40b7356ddc9ccefeaf6a1a4d62a8
- TLSH T1F22187F2212403284E4DC399BF703669C7B3A0CBB98016E2D09DA88C42D97BFA8253D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 6ddb8e9e0a3f49076cf80075059f5a88eaaa14c615ea07609cdd652d819bc36d
- MD5 8133c7ef376999ff7d8cc669186a31a9
- SHA1 d482ccf43d2fcfeac53112aaa2dd29e7543c5565
- SHA512 a6d8f17330806267c34d25c48d2581b0ebfc1da20b47e26acdb548f2b2505587a3b9050c8a7dbf7f5517c02f878486b74a0b1f5e11fcafb9f5d689fdb2ddadc8
- TLSH T1C72199F32124072C0E4EC399BF703659C7B3A4CBB99056E2D09DA48C02D97BFA8653D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 813B
- SHA256 620f0b3d2c378ae4fedb6fc93834fec9e5d6a8c8b7c768c1b535e2d26001dcb2
- MD5 2d3709582185cd0c46ece79f2a5800bb
- SHA1 dea45b19720ce0ab79a8dfe9cabf1fdfdd4bb1e9
- SHA512 14da0eddcbfe072e14a8c8a8c79fe3b2c08f0d85aa7981c449df2f7c5259a4066e9d890cfbbb39380b87946ead2ac7735ad3aeefd26e905dc4eb9ed3fdd0e35e
- TLSH T10F01BDF5651407184E4DD79AFF797646C7B2C08FB88411DBC49D689C01EB6BF58267C0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 71f4ca86174e5d47c728ba8639308fcaf1aca7ec9941d267a2f9a7a1b95c05c6
- MD5 00579e476696ed9f2d88ae69758c15ef
- SHA1 725c6112d32337086242da7ede759d7a566a1c7b
- SHA512 ef00840cdbd32b007fd93fa8051b3a4f6d066079a1ff77798db4721c4ca5075533d2d11d9bf6df168804f3219f8b3b14524346d175a36c85a1e344d325e9fa8d
- TLSH T1E12187F2212407245F4DC399BF703669CBB2A4CBB9845AE2D05DA49C82D97BFB8213D5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 bd1df051e7c0c1be1250f74c43e986c93ed7bf4e40235bd1b326fd5cf09407e6
- MD5 ad0b00b656bdea700d62dc04d64e9ef2
- SHA1 d3c8377fb9a6ef551c163a6195b36c01f876da38
- SHA512 b8e61c54513c43ea0338c903ed74b6f05c997b439e66a176c90a13889d6f19d385405f428f7ca18b50ce4e8695ee3d85eea645b639d572ca9635a4b10a6e3c18
- TLSH T1BA218AF22124472C5E4DD799BF707659C7B3A0CBB99042E2D05DA88C02D97BEA8253D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 5fa7e432564529b596e8ccef8ddcdff9c1ad100cefc1e19e7f0a969f490b44e5
- MD5 00e11130d74af10bfaa607d2e946e7b7
- SHA1 d1119f32406f398f0fdb8ab926f444cec7e0f145
- SHA512 3cde15c06a69acb1e3f811f0b861b6ef068463b8f9be983393baa141270b615d0aaf435f7cd6e56150d3efda507c980555985bd5a3b1618b9952052f407bbdce
- TLSH T14F2176F7112407244F4EC796FF783655CBB284CBBA8401E6D59DA88C02DA6BEA8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 a4c8b41c058b51bc0874824c323cce3109e3388388b7f8c3907b217bc8720f54
- MD5 dc4019152248dd49c0c35de64a31fa7e
- SHA1 ca62f0bd1054dea79b155272c4bcf5e85e97cefd
- SHA512 bd2c7cca77a646815af89088b8c32bb6fa9e78ce0976d5227427acd0f3a30791bfd023c4bf72b4fa01ccf96adae5dd695966573ff115914fa52d4b3f3b23c91e
- TLSH T1832187F2152403344F6EC399BF783656DBF280CBB99042E2D05DA88D12D96BEA8313D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 128c4b26ef3bac0cebd6bf463f5ed3dc5b714295626319657eb552a964a4c325
- MD5 bd4c4cab88a9308c308e1972d85df30a
- SHA1 161ee5ed85c0f8b6d4bdb46339a8f12c82858feb
- SHA512 7b5e110d7a98bf623393c9554ed71467e485a1aa1009f7c00d3f39d5f1cb364be521063ac539aa31cf6100e41c98d0c3cb3ec6aeeed0129c3fe5d7674d633e70
- TLSH T1A421A7F2252403340E5DC396FF383669CBF284CBB98001E6D45DA48D12DA6BFA8313D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 28b4fdab94575d9195492e13f11e4185e62b9f552f98e46a92d9dfb81f17ad10
- MD5 3e378250320f0d165533ae1f6108255f
- SHA1 cf2bd4be134c6a66debf8a5d836d428da9e6a312
- SHA512 cff051bd984dd14bdeace3a3bff901ced80753c3f786f88f490b0fbee0887dabe6392c66da23d9eb585b4d116ca65ace3d481cd0492c670b6ffb3467e2fa2e8e
- TLSH T1BF2187F2112407245F4DC395BF703755CBB284CFB98005E3D05EA89C02D96BFA8213D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 425f6b4325e06b3e10d98c553957a83a2493f3edcfcd983aa26638d4d1a29e33
- MD5 b397681fc7afa3edb6963813568182bd
- SHA1 e158678f9f6bc71edf436cbaff88717af0967d81
- SHA512 b8993b19183b1919aa3cea8c7ba1f348561333f2881c64515fb857a9caff1fc284a5988be9c486450d2840e49256721045a54ec156a17719e5d92a173fde200e
- TLSH T1742187F2252403380E6DC795BF783659DBF280CBB99001E2D09DA48D12D96BEA8323D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 186ca405c24b103bbd9b4e32f84d428a11a6d77ef263e34091db59850a29c7eb
- MD5 368d8146d47b935e2567702d3eed11f8
- SHA1 b24b96456b68e44b5b5dd1b2f724f1a151f119c5
- SHA512 e21532daa7b88c9b92190219fdd3ba35ef0e5bcff48db53334ebe6f07acf4d72193f937efd11d76d4bb39be795d54d9b924b7497ec085a8e2c85842286c2bb5b
- TLSH T1592199F2552407345E5DC395BF783699CBF280CBB98012E2D09DA48D12D96BFA8713D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 d8fe3cab3d1ea17422cf9eb87a03b6ecf7915a137a1f0725eceb1b88925d82c9
- MD5 c87b433517b74f62c412af824396b1ee
- SHA1 421baf997e95f2fa19338b2f2104f2cec37d2c39
- SHA512 39efd386a98b7da39d030a42972412c21123ba0df4e4b97d3d24a04ca2f7dafa510c331b93ffa6aed5755bc26ffa4ca2509bd4ecbc8094c1812b782030a34810
- TLSH T1B32187F3212407244E8DC799BF703769CBB280CFB99011E2D05DA8CC02D96BFA8213D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 fa9a4961886301bced037fa02919830de3066a01f6e17cc58fc2c1a4102b98bd
- MD5 6b9bd67c2266e5b320034d07e2609d36
- SHA1 5562c454190ba51d28223b66708ac9673ea4e447
- SHA512 3c5d968adbd91258bef6df9cbb9bc97ed4dbad350efdc23456e62795d081f8347d876d691da0f5ae14c2c9b534f4fb80d957b8e1e46f88ab9fab6ea587887ca8
- TLSH T1572176F2152407344E5EC395BF783659CBB284CBB98051E2D49DA88D12DA6BEA8313D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 c43aaf4a408bbe601dc97b94e892a50fbbf3d2c5a02708d0f71b41fcc45390f7
- MD5 1570f8a8b0b1752d351c12467446814e
- SHA1 e374ac2631fb2eea75fcd930fc6173879bdb0569
- SHA512 8050d8c9bd4ccd5fa7ba58b7ff8e62e54aad7c96e653a28cb40b494dfc936af540631def0155c5ef914b45616f419f9035de1e62c00b7f81042bbe1dd03124d8
- TLSH T1C5218AF2212447285E4DD799BF743659C7B390CB798046E2D05EA48C02D97BEA8653D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 06402abbcf78cb045a74035b8742515652ecf6d01ba4a5304d5bd32e87a83770
- MD5 b19e8a93bdb9d4cf0e4350f441c3df29
- SHA1 ff44e0bcb65708bff1b492b5f3e1c233e9c2b021
- SHA512 856d88d0363a99f4b2d2ee840b95445c71d19b6af0aa7256f2b3fe4030c50ac8c672d284b40eca8592430be0e5536ccf7d472ca6c225520a809060aa75dd4d75
- TLSH T137218AF2252407341E5DC396BF783659CBF280CBB98451E2D45DA88D12D96BFA8313D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 8e3a985f3d93a5bad464dad288bfed84ac7aaaa0a9c2695e0105a75fcdcdc60b
- MD5 97d7cb31ea59daa9c94daeb71281c4d8
- SHA1 036e9ecad1b2ff5583cd364fe34fb8a193d0abbd
- SHA512 5101c94d226deb844bfb9ee7f37b2e9eb59dd5abbc65fa2c25386f0a7f502e8011f8324c4e008c23c8b27a8271781e4fa711497fe6204cfd139e570d2a943e56
- TLSH T17C217CF3212447285E4DC799BFB43659C7B390CBB98052E2D09DA88C02D97BFA8653D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 59c0f03a9d959cdefff8a7e84df4441e7b6881f31de6489f84ffa2887056821e
- MD5 c743341945ea681e88510674f10c0bf8
- SHA1 0dfc548d855a81fbd534f2fe77ea408993696362
- SHA512 83d13d65acd855896dbbb48c352d263ae0808f5210cc79d1593ba547007b34ae490acf1c0a95c5f1593d540c089d8ddbe9eb6a58c40032aacc29b0c7236dedbf
- TLSH T1C52187F2152407245F5DC799BF743659CBF280CFBA8051E2D05DA88C12D96BFA8313D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 69fc19c2c107a9881ff0ef07207ce0e20fb19855ab18fca2852dde2c803fbca4
- MD5 295489470884c7ed3aeb522c5211bad2
- SHA1 f8cd60854d6f4de97c4b6ffa445e715489e7fdd7
- SHA512 baf8eb2f7544c41e36d045fea0f2326291f836d9b0065edf1df3f649899def39b866ae5de53300962fac3b9fdbcf06ef73197e5a5fc889d6558b099be8f8080a
- TLSH T1682187F2212403240E4EC395BF743659CBB280CFBA9052E2D05DA48C12D96BEA8313D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 218543ec7c27f92a153da78a1bb4ae4b1899bde5b2861b29b91871cc459c8f95
- MD5 7df3f2dfaa6cfb42f7e053fc5386377b
- SHA1 f33165dc6893581f040276a8b9e4f22ce2b51d26
- SHA512 2c78e37eee3f9b4045ba4532e9a2f727fe42c27799d85fda74dbe2213480185940c985c8cdd48d4eb4b29e38a6f9aa24695d202b391bd72a603d902cda5840d1
- TLSH T11B2177F2512407244F4EC399BF743769CBB280CFB98452E2E49DA88C02D96BFA8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 b3d1a593ab0d4a932f94977bbbc6abe496a99ea8c247151adc1f405fc5f82dc3
- MD5 1cc0410e7de6991adde412fbbd715321
- SHA1 b1af7f176e81ae2b2c1ea5a67fcfac7fc366973a
- SHA512 1b406f71761a357b38aba1bea8762efab22c26cefb908e5b701796a503772f4866e7fd2d1b3e5460811027006ba566b67967686f2e24b7c80280d11dce8714c0
- TLSH T1BD2199F2212843284F4DC399BF703669C7B2A0CBB98456E3D05DA48C42D97BFB8653D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 1ea3e599a3ad771c9a67119b8f1461ff94f7e7096afd2c08c04382ad6c95ddb3
- MD5 6ee7aebefedc856188500e1d38d400b9
- SHA1 a6936ec10e44253405eccd0d13cb7e3ea7521eae
- SHA512 031a126885751bba9b95618a012a231339c2d2f05b114d66c592df0774199f8986463d23b289f254d02536581461d0d64ad9dd65a0523130c57ee38a52dd3280
- TLSH T15F218BF2612407284F4DC795BF743755C7B280CFBD9452E2D09DA88C02D96BFA8613D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 6f56396a7e11ba5b462c13933ebd846adc7945d72dc252d3685f57d66f6c8b83
- MD5 97f9a71e5a792bcb169dec303508ba43
- SHA1 a270261a4c97348c860b13649087a206de930b2b
- SHA512 34211b9d77d5927ad8cd5de4aa9308bdadeb2a46540be41a10e235668ee282d77dae27e39d4d84d26c0a123fd4dbeab373ad40fa709df29bb27d2cffceb2149d
- TLSH T1312199F2212507280E4DC399BF703669C7B3A0CBB99056E2D05DA88C42D97BFA8253D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 99ccafec55d3712441a5ed2221edb1aa834d14f0252e0d0bcb61671ac17c060c
- MD5 ef3aa171b6ea442fca04d05880826887
- SHA1 3f0a829826274f04080b4551f07ecc5328f1a425
- SHA512 b9327c7252741a5b333bdb71d608045e825d29c9ac6483f21336bdd6e6483f38fc7970adf45c9e885c295b27b0327aaf5dce4a2dae9a6c7c1094a1e7cda6d426
- TLSH T1882199F2212497285E4DC395BFB03659D7B280CBB99042E2D09DA88C02D97BFA8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 fb5afab3e0f4a308e26fadf910201f093fd3aa8f191681f6a6fa4901ff1bf363
- MD5 3945688672a4aa7642e8e0d19da5a358
- SHA1 e2b897e32934716a5b99f9ed2cdbe1c31fcec229
- SHA512 4d6d28cf96f08346324a9e0b8acd779a1a34a38f84da73b07abb612186206c11ed141a7444f67c82b15c12ce1e42d0c57d444bb8929506c35efd8c94b7a3024a
- TLSH T1602199F2112447240F4DC7A5BF703A65CBB380CFB99455E3E09EA8AC02D96BFA8213D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 27e949f42a4b163d6d6cc0fb680d17df4640dfb72eaef098a292cb07b7bee245
- MD5 5f1d02eaae461fa0b9994518a2b01765
- SHA1 bc145e32df5f96756de09c49caae47d4eebd59d2
- SHA512 f7a217ad66aeef622719d298708ec07865098f57bc60b85c3d9e5e76e57bb52a3332cfcb6ed88ea4673e701bfcc80f3b2018d172b3c152a834f1d1f0a8e72ce2
- TLSH T1812199F2512407241F4DC7A5BF703B55CBB280CFB98455E2E45EA49C02D96BFA8613D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 f0ea3129c088466d430e5b6aedf06086f63e9141160ba900e511a559dd3f3a33
- MD5 a095c9b629639c6b60efb0a38e9d3e21
- SHA1 a4f9e35f6b0dc39919e0a377c0a47df6cf893471
- SHA512 af638abe2d716718fa6783c191313ea1429cb39848f534487b666d1ef3694c4434fda61a59304eccd373faff2d0a2c1515924e2c5e92d86efc34a064fc8c41d6
- TLSH T198219CF2112407244F4DC3A5BF743A95CFB280CFB98055E3E05EA4AC02D96BFA8213D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 7df6406161f7ab4db8255ad6aa0b60eca9c8998460ce5a5d9b149b70fca467f3
- MD5 bceff82e5194b6a6d61fac10d1d0071a
- SHA1 17a529f5af6538488b692c0aa0be8f5c13cab5db
- SHA512 e2abcbb2d4b8d61a5a835ce399e70507c07a44dc6dd0fe7f34a3c8fe60d64089fbbd0b0530c4ac7383c1591789c76ad6ab5f0f2c7cece96703de5ffac47cbc7e
- TLSH T109218AF2112403241F4DD3A5BF703A55CBB280CBB98456E2E09EA4AC42D96BFA8613D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 c80924595a444f7b2d9f55ca21af69122a0e337b21f96f8845e435df011e2974
- MD5 399f31f074bfabe660d3213ea40779f9
- SHA1 5d275f3e79525e05040187a2434061179d98ed98
- SHA512 3baefa19e701f9667e6df483f88afea5ac9a304f7daf9122e5bbd8438217098e4416a8d087a01d3a8753c5431365df443cfca0075bbbdc7de604ce9d81015a9c
- TLSH T1D1219EF3112407245F4DC3A5BF713A55CBB280CB798416E2E45EA4AC46D97BFA8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 d79944e8f259806cdee13b6f13f7682a14646fc9a059ad5aedae77b605706a19
- MD5 72b794f4f0fb1bcc776a3b4953af9496
- SHA1 46baaff490f8df098e4b9115b576a2f0873e57d3
- SHA512 31ddce95de0ccf9eea8d502d391f04f987305caa15d9713562cb4f58035327d66ddff6b8534d98a2e2edd0ad5f64b35d8d21710f493630761dd0f7db382104c1
- TLSH T15A219CF3112407240F4DC3A5BF743A55CBB280CFB98055E2E05EA4AC42DD6BFA8613D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 052382ef6de2b16c56a8d424d85d1e9ae1b21e3ae66d741a224be6782578bf28
- MD5 0d571618dea3507cd40cf07f224b1896
- SHA1 c7efe5f3f65e028684bdf5fde28425fceabffa5f
- SHA512 74a8dd6af1aaf39ef40fc2401a49909931bf3031ed85993ec8c46432fe020f8a7f01fcae119e40396d66b7338f22e385e6e1d82c858adb73f2086b6192d28d00
- TLSH T14F219CF2612447284F4DC3A9BFB47655C7B390CB798412E2D09DA48C02D97BFA8253D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 eff1bc06a17d9228772e1a68173ace97f26a34acddbee3a61b7873d0b3e819d6
- MD5 786f19fde07777df768ee5081d68a3f3
- SHA1 35f4fb4e0824c44cd1c7cb45f3e59d84f587956e
- SHA512 70cba4cd1eebec98ef7aac7b9e26d67a3d7cea2c9e0d87cf9dda6fda229ca287ab0c497db59be14fd678d4f158699cae9e1fea8fd7e7e74983fa0436594b4329
- TLSH T10E219CF3112407280F4DC3A5BF753A55CBB280CBB98456E2E09EA4BC02D96BFA8613D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 67a001cb74b0c3c31ca067032944a31af8eb2c4c465e69bf01a00eefeef9326f
- MD5 2ae7c5df263c3e654c26ebb200801d46
- SHA1 25968b177b3494a93a2935366da78182fa156996
- SHA512 a0e6df8c774d555144f9819ad47f3b5d4096d356d350771cbd042532013b42d5ce5f9414e2953822a00d763c5f20005337cb560e568fb387887c58810269355a
- TLSH T1C8218AF2112407284F4DD3A5BF703665CBB290CF79805AE2D09EA49C82D97BFA8223D5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 2da0cb5901bec9d5aa0a46aff4ca8591bf5804f37d2a4657101bd989c166d1c6
- MD5 ddd06ad1bff880968bc5b4887f3d0ec8
- SHA1 57d347d37cc4070031a05beb63e1998ed851c584
- SHA512 c1bf7d1f92c310a456ec3643575941b4e52cae9a4f621a30b1a1014a12ed239f3027599a4109b7046be71b27e7032f71dbbb6525d2d62e195e54b879cefd269c
- TLSH T130219EF3112447245E4DC395BF703665CBB290CB798056D2E05EA89C42D97BFB8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 729b7cbb517a0793a04a7564704a73d7ff97001aef4447da091be0f78481d185
- MD5 a6bfbe2c7f9f5e24677349f0702a3a43
- SHA1 02f1ea73626d38be8ba340ce0c431cbe47301811
- SHA512 493ab696d07eceec65cf199d0a7b41e8f7e33b597b9cbae55030a3b0cc58f4b82256281245c7c7b686dfaf805186e3e6aec835b54229a0e9a4621bc7f24ebe33
- TLSH T1642199F2212447245F4DC395BF703665CBB3A4CBBA905AE2D05DA88C82D97BFB8213D5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 79c4f8525022699bc6c38538f3e87cae5cd8a433cd5a61fb6d1fd275f56d2824
- MD5 10d753c436d18a327481846304daf9c4
- SHA1 161aedda768b3b14a7c2ce0adfd575568ea46922
- SHA512 bf2d39817059f560cd8c9805077a12c85d680ada7160d3e3ec252c0980cf27a41265ddc2ae1fb952b5852d9c140fa8b38fe7fe49ab1948f00df82374ab2f3080
- TLSH T1382199F2512407244F4DC3A5BF707A59CBB280CBBA8049E2E45EA4BC02D96BFA8613D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 8cc1e3892880fa2831f0dac4c115b8f74a347103b24e5966c06ba82dcf8b6118
- MD5 16ba06911ad887a3afcbb954dc7f5315
- SHA1 c23d58316685cba7c9987b2ee07a70b0570c530a
- SHA512 bc39b120f1eb0f17fdc51fbee080b7ed1ff1960fdc9b23cd3f395f1cf3ac880d5e59c1f7c8d689ca0eb00e1bc34e27ed0fc1c0ad85c22a388d64f01e44701c20
- TLSH T1A9219CF2212403284F4DD399BF703665C7B3A0CBB98016E2D05DA88C46D97BFA8253D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 cecbafa6f26acf2033781fb4d252d96650f41e4e25028580492049de91733b58
- MD5 9efee3605233a16107db70012c7d7e1f
- SHA1 a95f7d5c96e41655bf391ce4b3174551019ab13b
- SHA512 b99bb8d338fa65ee89018e0ae458688a9fcad56517adbd67abb26c997147286279654dfabc1bc6e7219246c4f2fd9e3be8bff641ac39b07fd2daedcc44a9e284
- TLSH T17B217EF2212407245F4DC7A5BF703A55CBB290CB798456E2E09EA4AC42D97BFA8613D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 86f54a16a06f0086440ced5f4738d78c20d64eea619188322d24dcccbb1c4932
- MD5 b8d593cd92ca86f6d71a5f5f7a7749e9
- SHA1 2fd3b6654f297d3b19807c5eed4ee61964cebe1d
- SHA512 05e659ddeec51d542f9ef26dfd1c1ddb6610a15b869430a9acdde78ea5368d2a03528ffa7a4bcd834cd8c15d672c1a68f28431d2a3a1dddbe2007911ef5b8eb1
- TLSH T135219CF3212407244F4DD3A5BF743A65CBB294CBB9905AE2E05EA49C42D97BFB8213D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 181683d8fc1e71b1f92fd809b25301731cec20506272db2cba112b8f41a19b19
- MD5 5d57c758c51feee8920eba5a52f237aa
- SHA1 1b202be58c8923768e0e001478429f43d6561ee9
- SHA512 e3ea1ce12ac52bc7d27a65dd4ebb352bbc2c43cd6fec1df7096a1289c41ea387d3d258a49b110ba41fc8b7bd4212187826deee5d7cf4364c8a7299b06200fe78
- TLSH T131219EF2511407240E4DC7A5BF703A65CBB290CB79C046E3E05EA4AC42D97BFA8613D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 ac4f7be820ad0850fc4252c0f26e94f0565ff178b69eead23bcbd5bf50e6a1af
- MD5 d9416b91972dc35084df672fd67b9f7e
- SHA1 d7ea8cf9deb4eeda12832c3d61ca903665d0988b
- SHA512 aacb1b999bdf0ec73f4c56e81116682fde8b8eaefe1b99cd1f9c9e1ce5e3e099f429c7de6bddc35d62834531e15911ea5eb1d7d70bc73b6aed50c527a97a9e68
- TLSH T1302176F22125032C5E4DC79DBF703659C7B3A0CBB98052E2D09DA48C02D97BFA8293D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 25abec40f3170f728e5846dce5167cdf69d930ecd7a22bf416ff8e29723c91a3
- MD5 eaee3de384ef14f4a57270c3f33f3049
- SHA1 e89f1e4ce8fbeb4cc6d1386474234e1ebae078f8
- SHA512 648c44534904e93974cf35b38a0f909c5658f1ff3bf1941e05dcbd97d220257c63c025db592b47eced8376082d261e5eadd2bf4e6d8d48be4e20d1b732b0c228
- TLSH T1D8218AF2112447245E4DD3A5BF703665CBB290CBB9C05AE2E09EA49C42D97BFB8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 11f7abb8c9715f259dae64935def7316cd117de1f3fa15d350cef2baa76185d8
- MD5 50a95a3fd2a8a7b40671e2b4eb58da76
- SHA1 bb8f5d2f4d057b5891aae56fe8c780f73638209f
- SHA512 b6fd2aaa825138badd671688c93ddd809f4638c6abdba8a09831157cc46d9457055439ee979c2fb7b2ef2d4b9f466e5b9ae05aed187d7ff34ca3cab88fe82835
- TLSH T1DB2199F2612443284F4DD399BF743655C7B390CFB98042E2D05DA88C02D97BFA8653D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 981c1eabb87fd914e8daab075d1a6b4dca3c3fd766d711dac6096035cac843af
- MD5 03cc093dfbb3cc7e4178c7518171317c
- SHA1 83b9ba51e7b78eabbf355a6e8a0726dc3fa55e25
- SHA512 38b464452b86b79c05ca3862a88a4be89bb03a34fe756d286e8761e49f81f3efb78557193dc3d7b46155dd1cac0483e13e27b8d1dd2cdf04771f266599af0877
- TLSH T192218AF2112403640E4DD395BF703669C7B290CBB9845BE2D05DA88C82DD7BEB8613D5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 19c87434c11c93406b49b965c41d58e71e3bd1ae52bf4d6ab47c8a2ced537980
- MD5 14f0f2afe1a071463667dd0a0084a43e
- SHA1 febb54754aad33f388f201218c5ff64792d5562b
- SHA512 f57d569e6db4665640adcf51b63349f7d247e087a05525c4732fbdb31b115c97106ebdd80b8de3094159d437f25d38bb7824d1114d5c748b0d8757f7fa343502
- TLSH T18E2187F2212403284E4DD399BF713665C7B2A0CFB99056E3D09DA88C42D97BFB8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 b65b1ea1304b55bda258a451445ad09fa809231283745374b264aa75170e9c7d
- MD5 b2b5e72fe78314af7c7afe3f926d089d
- SHA1 c3eb1d688d11365f50250bf10293ecce995b4a85
- SHA512 aa81c617bd8f535646ad5c528f5a84c1bad8622df6b9c86d424a1de83e102c08ec7f07d44dce0711de96fab418f05e352035d94d66467b86ea4983c097317b2b
- TLSH T1CC2199F2212487284F4DC399BFB03659DBB294CBB98442E3D09DA48C02D97BFA8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 974e57cca8ad7f381c186a57843b7c79ee4caeedbc822e3a4cd647a84249ab2a
- MD5 e4962314521a96380b297699f80fad46
- SHA1 a4ce931a74e1f47552b2f384891ea61e8f1e5ef9
- SHA512 c4e915aa1d489454e36e7c4cebbf5dfb4c65725c358d1efb1eb8a1f56b5be4a5b4fd32d5c05b0f3b638058aee2cc3ee8e5b243b8b9d8a40e2d878b83f83cc0f0
- TLSH T1272185F2112497240E4DC395BFB5365AD7B280CFBA8452E3D49DA88C02D97BFA8613D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 e03da4a1f23288a9f7bf89c1d4395692598556af92fa29ef9c32706af3c9951c
- MD5 0915803a34c2a3ad3986bf097d207691
- SHA1 59c6844c7751e2f98b142b14867c9f146a763f1a
- SHA512 6eaca1d1a3179b498c62cdcc6fa5d6490c5951157b23be2aaa4d85c71ba47612c54be85109b1a77c58c3471b761d63064c135d4adcb0933be0dcebc3ec068ed9
- TLSH T17F2199F2212443284F4DD399BF703659C7B3A0CBB99042E2D09DA88C02D97BFA8253D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Default\ssdfp1644.1.1888844879
- Size 1KB
- SHA256 fd4706f225d95356d1b838fa31307e0b07491a1d6218816141b64aa189afc65b
- MD5 dc0ffc5b5561e00f712657545a1f113f
- SHA1 a1d92b4489392e9e28e6996542aa9e4f86de68f2
- SHA512 908b15559d0653e5995af5e933aa86c5205e29413e2b17eeb6db3a41be819f32ce570e9aebb6fcfa203140eb5eba77be5267a2c0875b7dfe9cf301775a1cf9b1
- TLSH T19C2199F3212497284F4DC399BFB47655C7B284CBB98452E2D4ADA88C02D97BFA8213D4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\GrShaderCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
- Size 4KB
- SHA256 a0a1bd17e39cfc30354edc081d891f5580db470362145721d1b44d9f155941f0
- MD5 fe209d94d3098174cb32c87ef1063e5e
- SHA1 375b20c8ae3b410858f9e0ae0de03b4d6435dc05
- SHA512 beaab83805721944d72c4072b4899527fb359d45d5d3f186f4532781d5406ae376c10e76e712a4c7455cadbacdeefc396e40b1329dc1a455ff931fe222cbb883
- SSDEEP 96:Ypuwq7WGxdJfiVDoto9YbjkiOkNN6ECBUSNTbK1MJIa:YpM7xmDUdhlMaMF
- TLSH T12BA1FA77D449CD27D9EF0FAE22093E57E760510256884FD4C8CD4F0C01EF5EE266682A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
- Size 4KB
- SHA256 64d0a6fcd93bed9a8fc7dd63d230b182c4de3f93c3f9fe896e85301729695812
- MD5 1a69dab7a75f7414e7ddcc780418de96
- SHA1 3abac6130d862c78db3a6b29858e24e8ea34e955
- SHA512 e9149dd2d1aff6dab23e5cb7eca00334aaae7ae5b01aebaaced7ab06471021b0e6e1c5efe0afdcfa6a29d0a97b93b1d71eb3b64a9f3cbe8b3e99246c93b2b1a6
- SSDEEP 96:Ypuwq7WGxdJfiVDoto9YbjkiOYoom9oZo+lyV1MJIa:YpM7xmDUdhihMF
- TLSH T121910A76E449CD27EEEF1B9E22057A97FB60111242845ED498DD4F0C01EF5FE263682A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
- Size 4KB
- SHA256 694a13bbaf85d95a273394464f6a6ff1ddf1971f5e9e461b6bf2cd12a5ef8246
- MD5 992766dbdc93a2bd8b5ac5801bb25259
- SHA1 c779a6183b70f8d099d964ee3b75b6552ceed959
- SHA512 44c1582d4555f1df3dbe0bc290b8ade28d26361e8dccfc427aa37aefcf8d8b2c732c9c80aa82188bbc8c14fc37c09ed4f9ac66c989ab04566cdbfb6fad664aef
- SSDEEP 96:Ypuwq7WGxdJfiVDoto9YbjkiOk1o6ECBUSNTbK1MJIa:YpM7xmDUdhCMaMF
- TLSH T1C2A10A77E449CD27D9EF0FAE22093E57E760510256884FD4C8CD4F0C01EF5EE266682A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
- Size 4KB
- SHA256 ce6a6199e6c1c718adc9a3d8eda9c54c9f19ff2d5f8afecc471bca669ac38de6
- MD5 7bebf526dd9744613f59deac985e07d4
- SHA1 f374b0d0c788e67e27dbb9a7e7358de7fcaa5347
- SHA512 5c59478802b492a84be43fcdce894483d0445693cb20a610b957986c34f6cf038537723e60b4a809fdb23348aacac315b077d46683a67326dbbe87a8f64b3ea5
- SSDEEP 96:Ypuwq7WGxdJfiVDoto9YbjkiOk1o6ECZoS1yV1MJIa:YpM7xmDUdhCBMF
- TLSH T166A10B77E449CD27E9EF0FAE22097A57E760111246885ED4C8DD4F0C01EF5FE263682A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
- Size 4KB
- SHA256 2e0238ebabe8eee5874aeaf2fc92e24d7e9c54486c17d77eb7bee8e59b066b81
- MD5 c73f8a39428b3da9f550de0247534427
- SHA1 08eeafdde4f62ce2a280f4c01e0f214d9c326617
- SHA512 22e838fc00dd3fbc06188edf26bcc541afd390b7be06340dae65c9ecaae1b7fae934336aae00249b108dd9a4c3dc9ab6d6abd8314af0ffe043b5976d8432fae9
- SSDEEP 96:Ypuwq7WGxdJfiVDoto9YbjkiOk1om9oZoS1yV1MJIa:YpM7xmDUdhHHMF
- TLSH T1C7A11B76E449CD27EAEF0FAE22057A57E760111242885ED4C8DD4F0C01EF5FE263782A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
- Size 4KB
- SHA256 d2d0f0b7fd6836a59f9adff2729698d74f837b5b469e795d164c7c2df9efdf27
- MD5 6adf4045fa0a9e619396521369c2109f
- SHA1 3ba0d1897bd1de6b710a66bb78774e8b1e62702f
- SHA512 eaa1b23a23d1e28da0a768c077c1b49688c5ec85559340d11d773646f9d0d9fa45a689f5b285856f6309e53e0ea6312dcd1ba4a6cb7aa2b88b5a5f1c3eddd29a
- SSDEEP 96:Ypuwq7WGxdJfiVDoto9YbjkiOkNlPpECBUSNTbK1MJIa:YpM7xmDUdhBaMaMF
- TLSH T1A7A1E877D449CD67D9EE0FAE22083E56E7A0510256885FE4C8CD0F0C01EF5EE2A6682A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\Local State
- Size 4KB
- SHA256 61ecceb8e46ad4a38c929a6f41d7bc03150fc36a33267700b7c141fb2a93456d
- MD5 d9be26a134fa7deb6dfddaadc7ebcc72
- SHA1 08554de933d35e0b885b268f21c9b4cda337160d
- SHA512 feaaf3d42da6cf52a06f84bea9d12d2493b1ea87e53dbca655530a2e750f13d6ae2be9ffc783b7aa6d5dd8f2b550c052a9569f740ee7de64ae5944da7a5480e0
- SSDEEP 96:Ypuwq7WGxdJfiVDoto9YbjkiOkNlPpEGfUSNTbK1MJIa:YpM7xmDUdhBa4aMF
- TLSH T141A1E977D449CC67D9EE0FBE22093E56E7A0510255485FE4C8CD0F0C01FF5EE2A6682A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\MEIPreload\1.1.0.3\preloaded_data.pb
- Size 8KB
- SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
- MD5 a01c788456b7771739d0c770da676ea8
- SHA1 23b67e6618949c08a0a214d920fbc9779bf89377
- SHA512 9846efd14ec46154b7b80b89e08b30bc8f82ca1b11bfaf19ebd4f1f32b3f44fbac8ea8c33203070c4414cbab9d727d2ccc4f1f733b64cbea880c0b516a16a8a1
- SSDEEP 192:/8bnweeDe4NkGNXDsyEsR6R6Oh/CU3y5M1ZJ8jmmOd:/8bnsa46GN1eRv/RR7J8jmmOd
- TLSH T1EA029F068E4B3E4F0D1A964D49863F56373B216751C54C8CFF9B992A4069761B0AC89D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\Google.Widevine.CDM.dll
- Size 2.7MB
- SHA256 cb190e7d1b002a3050705580dd51eba895a19eb09620bdd48d63085d5d88031e
- MD5 477c17b6448695110b4d227664aa3c48
- SHA1 949ff1136e0971a0176f6adea8adcc0dd6030f22
- SHA512 1e267b01a78be40e7a02612b331b1d9291da8e4330dea10bf786acbc69f25e0baece45fb3bafe1f4389f420ebaa62373e4f035a45e34eada6f72c7c61d2302ed
- SSDEEP 49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
- TLSH T1A8D59E03D68300C9F459C8B5D7A6A536D5703D4A4704EBEB9B60B7762E73FA09B3A309
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\_metadata\verified_contents.json
- Size 1KB
- SHA256 43daa4139d3ed90f4b4635bd4d32346eb8e8528d0d5332052fcda8f7860db729
- MD5 3e839ba4da1ffce29a543c5756a19bdf
- SHA1 d8d84ac06c3ba27ccef221c6f188042b741d2b91
- SHA512 19b085a9cfec4d6f1b87cc6bbeeb6578f9cba014704d05c9114cfb0a33b2e7729ac67499048cb33823c884517cbbdc24aa0748a9bb65e9c67714e6116365f1ab
- TLSH T123312BF9B981F25B79163611A1B66C31770FB0E238A0B05169C865EECEC4B03E0B3007
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\PKIMetadata\1733\crs.pb
- Size 344KB
- SHA256 4d604c5342cd4438e047f13d7349e0cd7888769449c280da1e8077157c157d0f
- MD5 c70542c3a7b21d45918e2e29d2dc9120
- SHA1 41ae2fa9dca2af9c7c57cde367d04964f5d66841
- SHA512 1571012dc9d22ecad0e90dce2c80da7be6c35f983b1e8fcb38d8a4b743d2fcc4ea3c6a4bbcb15d548d4a9fbec782b048c2d4be07fc693662386402482e5b3552
- SSDEEP 6144:eHJ2ZpNiFvVYJTc6HoGpFTyz5Xtw6xrWtefZBSV7EwNZ/7gWy56kGFk:u2ZpNpBhpU5Xt9By7Ei7G
- TLSH T11E748EDE0F387843AFD2CE50B5C8D53BBDB576D17A9A54829049C4F2A9823D17F8812E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\PKIMetadata\1733\ct_config.pb
- Size 52KB
- SHA256 164e0e5564866e848a81f28b40ac6cc26998aaca49c967efd5278b30aed2226f
- MD5 b1e3e6c812a0b5e059626c3d0e4ad955
- SHA1 fc6c0bfa8bc2a9fa3c46b27e494acb7230008372
- SHA512 3aece2fca12ecc50b6f6915bbf7e69763a45d2f643323708957730516b8bff3693bb0aaee3f0c247a6a48be4e26c26fb94eef651bf163c0fc3a786860069a319
- SSDEEP 1536:TPr8wtb4wMPPo3nOXiEuY7vg179yvOJgp1fAhDnG1Gq:Akggt9yvOJC14h6
- TLSH T1E3339DB774049F101B039265F5FD7B9AA113B3A98CFBD93FB2E25008F7442A721A9536
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\PKIMetadata\1733\kp_pinslist.pb
- Size 10KB
- SHA256 8990643ca68e590ba48da9a25235f7bf30f38204f416ba5ae0862385cd9394a1
- MD5 5f8b8281cfab3b3290b701da7d8e82b4
- SHA1 7194da0ae5fe1fcee20ec01349f7554e7fd4fda5
- SHA512 5199dce2f258464d27077f37f1525bada07cf802d13c76ef326ffd7155fd37fce694417058250969a17f8750d1074fdce06fedbc76d642f4496a397f322a58c8
- SSDEEP 96:Txk+yBjecaikDBwrXnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gKn:u1IDCrXnYQ5jlMacFwn2c9S
- TLSH T1862203B37904F99350E7E0BE1001F59AE93343A540ADF98A528C4A7635F1F0729BB0EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\SafetyTips\3091\safety_tips.pb
- Size 180KB
- SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
- MD5 ed136d4c105cc252f52bceed4b36ee35
- SHA1 2a3115d95987d638d9095af51f0a70c1e9893728
- SHA512 7b7cfc3adf944628b0ef6224229f7def0543cb7d41cdc8bb6b2ad5be2338a0173fbe63490f8d742f4c006e88652d191e24b4933e459f03cea2570085b95297b9
- SSDEEP 3072:2LHCaFAH1Z2dUZ7ViebPO8B6wAppi+NKfDRdwt20xrFzg7NCmDAsf6B9D:7lVAdkXPOaRdwtzre7NChsf6B9D
- TLSH T11A043C49F84703A06F0780C99BAD62972104B2F47395CDDFB77FB6A56E00C9B20995BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\assistant_prefs.json
- Size 151B
- SHA256 1512e786c1c05b5ebf270c2abc451270e8ffe14586ce269c071dcf2c027aafc4
- MD5 f142db4864b56ccab97278f9ffceb3ca
- SHA1 7e58c00468056d6248f3f3090fea4971f12a3ad9
- SHA512 f9e46f05d70a9c79bbb447ed6cb9e36a72f1bbc6cb70f8859596e1ebfd306abf907f5170d3e889091741c51c9d2e6b22d5135c46f0b33f96afb55c186cd2c86d
- TLSH T1EFC08C0C02833896C0D60A8423607C48C384B706C4CBBE3322E92A384FC42071696828
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\b444ca84-7d04-4ac7-af1d-10d5e03dc607.tmp
- Size 151B
- SHA256 54189afb5881c8bce1a4dad2412958e0c5999d23d86f449fc25963774298a590
- MD5 1adba5297df7db83bcc9b7e8165f52f1
- SHA1 18eb515fed6c24004780c45954b496a455f1dbbc
- SHA512 933bee40554df5db868198f43ae516cdd04aac59687878204511523059caa4c0571023b84272ac30c0f950260e0214cb214b0f01a1fe8d99b21c432002fb9f84
- TLSH T1CAC08C0C02833897C0D60A8423603D48C394B706C4DBBE3322D92A384FC42031696828
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
- Size 572B
- SHA256 6032ff117f6aabc11c4d30d51f940e920dd8ab1f75d174d6a6936fbe0195fc87
- MD5 832799b5aea34e57426968c6b3a5f15d
- SHA1 21548e5b925056463f5dc66260f425cb090b2954
- SHA512 96c52c2e56d3b638df5e70f272ee09ed6107e577c899ffeace9cb04bc4ff7ede99630689f64f4597d85abce391df1dea804a584227eef232575de535cb760763
- TLSH T1D4F0E1D0440E16D26B482D4E84AE71EDDAF1378E7FB09C3931636380012A11A380087E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
- Size 908B
- SHA256 b821bee42e816ac21060be231fc0459cc31703e5eef4ed9eaea89dd34d9505d9
- MD5 1242db97c5f7930ac7c226cd34ce18c7
- SHA1 5555ad7d75a94d6798d76cd9cf195bf5e1604ea8
- SHA512 4dbc6f0e12823d9cb64cf6e188d9d25f7971d8894f2d8a2e81a1cbdb5d27dd85452501e9bd03993d091e950f7aeaf752b7b095cc0c8e73d11ed9fa359b28d502
- TLSH T15F1123D6494E17C117411E0F94DA74EDDAB5BB4EBFB1693D2163B180073A16B3811C7C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
- Size 236B
- SHA256 b9fb533e0692961868bce079b74b40f6e98f5a69b5b6595d7e08ce2771f8a853
- MD5 fc7d5986526e05947d0e91efbfa661fc
- SHA1 f6b5d5c893fbfb5c9188098e77bfd252cee62d5c
- SHA512 1074653b5508fbec97332ae254bb59dae84bc45f8bb910ec3d6dd027c86fb42e3a391751ca0b84315aa5e46f878d3959dfde5694e1e1e0893812c6194c2aa206
- TLSH T183D097D8C91802D23B800D8F00C932DA46A6B2863BB8202B76A22341000714C340180C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
- Size 124B
- SHA256 c74727215e1ec967a558b5fef0b88a3901480bc5a2adcdac733717d2c4bd6561
- MD5 762cc22be9173a5ca728ea7ec4e9e822
- SHA1 163608dffd725022af902a57410f03a670d52bcb
- SHA512 717134ff23f082288b0e9e6768718e17ad2f7d4600770c75bf011d0587920588a94ff1d8031d5b14ff4013c1deeb8a52cc5c4c48a52320ed3d0caf48df03cc45
- TLSH T1D8B022C80A2E22E20F800A0F00A88A2A8AC8320233A820082FB80000080328C280080C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
- Size 684B
- SHA256 078c6417df6984b22fd871e36f467fbdba6d185485f41fad1ca7e05a331118ba
- MD5 73c9d82b090ec7b998ceb6b1c9073a2b
- SHA1 8c4891f7f959d80317987fea01abfd310af2e03b
- SHA512 e1a954c1d5ffba921f03b1241d6ef571ab8563d0e3aba4c1c998e0827e3a61026e1209c8c371bbe7542a00c0f9c5a84b598c8ffcaf17d7200972b2757390e6a8
- TLSH T18C01FED6444E16C26B491E1F949EB5FDDAF1774FBFB0A93931637280063616A380086D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
- Size 348B
- SHA256 c5cf19612f2071a1892925a5005ee027cc1d7f6f075613068339bda8f853d730
- MD5 3960c1dadd077d4bafd3fab379f4cc7e
- SHA1 ce287ab6b9be97a91a0604f4d57d4c36ea1a0f59
- SHA512 589baf04978dd89bff5ddbbbb41a5c68978aabd9ae6e33a397308b09ae74690cac5dc7509833a3109672bd9a1701674eb818d8638e69dec23c1193fb524f7a55
- TLSH T121E026D8CD5D06D23B451D9F44ED31DEAAB2B5CA7BB5683A32B262C5041B529380191D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
- Size 460B
- SHA256 8a051bc8c7bbb2630d2121cb0e3b4e183ddab7eb8e1b523e5820112e2c4b1208
- MD5 a892ad21834cb5288a4d5662c6ad7662
- SHA1 54b09dc41049c6b1cc571049ba308853e6f680bc
- SHA512 280f7eab436a087e54889da73e3a42562917e6e5bbd1025cf084fd3ea5a202731b1775c5d54c6d922aa7696f1031a327bc743e54f22f1cf59ebb9b7a8aa39526
- TLSH T1B5F0DCC0881D12D26B482E8F44ED35DEAAF2728F7BF05879316362C000271293C1042D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera GX Stable\component_crx_cache\metadata.json
- Size 796B
- SHA256 303893e9af88d4e4cc707d45e24771d37baf212b86237d8044eb622b9f0f01f9
- MD5 14047ae80806bb0a6742eba9de18a128
- SHA1 a7cbef25fe625d4c0def825425184a9d2ba9ab7c
- SHA512 9fd8e0e9ac45d4b5350c0e444b602336623ab3b379ac23cc8a6ca18b77c227e3f2c240eae1ca74d575d271d907445780645649fac442337d8dac4ea233356f49
- TLSH T15B014186004E16C217841E0F90DAB0EDD6B1764EBFB0693D3137728043351673800CBD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Downloads\Roblox Evon Exploit V4 UWP_56952442.exe
- Size 702KB
- SHA256 35d5cdf23553b14ad8051f68b1af8199805f06479391888f609af4ed54ed5a63
- MD5 cd85c75fa053954c4ae4ee338d3bcb63
- SHA1 fb2fb89c667d901ef01600dae3f027c7dbfe16be
- SHA512 f0d7e4732df889e6513f67e266c68bf7490c513bb78736b4fac4d90ed49040415a500ae8f0f9b696e100a92c871d5cf80fdb628bec0f42e3a531e1a636873f6d
- SSDEEP 12288:utflJ50c6GeHR6Kjx288tG6rmC0tzeIiZ4fFo:ut9J6MB8gGaUtze74f+
- TLSH T123E48C16B6A801FCE1B7D179C9524912F7B1B847437297CF03A05A66AF2BAE05F3E311
- MD5 SHA1 SHA512 SSDEEP TLSH